Hasn't there been cases where people got charged for unauthorized access to computer system by simply changing some identifier in the URL?
Data being technically accessible doesn't mean it's meant to be accessed by anyone.
If I understand this right, this is the equivalent of leaving a house key hidden under the doormat. Just because it can be easily found doesn't mean anyone's just legally allowed to use it.
Well, there was. But inputting or editing a url is akin to submitting a form or a get request, if somebody doesn't know how to not get breached by such events, they have no business running a website with delicate data
Data being technically accessible doesn't mean it's meant to be accessed by anyone.
If I understand this right, this is the equivalent of leaving a house key hidden under the doormat. Just because it can be easily found doesn't mean anyone's just legally allowed to use it.
He seems a hard person to have sympathy for, which didn't help that much at all.