Oh, and it's probably not good to encourage this kind of thing either.
What I disagree with is the "giving them a job" bit. I don't think that rewarding these kinds of people with employment is right - part of working in computer security is having a certain code of ethics. Whereas I'd much prefer that this kind of stuff be made public, giving them a job is similar to rewarding a thief with a job as a cop.
People are free to disagree, of course :P
It does seem clear, though, that we all have a lot to learn about protecting information...
These aren't kids.
Who says they haven't been offered some?
Somewhat akin to having a day job installing security systems, and by night, breaking into houses secured by your competitors.