Sadly, exploitation is often much easier than protection. They only need to find one hole - the defender must secure everything.
Oh, and it's probably not good to encourage this kind of thing either.
Oh, and it's probably not good to encourage this kind of thing either.
What I disagree with is the "giving them a job" bit. I don't think that rewarding these kinds of people with employment is right - part of working in computer security is having a certain code of ethics. Whereas I'd much prefer that this kind of stuff be made public, giving them a job is similar to rewarding a thief with a job as a cop.
People are free to disagree, of course :P
It does seem clear, though, that we all have a lot to learn about protecting information...