hmmm. I have a "friend":) that really put some thought into that. Actually this friend thought about setting up a repository that all of these emails can be looked at and recorded...then sent a friendly example of an exploit.
But then I realized I would be breaking the law. I lost my anger. and then the reality of it sank in. then it naturally goes to "why dont the cops do something like that?" and all the arguments of boundries and ....ugh.
CISSP, C|HFI, Security+, Network+, XYZ...blah.