story
As far as legality goes, I think the attacker is in the clear because what matters is the code and not the intentions.