<< should have used it himself........ >>
Exactly. I can say to anyone who finds this kind of thing out... Don't demonstrate it to the credit card company. No matter how hard it is to do, no matter how complicated it is for you to find out, DO NOT demonstrate it to the credit companies. They will arrest you without a second thought. If you're in jail you can't tell anyone how to do it, correct? (at least according to their flawed logic) Either tell noone and forget about it or use it and take the company for $10,000,000 and escape to another country. There is no other option to stay out of jail. Blackmail won't work, neither will just informing the perople that they have a vulnerability.