Kurt outlined the Macworld registration code information disclosure vulnerability on his blog post, and there have been some questions on whether it really happened or not. I can confirm that it worked, because I was there when he picked up the badge and when he chatted with the IDG folks.

img_0331.JPG

CNET’s news.com even picked up the story.