@SirTapTap

The CNN article is cagey on a critical question: Was the invitation real and who was it from? It was odd how the article's phrasing kept skipping over that.

If the team does have a record of written legal authorization to test the security of the system, that puts a huge damper on this story.

That's what's suggested, so the question is whether such documented legal authorization actually existed.