Oh yeah, they also said that they thought that I thought I was "too smart to get caught". I knew that if they cared enough about finding the perp, they would figure out it was me. The thing is, I didn't think they would care. They didn't care about fixing a vulnerability that I told them about (twice) until I abused it. Yes, just because I can do it doesn't mean I should, but if it wasn't me, it was just going to be someone else.