Except that isn't what's happened here. What's been published in this case, to use your example, is akin to someone saying "If you use this particular format in john, you can identify 4chan users." Nobody who knows what they're talking about has ever considered anything like that egregious; what's egregious is the idiotic self-rolled crypto that these researchers have exposed by doing so.
Comments
You mean the publicly posted IP address <-> post link? That's not hacking.
That's sorta like saying that running JTR on password hashes doesn't amount to hacking.
Except that isn't what's happened here. What's been published in this case, to use your example, is akin to someone saying "If you use this particular format in john, you can identify 4chan users." Nobody who knows what they're talking about has ever considered anything like that egregious; what's egregious is the idiotic self-rolled crypto that these researchers have exposed by doing so.