OP should have atleast notified OgNasty before injecting any scripts.
Is that an objective standard? A hacker's opinion? Or maybe just
mutual respect and consideration?
OP could have done damage if he wanted - or sold the info. He did the moral thing, and there is nothing illegal about it.