Security Researcher Faces Jail For Finding Bugs