"The representation of hackers in general media is so far off from what I do
actually, it's terrible. The one show that gets close is Mr. Robot."

Hacking products is fun and easy but, when flaws are exposed the real world
consequences can be a mess: bankruptcies, services taken down. It's good that
Scott has the BBC backing him and his work.

No special tools required to hack web applications, start with your browser's
developer tools and use a proxy like https://www.telerik.com/fiddler for
easier manipulate and replay requests.

If a security researcher contacts you, they don't have an agenda, they want to
help you. If they had bad intentions they would not disclose a security issue
but exploit it without you knowing.