Yeah, it seems like he is claiming that you gained a lot of upvotes from the ordeal, which might be true, but I would not say that you are notunder any obligation to return any funds gained from voluntary interaction such as upvoting and voluntary transfers.
If you can, try to keep up the conversation with him. I think you may be the right type of person for the job. I can come up with some questions.
Here are some:
Since you are a white hat, would you mind telling the type of target you were after?
How many accounts have you created on Steemit with the intention of of using them as a platform to lure victims?
How long do you post and resteem under these accounts in order to establish their legitimacy?
Can you give us some examples of the different types of attacks you carry out from your accounts?
For the spoofed website which you got me with, what are some good pointers that users should look out for in order to ensure the website is legit?
You mentioned not to use the master account key, can you explain that in layman's terms so that novice users will under stand it better?
Yeah, I'm not buying it either. The question I have is why Steemit.com hasn't shut that account down. Why leave the guy alone? Are they just trying to be nice? Who is behind it? Am I wrong to think the account should be shut down?
I think that because of what steemit is, is why they do not shut down accounts.
There simply are no official rules. Also in the FAQ it reminds people that:
I know with the normal safety that people expect for others taking care of us that this seems strange, but steemit really does mean that people need to own their mistakes and their actions. This in not Las Vegas where what happens there stays there. This is steemit, and it is open for the world to see, your actions good or bad.
Thanks for your suggestions here. Sorry for my slow response to them. All great questions... and I will do my best to re-open the dialogue which as been silent for a week now.
If not, don't feel compelled to do so on my behalf. I doubt they would answer those questions.