Is this not incredibly dangerous and counterproductive?
Basically, a guy finds a flaw in a website, and reveals it (after being slightly nefarious to show that it's an issue and get it publicity).
For bringing it to the attention of the public, he gets punished.
If he had kept it secret and just leaked the information without revealing himself, which he could have done, the security hole may not have been notified to AT&T.
Basically it means that amateur security people will no longer find these holes in large corporations, meaning people who want to exploit them for personal gain will have a much easier time of keeping them secret or finding them first.
Resulting in a LESS secure system, due to laws which are supposed to improve security.
If your law against hacking results in hacking being driven more underground and people NOT revealing security flaws they find, you're doing it wrong.
While it is quite a lot, and they might not get that much return immediately, you can't really argue with the idea that the LOTR films helped promote New Zealand as a tourist destination, and The Hobbit will probably do the same.
"After the Lord Of The Rings films came out a Tourism New Zealand survey showed 6% of visitors came mainly as a result of having seen the movies. They added around 250m annually to the country's income. "
Spend $120m, get some of it back in tax/etc, and then get 250m (NZD?) annually for a couple of years? That's not a particularly bad investment.
There's more than just the jobs created here. For the US it might be difference, since lots of US cities are not appealing even after a film has been made there, but for somewhere like NZ, it can be quite different.