I really appreciate (again) what Rohan done. All these shows hes a very nice person who never do anything un-ethical - which is not very common these days. I am very proud hes a member of ThinkDigit forum, also very happy hes my (our) friend.
I think we need not worry too much on him !
First - ThinkDigit officially announced that they will never take any measures against him. They are very glad he didn't misuse the info, they are thankful to him .
Second - Rohan agreed that he will take precautions in future, he already know the loopholes of legal aspects, he is pretty sure he will not get in trouble and he know more on the legal side. As he is very confident in this matter, I think we need not worry on that.
Third - He might have his own (may be personal too) reasons not to disclose much info on the hacking as well as the legal side. I think we should support him and respect his decision. He already provided the details which he can reveal, I mean what sort of exploit was it, how it was vulnerable etc. People who are really interested can learn more about this from various sites, can ask him in direct but I think we should not force him to reveal everything in public. That does not sound good.
Personal suggestion to Rohan - Please feel free to fully ignore if you do not like.
I know you will be busy with teaching etc, but please continue on this. Learn more about the vulnerabilities, exploits, how we can keep sites secure, what are the ways hackers use and related matters. Just as a hobbyist (as your site names). I am sure it will be interesting as well as useful. It will benefit you and a lot of other people who own websites.
Once again - Hearty Congrats from my side.