If you're looking for a lesson in how not to respond to bug reports, look no further than Budapest, where the city's public transit system is getting savaged on Facebook for snitching on a security researcher who discovered a flaw in its online ticketing site.