Instead of fixing security issues on their website, Congress threatens legal action for pointing out the vulnerabilities