A researcher bought noreply.net. Companies started sending him secrets.