A teenager told the Budapest Transport Authority its website had a security flaw, so the agency had him arrested