I received an e-mail from a company saying my address was wrong and they needed the correct address for they could send my prize.(a video game) I fill out the form, and notice that the prize ID is clear in the url. Thinking nothing of it, I change the ID to see what would happen and it takes me to the change address page. I enter my address for that ID, submit it and I'm given a confirm page. Now I do this a couple of times for different IDs, mainly because I was bored and wasn't thinking. One week later... a bunch of packages arrive at my door. Yup, the prizes related to that ID. (I'm assuming) Now these are not 'small' prizes... more like $100+ items. I'm almost positive that if an audit is performed... I'm screwed as I'm sitting on over $2K worth of stuff linked to my home address. So where do I stand regarding the law? Hacking is defined so loosely, I'm kind of worried... Do I wait it out, send the stuff back, e-mail the company? I'm mainly worried about being called a 'hacker' and facing $$$ fines and prison time. Thanks for any info.