One thing that bugs me about this is that it MAY be a crime. Obviously, it SHOULDN'T be a crime, but depending upon how the law is written, it MAY nonetheless technically be a crime.
The public is ignorant of security. However, it's the ignorant public who write the laws. They are apt to outlaw things, such as Georgia's legislature that tried to outlaw most legitimate cybersecurity research (which the governor had to veto).
It doesn't matter if you are a good person. It doesn't matter if you are doing a good thing. It doesn't matter that you legitimately believe you aren't breaking the law. It only matters what the ignorant public wrote down as the law.
