TYB!
Hacking free-for-all!!!
DOJ Says It Won't Prosecute White Hat Security Researchers
https://news.slashdot.org/story/22/05/19/1731206/doj-says-it-wont-prosecute-white-hat-security-researchers
If you're preparing a report to show them how poor their defenses are, then it appears this DOJ move gives you more legal leverage if you are targeted. It is not clear how thorough that report needs to be for each penetration test that you perform.
What I mean by the above: in coding, we try to find the most efficient way of doing something, to save CPU cycles (or transmission time, or etc). So if we know the "boundaries of the law" then it makes it easier to stay within them.
Opponents might cry foul and say "you're directing the criminals!"
No, I'm not directing them; THE LAW IS. If the law is ambiguous then it's damaging to all of us and not just the "criminals" that are dragged through the mud by it.
My take is that it's not Constitutional to have justice decided on by the Executive branch of the government (where the DOJ is). The courts should be the only ones deciding; the Executive executes (carries out) the orders.
At any rate: have at those penetration tests, boys! o7