The problem with DRM [is] the way it… make security researchers vulnerable to legal retaliation from companies when they come forward with vulnerabilities…
I’m not sure I understand why anybody does this to begin with. Is it a paying job, or just a chance to show off one’s 1337 sk1llz? A vulnerability in the internet is a valuable commodity, and if Microsoft or whoever is going to sue you for giving them that intel for free… I’m pretty sure there are people out there willing to pay a lot better than that.