Wouldn't researching and discovering 0-day vulnerabilities be treading close to DMCA violations and/or cybercrime laws? I don't see why this information isn't causing Microsoft and/or the Government to go on the offensive legally against the likes of HBGary.
I can't speak to any cybercrime laws (I'm simply not familiar enough with them), but the DMCA 1) only applies to mechanisms which protects copyright, and 2) has very explicit exemptions for the purpose of security research, among other things.
