The line between security research and espionage seems really thin.

Would spies disclose their findings?