They're still dealing with this.
Same goes for ethical hackers, they have to get permission before actually doing anything.Yeah, that's kinda an important point. Research requires consent, otherwise it's just abuse. We decided this not too long after WWII, for obvious reasons. It's a part of the Nuremberg Code[1}. Nobody has yet explained how it got by U of W's IRB.
[1] https://en.wikipedia.org/wiki/Nuremberg_Code (see the very first of the 10 points)
Same goes for ethical hackers, they have to get permission before actually doing anything.