Am curious if it is legal to fund security research to find flaws in a competitors product. If so then going forward this might become a tool used by hardware / software companies to go after their competition.
It’s legal. I’ve been hired to do it before.
I wouldn't be surprised if it's illegal somewhere in the world, but in the US, publishing factual information you have not signed away the right to publish via an NDA or similar contract is usually legal. I don't know that motive is ever involved as part of the test of determining whether or not you are allowed to write something.
I'm not a lawyer, this isn't legal advice.
1. https://arstechnica.com/information-technology/2017/02/high-...