The difference between a security research and a hacker is the same as between a protester and a terrorist, apparently.