[giaour]

Not a lawyer, but "subverting DRM" (even if it's trivial or really stupidly designed) can be a crime in and of itself in the US under the DMCA. There are a bunch of exceptions to this, so I have no idea if OP's work is actually illegal.

[joquarky]

Security researchers are an exception, but the title of "security researcher" is undefined

[greenish_shores]

Now this is f*cked up, isn't it?