I've been just training RE on some recently published application(closed-source). I was taken aback when I found the serious issue that allows to bypass trial expiration check, so that the application works in the trial period(which is fully-functional) for an unlimited amount of time(in a word, it behaves as if it was fully registered).I thought, as the app is a great piece of work, that it would be nice to let the devs know about this issue, so that they can fix it.But I am a bit curious if they can accuse me of breaking the law even if I am acting in a good faith intention?The company is from the USA and I have no experience with the local law.Thanks in advance for your answers
Legal aspects of reporting security issue to the publisher
law