The Department of Justice said it would no longer prosecute crackers who break security for the sake of reporting or correcting flaws.

We still need to change the CFAA to narrow it to cases which are really attacks.

Please don't use the term "hackers" to refer specifically to breaking security.