Department of Defense has a new policy for reporting and fixing security vulnerabilities. Hackers can now legally hone their cyber skills, tools and weaponry against any Web property operated by the U.S. Defense. The DoD says it will deal in good faith with researchers who discover, test, and submit vulnerabilities or indicators of vulnerabilities in accordance with these guideliness guidelines: You do no harm and do not exploit any vulnerability beyond the minimal amount of testing required to prove that a vulnerability exists or to identify an indicator related to a vulnerability.”]
Source: https://krebsonsecurity.com/2016/11/dod-opens-mil-to-legal-hacking-within-limits/