depends on (roughly in descending order) the software licence agreement, local laws, the extent of encryption and/or obfuscation, and your ethical viewpoint. RE

depends on (roughly in descending order) the software licence agreement, local laws, the extent of encryption and/or obfuscation, and your ethical viewpoint. RE can be used for good, bad and anything inbetween. I for one believe it's valuable to expose crappy engineering in IoT devices and the like