I think hackers should be given a fair chance.

Hmmm, you should really distinguish a cracker and hacker. And which one is malicious and which is not. In top of that, mr Zalewski is not malicious. You are dragging a brilliant researcher into same league as some filthy malware writer.

When I talk to customers I sometimes ask them, whether they do background checks on whom they hire as