&quot;Members who participate in the Media Extensions Working Group will have to make a legally binding promise not to use anti-circumvention laws to aggress against security researchers or implementers.&quot;<p>Note that this promise only refers to 17 USC 1203, which deals with civil offenses, i.e. a lawsuit.<p>Circumventing access controls is also a criminal offense under 17 USC 1204 (if done &quot;willfully and for purposes of commercial advantage or private financial gain&quot;) and it&#x27;s not possible for a company to waive the government&#x27;s ability to prosecute that crime.