A computer security researcher moved all of his research offshore—and has his legal status in some jeopardy—after the state of Michigan made all of his work illegal.