Hacker News Reader

If Correlium just provides the VM and the researchers download iOS releases directly from apple servers, is it still illegal?

It'd be perfectly legal at that point, as the infringement would be with the end user at that point.