full-disclosure - Teenager cleared of hacking

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <9B66BBD37D5DD411B8CE00508B69700F05ADD7E2@pborolocal.rnib.org.uk>
From: John.Airey at rnib.org.uk (John.Airey@...b.org.uk)
Subject: Teenager cleared of hacking - Off Topic?

>-----Original Message-----
>From: Jonathan A. Zdziarski
>To: Randal L. Schwartz
>Cc: John.Airey@...b.org.uk; full-disclosure@...ts.netsys.com
>Sent: 17/10/03 18:12
>Subject: Re: [Full-Disclosure] Teenager cleared of hacking - Off Topic?
>
>> John>  I have to wonder how many companies do deals to employ hackers
>> John> (like the movie "Catch me if you can").
>> 
>> I know at least one company that doesn't.
>
>There's a big difference between hiring a hacker to do a specific job,
>and hiring someone then finding out he's hacking.  I guess it also
>depends on whether you are defining a 'hacker' as a criminal hacker or
>expanding it to include professionals.  Based on what I read at the URL
>you provided, I would be very surprised if Intel hired a rogue criminal
>hacker to test their security, but I can certainly see companies like
>Intel hiring professional white-hat hackers or possibly x-"hackers" who
>have learned their lesson to do the job.

I should have said "criminal hacker" to make it more clear. Of course, you
have raised the issue of trust which is something for everyone to think
about. How much more trustworthy is an employee who doesn't have a criminal
record than one who doesn't? What if the only difference between them is
that one hasn't been caught? Also, how can you tell if someone is really
reformed? Can you examine their heart?

At this point I get back on-topic. You can have all the security you wish,
but if the people you employ can't be trusted, you're in a mess. I've heard
of many security companies whose security guards run away with security vans
and the money.

John

What - no sig?
- 
DISCLAIMER: 

NOTICE: The information contained in this email and any attachments is 
confidential and may be privileged. If you are not the intended 
recipient you should not use, disclose, distribute or copy any of the 
content of it or of any attachment; you are requested to notify the 
sender immediately of your receipt of the email and then to delete it 
and any attachments from your system. 

RNIB endeavours to ensure that emails and any attachments generated by 
its staff are free from viruses or other contaminants. However, it 
cannot accept any responsibility for any  such which are transmitted.
We therefore recommend you scan all attachments. 

Please note that the statements and views expressed in this email and 
any attachments are those of the author and do not necessarily represent 
those of RNIB. 

RNIB Registered Charity Number: 226227 

Website: http://www.rnib.org.uk