this is a very important topic in my opinion.

the question "should we hire convicted hackers" doesn't have a definite answer. it's too broad of a question. if someone is convicted of breaking into computers the intent should be looked at it.

for example if someone gets popped for breaking into an ISP and loots the credit card db and goes on a fraud spree, then obviously this person is motivated by monetary gain. on the other hand someone like kevin mitnick who has actual *real world* experience in penetrating computers

and after getting busted a ton of times no evidence has ever surfaced he was hacking to

make money, i don't see any reason why a case similiar to this should lead to rejection of employment. ira winkler said something along the lines of "i dont see what someone convicted of a computer crime would have to offer that someone who has never been convicted can't." well, someone who at one point was working for the people you're trying to defend against has *MUCH* more insight into computer penetration and the whole mindset of the attackers.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/3982/19375#19375