The real question here is: Is it the conviction or the criminal act that matters? Without question there are countless individuals involved daily in "ciminal" computer acts -- they simply haven't been caught. Does that really provide the level of distinction necessary to discern someones "hacking/cracking" skills? Or, is it the notoriety that comes with a high-profile "hacker-goes-to-jail" drama played out in the media that establishes ones bona fides as a member of the elite uberhacking crowd?

In my judgement, someone who has been caught is less desireable only because they have indeed made an error or perhaps became reckless which allowed them to be tracked and convicted. The people whom should be hired are the individuals who have both the demonstrable hacking/cracking skills and the knowledge of how NOT to be detected and caught.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/3982/19446#19446