Honestly, the vast majority of guys out there have no morals whatsoever. They talk about "victims", instead of "targets", and they don't care if some old lady is hacked or if it is a terrorist group -- it is all the same to them.

So, the old ladies get hacked... the weakest get hacked. People who have security precautions tend to not get hacked, while the elderly get the brunt of it. Same as telemarketing scams, same as criminal activity anywhere.

I think there are legitimate uses of offensive hacking. For instance, in hacking serious terrorists or such.

I don't care if kids hack pedophiles or Neo-Nazis.

But, most of them simply do not have the skill to actually target someone -- they get what they can.

As for there being money in the whole business, there is now, there was then.

In a sense, a lot of this is very open... you see a lot of leaders in the business selling vulnerabilities to the highest bidder. They don't care that the highest bidders are governments opposed to their own or organized crime.

You receive offers from all kinds in the field. It is your choice to accept or not accept jobs. It is your responsibility to ensure the person hiring you isn't hiring you to hack some woman they don't know so they can stalk them... and that kind of job is more common then ones with any kind of legitimacy.



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/355/32400#32400