Two words people. Ethical Hacking! If we go around being okay with any old college kids hacking into our systems and take them at there word that they are being honest with us..? Then we're the biggest fools on the planet. If somebody is really concerned with the lack of security on the systems they use (not run or own), and they want to test it, then ethical hacking is the only way people. Ethical hacking is getting the proper permissions to hack first (basic def). If somebody is doing activities they're not authorized to do; the industry see this as shady business. And for good reason! I would bet 8 times out of 10 in these situations, the hacker is doing it for malicious or personal gain.
A question for all those who support this kid's actions... Should we just threw away and ignore all our companies and organizations "IT Acceptable use" policies?
We?d be stupid (for obvious reasons) letting any old college kid (or anyone) who feels a system is insecure, on his own unmonitored self, do rouge penetration testing whenever they felt it was necessary. That would be one of the most insecure policies I've ever heard of.
A question for all those who support this kid's actions... Should we just threw away and ignore all our companies and organizations "IT Acceptable use" policies?
We?d be stupid (for obvious reasons) letting any old college kid (or anyone) who feels a system is insecure, on his own unmonitored self, do rouge penetration testing whenever they felt it was necessary. That would be one of the most insecure policies I've ever heard of.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/newsbriefs/819/2608#2608