You punish them if you catch them hacking; you dont punish them if they do it and then come to you and tell you how to fix it (unless they're extorting for money...). All your attitude accomplishes is making good hackers feel like they will get punished for trying to help, so they will turn black and do it for personal gain (because you cant stop the hacker spirit)!

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/819/2614#2614