Issues: Hiring hackers, the fine line between cult and criminal
by Thejian - for Help Net Security
Bookmark and Share
Obviously there are a lot of technically talented individuals running around in the hacking scene nowadays. There always have, it's the root of its existence. This has given birth to another interesting issue. Besides hacking being marketable and trendy, the underground today has the full attention of the corporate world where the skills are recognized (in some) and could be put to good use as well. In short, hiring hackers, if not good for profits at least is the trendy thing to do. And looking at the security problems some companies are having that definately is a good thing. However, it also raises the question of trust.

Altough there are no vast figures on it, computer intrusions are claimed to cost companies "hundreds of millions of dollars" internationally. This of course has created quite a demand for the various services of security companies. "Know your enemy" is a big issue here, causing quite a demand for the skills of hackers to stay on the edge of things. The idea of hackers running around their systems has (for a large part thanks to the media) proven not to be that big of an incentive for the hiring of a certain company however. Trust is a key issue here and it's an unfortunate fact that certain stereotypes do not inspire this trust in people. It's an ven sadder fact that the people who actually could help in situations get sidetracked because of this stereotype. This is why you won't find many people in the industry all that eager to come clean about their past and probably even less companies admitting to hiring hackers. However, since hacking has become "the next big thing on Madison Avenue" this attitude is changing.


The L0pht Heavy Industries, a group referred to with terms like hacker think-tank, made the headlines a few months ago by announcing its merger into a company called @Stake. This company, which secured a $10 million backing from Battery Ventures, has recently made headlines again, with something else than it's products and services.

Mark Abene, also known under the alias of "Phiber Optik", cried foul after @Stake withdrew their offer of hiring him, based on his past. Mr Abene was convicted for unauthorized access to various systems in 1993. During the hiring procedure at @Stake, this fact came up again and @Stake decided not to procede with the process. This has caused a lot of people to scold the company as hypocrits, because since above mentioned merger @Stake's own Research and Development vice-president and various other staff members are known hackers. It actually is a logical point of view, weren't it for the fact that Abene wasn't convicted for being a hacker.

Spotlight

Information security executives need to be strategic thinkers

Posted on 17 June 2013.  |  George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.


Daily digest

By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
  

Weekly newsletter

With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.
  

 

DON'T
MISS

Tue, Jun 18th
    COPYRIGHT 1998-2013 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //