What I Learned at Hacker Camp

[donsu]

http://netscape.businessweek.com/technology/content/apr2006/tc20060403_499982.htm?campaign_id=netscape_tech


It's easy to create malicious code, penetrate firewalls, and steal personal and financial information. "Ethical hacker" Andrew Whitaker can show you how


-snip-

"PRETTY SWEET." I am in a classroom full of middle-aged high-tech system administrators. They're all men, from all over the country, attending the $4,300-a-week course to brush up on the skills needed to combat a rising tide of computer threats.

Mainly, they work for computer makers and software firms, and boy do they love their computers. One describes the tension between himself and his wife over how much he uses the computer. Another student agrees. "Don't make me choose, because you won't like the outcome," he says, to raucous laughter.

Each time Whitaker unveils a new way to compromise a company's security, "Cool!" is exclaimed throughout the room. Even Whitaker, who tackles hacking challenges in his spare time, pauses from time to time to ask, "Pretty sweet, huh?" It's a bad-boy thrill, and it's as infectious as the attacks we're trying to thwart.

-snip-

ALARMING LAPSES. And here's what may be the scariest part: to be a hacker, you don't even have to be a hardcore techie or particularly good at writing code. Take me, for instance. I'm an English major who hasn't written a line of code since third grade when I wrote a BASIC program that quizzed you on state capitals. Camp got started at 9 a.m., and within an hour, I was hacking into fictional banks' Microsoft databases and retrieving credit card numbers

-snip-

So, do ethical hackers go bad, I wonder aloud? Whitaker says he knows of a few cases, but companies like his screen candidates carefully. They have to be gainfully employed in the security field and must sign waivers saying they won't use these tricks for ill. For more sophisticated classes there are background and criminal checks. In any case, the sad truth is that anyone who wants to be a hacker can do so these days -- with or without these classes.
-snip-
----------------------------

thought you all would find this as interesting as I did

(wondering: women are not system administrators?)

[aden_nak]

1. Believe me, you don't need the classes if you aren't being ethical.

A lot of that is still available on the internet if you know the wrong places to look. Of course, it's slightly less user friendly than a seminar, but by no means do you need to be a technical genius to figure it out.

[catmandu57]

2. So if I sent you my hijack this log

you could tell me what to fix to get rid of this damn bug that driving me nuts?

[tkmorris]

7. These guys are good

http://castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

If you post it there you will get lots of help believe me.

[donsu]

3. I didn't go - read the article

nt

[catmandu57]

4. Oh okay

I thought you were there my bad.

[spuddonna]

5. I'm a woman and a sys admin...

There aren't many of us, but there are definitely more than when I started out (back in early 90's)! :7

And security and hacking are a huge issue. Thanks for the article!

[donsu]

6. glad women are in there, thanks for letting us know

nt

[spuddonna]

8. No problem! :)

I always wondered why more women weren't working in IT - it's such an awesome field. And the guys I've worked with have always been great people. I like geeks, in fact, I married one! :7

[undeterred]

9. i'm here too

moving my way up from level two

I can tell you one reason there aren't more women- some of the men in the field are very territorial and don't let you do much. But I have finally found a job with a wonderful supervisor/network guy who is willing to mentor me and help me become independent.