Hacking Ethics

This may have been asked in the past, but I didn't see it, so bear with me.

Here's the situation:

BillyJoeBob is a hacker. You know him person, and know that he plans something destructive. For example, a series of DDoS's against the Red Cross. You know that he is capable of carrying out the attack, and that if successful will do a great deal of damage.

The question:

Do you feel any moral(not legal, but moral) obligation to :

A: Stop the attack
B: Report BillyJoeBob in order to prevent the attack


Disclaimer: The aforementioned scenario is entirely hypothetical. If it bears any resemblance to actual events, it is only through sheer coincidence and my own bad luck. Thank you for playing, please keep all hands and arms inside the ride, and do not feed the animals.

-Keisha

It all really depends on the target. If it was someplace like Red Cross, where the results could hypothetically lead to medical problems, damn right I would stop it. I would probably take out their computer myself, and make sure it was a looong time before they considered doing it again.

If it was just a website hack or something, I guess it really doesn't matter if he does it. That is, if he/she thinks they can get away with it. If the damage is moneytary to Microsoft, I may even encourage it ;)

Against the Red Cross, I'd stop him straight away. Against other targets, I wouldn't encourage anyone but if it was someone I *really* disliked I'd probably turn a blind eye.

It seems to me that you always have an obligation to report the attack, not to tyr to stop it....

Although it would be harder for me to report it if the target was microsuck....I would...

In my opinion, you always have an obligation to this scenario, whether you are friends with this guy or not and whether it's a medical place (like Red Cross) or Microsoft.

How you go about stopping it is upto you, but if I was in this situation, I'm guessing that if this person was a good friend of mine, I wouldn't report him to the authorities, I'd talk some sense into him. I mean if he/she is really a friend, I'm sure they would be able to understand you and take your advice and no go ahead with the attack. If not, knock some sense into the damn bastard!! BANG!!! :) But that's an extreme measure.

If it's not a friend of yours, I'd probably report them to the authorities, but I'd try talk to em first.

Greg

Quote:

---

In my opinion, you always have an obligation to this scenario

---

but what if the attack is on something immoral/illegal?? if the guy was attacking say a persons computer that contained kiddie porn I personnaly would in no way stop him - unless I thought that we could collect enough evidence to report the guy with the porn! but if it was a case of letting a guy do his computer (or knee caps) in or watch him get away scot free I'd prolly help myself to launch the attack :)

v_Ln

Personally, I would take the as yet undiscussed option #3: Talk the person out of it. If they are unwilling to listen, then I would report it to the intended target. Personally though, none of my friends are script kiddies, so it's hard to imagine me in that position. :)

Quote:

---

Originally posted here by pwaring
Against the Red Cross, I'd stop him straight away. Against other targets, I wouldn't encourage anyone but if it was someone I *really* disliked I'd probably turn a blind eye.

---

Having said that, I'd probably just ROFL at him for being such a clueless newbie lamer. :D

If it was an attack on a kiddie porn site, I'd try and bust the people behind it before my mate could waste time launching a DoS attack. Against Microsoft, I would be tempted to watch it go down in flames, but I would try and warn my mate off, if only to stop him getting into trouble. Against any charitable organisation, I'd beat some sense into him/her.

In any event, even if I really hated the victims of the attack, I'd try and stop him/her if only for the fact that it tarnishes the reputation of all hackers, malicious (aka crackers) or otherwise.

Whatever hat you wear, you have to accept resposibility for your actions...

if (target == good_guys) {
success = try_talking();
if (success == 0) {
warn_good_guys();
}
} else {
success = try_talking();
if (success == 0) {
leave_for_plausible_deniability();
}
}


Sorry - I can't get it to obey my indentations.

Quote:

---

Originally posted here by str34m3r

if (target == good_guys) {
success = try_talking();
if (success == 0) {
warn_good_guys();
}
} else {
success = try_talking();
if (success == 0) {
leave_for_plausible_deniability();
}
}


Sorry - I can't get it to obey my indentations.

---

I agree with the if statement there........

You would think of reporting him, but then again hes a friend... If you think the attack will do damage try talking BillyBobJoe out of it first if that doesnt work.... Well, then you have to weigh the concequences... Either have BillyBob go to jail or RedCross being taken down

if i get free porn outa it well thats a different story all together isnt it