How hackers pick their victem

[Noia]

It's quite simple, a hacker picks his/her target because he/she feels like it.

<?php
for ($a = 1; $a <= 4; $a++) {
srand((double)microtime()*1000000);					
$randvalue = (int)rand(0,255);
if ($a == 1) { 
$a = $randvalue;
Else {
$a = $a . "." . $randvalue;
}
}
?>

No idea if that'll work, but I'm bored :P
- Noia

[spurious_inode]

Good comments...

At the risk of me_too_ism, here is how I more or less see it.

Cat. A) - The cracker/hacker/kiddie/lamer has a specific exploit for a service, and begins hunting for machines
that the exploit is most likely to work on. An example would be Sun sendmail 8.9.4 (an old version)
running on Solaris 2.5.. And so the search for machines that fit this profile begins.

Cat. B) - Specific intended victims. An example is a very deliberate attack against some_company.com or
some_government_site.gov for reasons that are typically personal to the attacker, but almost always
involve prestige. Being able to brag on IRC is socially elevating for lamers and kiddies, and is
often the motivation behind the targets.

Cat. C) - The "gold_miner". These are attackers who spend a good deal of time checking out networks and
machines in search of exploitable machines and networks.

Interestingly though, the FBI has previously estimated that (not unlike murder and rape) that in around 60% or
more of computer security incidents, the attacker knows the victim.

[AzynchriX]

Note: Hacking and Cracking not really the *same* thing :-)

[kr4y3]

From my experience if you whip a script kiddies ass in a multiplayer game they try all kinds of **** to try and "hack" you lol

[shaine]

Most hackers are smart and tend to hack people who started using the net on a specific date in computing history, such as Bill gates' birthday, or the launch date of the beloved o/s UNIX, or the creation date of DOS. Things like that

hacking and cracking are totally different. hacking is not neccessarily illegal as some companies will reward you for finding their most vulnerable spots if you get into their systems. They then know where to improve thier security. That is hacking. When you hack into a system just to get in, and to prove you can.

Cracking on the other hand is illegal. Cracking is when someone hacks into a system and steals or changes information. Hackers to not tend to steal, they only try to get in.

[thehorse13]

Just to bring everyone up to speed, the "politically correct" term to use these days is, "attacker".



Also, attackers' motivation will be different from case to case but there are a few major categories as I see it (and those at Foundstone):

1) Curiosity
2) Entertainment
3) Political Reasons
4) Desire for info
5) Thrill of gaining root
6) Attempt to compromise additional systems.
7) Trophy hunting to gain status

-TH13

[Tiger Shark]

Hoss: When did you become "politically correct"?????? Oh dear.....

Frankly though 2, 5 & 7 are the same... That's entertainment..... can anyone say "skiddie"

You forgot disgruntled employee and potential for financial gain, they are pretty good ones too.....

[NorthernLytes]

no real hacker is going to go into someone computer and hack them. Thats for crackers or "script kiddys" that like to do malicious things and destroy easy targets, they have no idea of a challenge. they take the easy way instead of finding something to aquire knowledge from.

[phernandez]

Hmm... I agree with you to an extent Tiger, and maybe 2 and 5 are closely related. And good points on the vengeful ex-workers and blackmailers.

IMO though, 7 can't be lumped into the same group. I'm sure there's a thrill in trophy hunting, but without going all Psych 101 on you, 7 stands apart because it has elements of gaining recognition and respect among your peers, not to mention the competitiveness angle.

But what do I know? Come to think of it, a hacking trophy would look mighty keen in my cube or as a hood ornament. Either or

[Tiger Shark]

Phern: 7 fits very well into "entertainment", psych 101 included or not.... The phrase was "to gain status".....

Gaining status and competition are basically pleasurable activities..... If you "win" or people give you kudos for your accomplishments it is a pleasurable thing..... Pleasurable = entertaining.... It's something you do for personal gratification..... So, 7 fits quite nicely into the group....