Dorothy E. Denning
I am a computer scientist who has specialized in the area of computer security for about eighteen years. Up until 1990, I focused my research on understanding the vulnerabilities of systems and designing mechanisms that would protect against these vulnerabilities. I paid little attention to the people who were accused of being perpetrators of the crimes I was trying to prevent or detect. Then in 1990, I began doing research on young computer “hackers” who break into systems. Since then, I have interviewed or met several dozen hackers who began hacking as adolescents and are now college age. I reported my initial findings in Denning (1990).
Not all people who call themselves “hackers” break into systems or commit computer crimes. Indeed, the term “hacker” originally meant anyone who loved computing, and there is still an annual “Hackers Conference” of such people. However, people who break into systems also call themselves hackers, and they refer to their tools as “hacking programs” and “hacking worksheets.” They write articles such as “A Novices Guide to Hacking” and “Yet Another File on Hacking Unix.” Thus, it is not surprising that the media and law enforcement communities use the word to refer to someone who attempts to gain unauthorized access to computer systems.
Some people use the term “cracker” to refer to hackers who break into systems. I will continue to use “hacker” since the term is used so widely, especially among the people about whom I’m writing. In the context of this paper, however, I am referring only to crackers.
Others use the phrase “malicious hacker” to distinguish crackers from non-crackers. However, most of the hackers I have spoken with say they have no intent to inflict harm or suffering on another. Thus, I reserve this phrase only for people who intentionally cause harm.
Although hackers violate laws and professional codes of ethics in the domain of computing, I would not characterize the hackers I have met as “morally bankrupt” as some people have called them. I have not seen any data to support allegations that they are in general more prone to lie, cheat, or steal than others. The hackers I have met have seemed to me to be decent people.
Although I do not condone unauthorized break-ins or accept the arguments that hackers use to justify their acts, it is not my intention here to present counter-arguments to the hacker ethic. My goal is only to describe that ethic, and comment briefly on its implications for ethics education.
2. Why Hackers Break into Systems
Before turning to the ethics of hackers, it is important to understand why hackers break into systems. From what I have learned, most hackers do it for the challenge, thrill, and social fun. Although the stereotype image of a hacker is someone who is socially inept and avoids people in favor of computers, hackers are more likely to be in it for the social aspects. They like to interact with others on bulletin boards, through electronic mail, and in person. They share stories, gossip, opinions, and information; work on projects together; teach younger hackers; and get together for conferences and socializing. They are curious about the vast network of systems, and they want to explore it. They hear about a computer at a place like Los Alamos National Labs, and they want to find out what it does, what it’s used for, and who uses it. By sharing the secrets they learn, hackers also gain recognition from their peers and entry into exclusive hacker groups. Since their actions are illegal, hackers may also enjoy the thrill of doing something that they are not supposed to do without being caught.
There is nothing particularly unusual about hacker’ motives. Curiosity, adventure, and the desire to be appreciated and part of a group is fundamental to all human beings. Moreover, there are powerful motives behind the attraction to learning secrets, including the desire to have control, to feel superior, and to achieve intimacy with those with whom the secrets are shared. They allow one to be an insider rather than an outsider, to be accepted by a group, and to cross forbidden boundaries. (Bok 1983)
Most hackers do not break into systems for profit or sabotage. Although some do, I will restrict my discussion to those that do not, since my personal experiences have been with hackers who consider these activities to be wrong.
Home > Research Resources > Computing Security > Hacker Ethics
HOME | IN
THE NEWS | RESEARCH
RESOURCES
TEACHING RESOURCES | STUDENT
RESOURCES | LINKS
The Research Center on Computing & Society
at Southern Connecticut State University
501 Crescent Street | New Haven, CT 06515
Director: (203) 392-6790 | e-mail: webmaster@computerethics.org
© 2000 – 2007 – Research Center on Computing & Society