HD Moore said NO to House of Hackers

[Petko D. (pdp) Petkov]

Dark Reading: Hackers in the House

HD Moore, director of security research for BreakingPoint Systems, says his initial take on the House of Hackers announcement in the blog post is that the recruitment aspect of the House of Hackers could lure the wrong crowd. “If anything, hackers who work in security do all they can to appear professional and trustworthy and that really seems to undermine it,” Moore says. It could end up attracting "'employers'" who aren't interested in the legality of the work they sponsor, he says.

Is that true?

[0x000000]

Who cares what HDM says, just follow your own ideas and paths and don't get distracted by any nay-sayers, since they are always in the majority.

[RedTeam]

I think its important to place emphasis on 'ethical' hacking - we are all aware that the line between grey, white, black hats is very very thin, and it comes down to whether we are using our knowledge and skills in an ethical or unethical way.

There is always an element of risk for a potential customer to trust a new supplier company or individual (hacker), I think providing that you are professional in your conduct and place emphasis on the 'ethical' approach to hacking you will win business and get a good reputation.

I like the idea of enforcing a rating (shade of grey ;o) for members of the House.

[0x000000]

I think i'ts important not to fall for self-censorship in order to attract sponsers, if you go about this way you aren't for real, and i wouldn't have those companies sponsor me, if they don't like what I say or do. I think you can reach for anything you want, but stay true and don't become a sell-out, build it and they will come. ;-) I learned this in doing business, some companies value this and want to attach their brand to it, the majority probably don't, and like I said I wouldn't want those companies anyway. If Microsoft is sponsoring "blackhat" I could question them also, but no-one does. So, I don't see the point in defining yourself as "this kind of group" like, we are "not that kinda group" etc.

[T-ReXTC]

There are some truth in that there will be a potential of "wannabe blackhats" comming for information etc, but I'm pretty sure we will shun the actual paying contractors.
If we look at it from their point of view, the public aspect of it(allready said a couple of time) will deffinately deter them from asking just anyone here, they might gather information on whoever they are and spill it to the public, making their business hard.
This is also the reason why I don't like a black to white voting system or what not, why give them internal yellow pages of who is more safe to approach than others?

[Petko D. (pdp) Petkov]

the pipes is actually reversed. they post a job offer, you contact, they decide whether you are worthed. the process may require from you sending them a CV plus how much active you are within the community.

[Schlzm]

I think Mr. Moore is expressing concern over whether or not HoH will become like other established sites and communities that ultimately become a dump. Time is the best judge for who will be able to succeed here and who will not, which I think is a good thing. As word spreads there will be plenty of different people wanting to come if just to look and see what HoH is about and if they can benefit. This is an open community and people from all backgrounds can come and participate in their own way and I think culling the chaff from the wheat is something that will occur naturaly. Just my thoughts on the matter.


Schlzm

[HezekiaH]

Can be true. We would be best to watch the image we portray, keeping out bad apples

[Paulo ////////// Luminus]

police.....

[Manha Manha]

I wonder if this is the same frame of mind that led HD to found Metasploit... which I am sure has from time to time fallen into some not so legal scenarios... and what of his current work?

Is a tool such as Metasploit really any different in its intentions and potential end use than HoH?

Personally, HD's response to 'recruitment' is not making sense to me.

[jah]

It was a good conversation starter though, wasn't it. Anyway, who's hiring....

[hex0n]

any hacker's board attracting a lot of different peoples, he is right on that side

[Eques de Ventus Occasus]

Here is the deal, If you are good, you can use your skills for good. If I have an opening in my company for a security professional, I am going to go for skill over everything else. If you have Certifications, and degrees, so much the better, but the only real questions I have, is can you do the job, and can I trust you. I have been in this field since the days of acoustic couplers, and war dialers. I have seen plenty of papered idiots and plenty of untrained genius. Likewise, I have seen the converse as well. The only real test at the end of the day is can you get the job done and can I trust you if I hire you. I often agree with HD, but in this case, I have to come down on the other side.