Slashdot Mirror

← Back to Stories (view on slashdot.org)

U.S. Computer Security Advisor Encourages Hackers

Posted by timothy on from the grain-of-salt-to-choke-a-volcano dept.

DarklordSatin writes: "According to this Associated Press article, which I was pointed to by the nice guys over at Ars Technica, Richard Clarke, Dubya's Computer Security Advisor, wants to encourage hackers to find security holes in software. Although he feels that the system only works when the hackers show 'good faith' and disclose the holes to the company before the public, he wants to start offering more legal protection to hackers and that is a very good step in the right direction." As the folks at Ars point out, though, "Naturally, Mr. Clark was using the original, more generalized, definition of "hacker", but I guess saying 'Bush Adviser Encourages Discovery of Software Bugs' just didn't have enough zing."

4 of 275 comments (clear)

  1. Re:Hackers by MagPulse · · Score: 4, Informative

    This is more like an architect taking a model of your house, finding the weaknesses, and telling the manufacturer about it so they can fix your house before someone malicious takes advantage of it.

  2. Re:so US security has a bit of a clue by Surak · · Score: 4, Informative

    I listened to an interview with Richard Clarke this morning on NPR. He basically said that he *knows* that this is outlawed by the DMCA (and other laws against hacking) and suggested that computer professionals try to break only to their own systems, so as to avoid legal wrath.

    Uhhh...yeah, isn't this what computer security professionals do *already* as part of the normal course of their everyday jobs? (If not, they *should* :-P)

    --
    My journal has hot /. gossip.
  3. Contrary to his remarks on NPR this morning by JUSTONEMORELATTE · · Score: 4, Informative

    On the drive in, NPR had an interview with this guy (Yes, I listen to NPR in the car. Yes, I'm old.) and his remarks there made it clear that he thinks reverse-engineering software to find security holes should be criminal unless the person doing it is employed as a computer security professional.

    I'd rate him above-average on the clue-o-meter (certainly as federal gov't employees go!) but he's not a friend to the hackers by any stretch.

  4. Re:Just be sure not to give out your name... by ibsteveog · · Score: 4, Informative
    Well, you got the concept right and all the facts wrong...

    The fellow was Brian West, who worked for an ISP, and he did a little more than just "discover" the security hole in the Poteau Daily News website. A link to more info..