Pentagon Contractors Openly Post Job Listings For Offensive Hackers

Sparrowvsrevolution writes "In the wake of confirmation that the U.S. government was involved in the creation of Stuxnet and likely Flame, a look over job listings on defense contractor sites shows just how explicitly the Pentagon and the firms that service it are recruiting offense-oriented hackers. Northrop Grumman, Raytheon, Lockheed Martin, SAIC, and Booz Allen have all posted job ads that require skills like 'exploit development,' have titles like 'Windows Attack Developer,' or asks them to 'plan, execute, and assess an Offensive Cyberspace Operation.'"

Comments

Who better?

[jameson71]

Who would better know how to defend against these attacks than someone who knows how to develop and implement them?

Re:Who better?

[Shagg]

What makes you think they're being hired for defense?

Re:Who better?

[Eightbitgnosis]

Offense? Defense?

With America's preemptive warfare policy; what's the difference?

Re:Who better?

[gweihir]

Who would better know how to defend against these attacks than someone who knows how to develop and implement them?

Almost anybody. Attackers are highly specialized and do not need to cover the whole or even significant parts of the protection angle. If the attacker gets in, the goal is reached. It does not matter at all that if a lot of potential other attack venues were not even touched.

For this reason, black-hats make terrible security experts for the defender side. The myth that a good attacker is a good defender is patently false in IT security (and likely in other areas as well). What a good defender needs first is to find all possible attack venues. That is complicated and requires understanding the whole system, the organization using it, the cultural environment, etc. The black-hat, on the other side, can experiment and does not really need to understand any of these, except for the tony fragment where the attack is to be launched. Even there, the black-hat can afford to fail frequently. This is fundamentally different for the defender.

Department of Redundancy Department

[Tablizer]

So then, why don't we have a Department of Offense instead of just a Department of Defense? If the lie, I mean creative labeling works for DOD, why not use it for hacking titles also?

Also, I wonder if the inadvertent Stuxnet admission had anything to do with the change. Why mention such in job ads anyhow?

Re:Department of Redundancy Department

[bky1701]

Well, they can always claim they are good at defense, since we haven't been invaded in a long time. If you put war back in the name, people might start asking questions about why a department with "war" in the name utterly failed the last several we were in.

Windows Attack Developer - Wanted

[ackthpt]

Best advertising you could ask -- for Linux or Mac.

Openly Post Listings?

[busyqth]

Well I'm glad that they're posting the job listings openly.
Secretly posted listings don't usually have a great response rate.

Not official

[cpu6502]

Quoting another slashdotter: "This is just a reporter's opinion sourced from conversations with people whose names he won't reveal at times he won't reveal..... he details the exact contents of a meeting that consisted of president Obama, vice president Biden, and CIA director Leon Panetta. For him to have this conversation, it means he has interviewed either the president, the vice president, or Panetta on this. Fat fucking chance. It's probably true, but no it's no way in hell close to "offical"."

Cool

[Offensive Hacker]

This is right up my alley.

Re:Offensive

[mcgrew]

What is so offensive about repurposing hardware? What is so offensive about writing quick and dirty single-use code? What is so offensive about pen testing your own network?

Son, if you think hackers are offensive, you're on the wrong site, and so is the idiot who modded you "insightful." Not knowing there are white, gray, and black hat hackers shows a complete and utter lack of insight.

Afghanistan mujahideen

[jjohn]

I don't need to explain why training terrorists might not be the best idea for our long term interest, right?

Re:day in the life of a govt hacker

[History's Coming To]

It can snap you out of an infinite brain loop though. I've lost count of the number of times I've been stuck on a problem, but solved it pretty quickly after having a smoke. Ditto alcohol, adrenalin and caffeine, anything to get your brain out of the rut it's in. I've also had some insights while using the strongest hallucinogen known, dreaming. Agreed, being perpetually stoned isn't going to help in the long run, but many people working on logic based problems will admit to moderate drug use when they hit a mental block.