Hackers Bring Ethics To Las Vegas (backchannel.com)
Steven Levy, who has been extensively covering the world of hackers for decades (fun fact: the first time he wrote about it, the word "hacker" didn't really mean much), is sharing the changing perception about hacker conferences, and hackers themselves. In a newsletter, Backchannel's Levy writes about Black Hat conference: What I find most striking in the coverage of these events is that they are no longer seen as outlaw gatherings, but rather conclaves that form a valuable portion of the digital security mosaic. This is a big change from the long period, beginning in the late 1980s, during which the term "hacker" became synonymous with malfeasants, punks, and criminals. The glorious originals -- people who invented just about everything great we do on computers, including the internet -- were outraged at the denigration of a word that was once a badge of honor. [...]
The hackers who attend those conferences are true to that ethic. There's a core morality to both events, built on privacy, equal access to systems, and personal freedom. There's indignation at poorly built systems. There's contempt at those who see computers and the internet as means of controlling people instead of seeing them as tools of liberation.
So who gets to decide what a hacker is in 2016? The question comes up constantly because the term retains some fuzziness. I'll put aside the unquestioned hacker status of coders and designers who innovate on products and private infrastructure. Blissfully, it's now OK for Silicon Valley geeks to proudly declare themselves hackers, the best example of which is Facebook CEO Mark Zuckerberg's naming of his corporate philosophy as "The Hacker Way." But I'm wondering about those people who take the law into their own hands, sometimes not even taking care to limit collateral damage of innocent people. While true hackers generally don't wreak actual destruction, there are some who invade or even tamper with systems for what they consider moral purposes. Some call it hacktivism. Does that mean they are still hackers? That's tough to answer. Hacking into a system doesn't make you a hacker. Using a computer to steal a credit card or a Bitcoin doesn't do it, either. If you work for China and hack into Google; if you work for Russia and hack into the DNC; or if you work for the United States of America and plant a software time bomb in a nuclear centrifuge in Iran -- you are not necessarily a hacker.
The hackers who attend those conferences are true to that ethic. There's a core morality to both events, built on privacy, equal access to systems, and personal freedom. There's indignation at poorly built systems. There's contempt at those who see computers and the internet as means of controlling people instead of seeing them as tools of liberation.
So who gets to decide what a hacker is in 2016? The question comes up constantly because the term retains some fuzziness. I'll put aside the unquestioned hacker status of coders and designers who innovate on products and private infrastructure. Blissfully, it's now OK for Silicon Valley geeks to proudly declare themselves hackers, the best example of which is Facebook CEO Mark Zuckerberg's naming of his corporate philosophy as "The Hacker Way." But I'm wondering about those people who take the law into their own hands, sometimes not even taking care to limit collateral damage of innocent people. While true hackers generally don't wreak actual destruction, there are some who invade or even tamper with systems for what they consider moral purposes. Some call it hacktivism. Does that mean they are still hackers? That's tough to answer. Hacking into a system doesn't make you a hacker. Using a computer to steal a credit card or a Bitcoin doesn't do it, either. If you work for China and hack into Google; if you work for Russia and hack into the DNC; or if you work for the United States of America and plant a software time bomb in a nuclear centrifuge in Iran -- you are not necessarily a hacker.
Black Hat really isn't about hackers at all, anymore. It's become overtaken by corporate functions, and lots of the talks given are little more than thinly veiled sales pitches. It's a networking event, at most.
Defcon on the other hand, which takes place immediately following (in a different hotel in Vegas), is very much about hacking, security, and has grown into so much more. In addition to the usual talks, panels, and parties, there's all sorts of hands on things to do. It's a lot of fun, and it costs roughly a tenth of what Black Hat or any similar corporate conferences do. About the only negative thing I have to say about it is that it's terribly crowded (but for good reasons).