I was a member of many video game communities as a kid and DDOS attacks to disrupt game play, RATs and other tools to steal and sell virtual currencies, happened frequent and often.
I think the volume of destructive activities outweighs the constructive ones, even if many such perpetrators went on to become Software Engineers and Pen Testers for Meta, Google, and other companies. Like others I don't think they should be arrested for the less harmful examples - but there are lines that cause significant societal harm that should end in proportional punishments.
> I was a member of many video game communities as a kid and DDOS attacks
I agree here that this is a destructive activity with no benefit. Securing games against DDOS attacks seems like a wasted effort.
The entire history of hacking shows that kids will, do, and always have hacked corporate systems. They'll absolutely hack each other while they're at it, but much of that time will also involve hacking corporate systems. Even kids who hack video games are very often hacking corporate systems because it's corporations who control the game servers.
I would much rather have corporations and the countless third party companies/hardware/services they depend on all patching and hardening their stuff for fear of pesky children cheating in video games than let all those corporations become complacent. As it stands today corporations do only the bare minimum when it comes to security as repeatedly evidenced by the endless leaks and data breaches which rarely involve complex vulnerability chain attacks full of zero days and most often could have easily been avoided by protecting against threats that are very well known and for which solutions already exist.
The harm caused by trolls and cyberbullies is dwarfed by the harms these corporations would cause society if they had any less pressure to take even the most basic steps to protect our accounts and our data.
You're right about that. It's far from an ideal solution. I'd much rather if that pressure came from regulation that would consistently deliver severe consequences for any company that decides to cut costs/increase profits by neglecting their responsibility to protect our data and the systems and services we pay for and depend on. That way, all systems would be reasonably protected. We wouldn't have to worry as much about pranking teenagers causing disruptions and posting penis pictures, and it would still make it harder for the adult hackers to gain access and do much worse.
Specifically, targeting people in the real world who make your actual life difficult.
That's from the late 90's/, early 00's.
Kids won't hack corporate systems. They'll hack each other, they'll hack and share nudes, they'll embarrass one another, harass, troll, and bully.
I was a member of many video game communities as a kid and DDOS attacks to disrupt game play, RATs and other tools to steal and sell virtual currencies, happened frequent and often.
I was a member of many video game communities as a kid
you may never hadn't a clue at the time, but those pre-release builds, firmware dumps, decryption keys, _______ source code, pii dumps, debugging symbols, and other general degeneracy facets were not reverse engineered in a white-room environment by 17 year olds, but rather compiled and scavenger hunted from the depths of google, re-used passwords, internal email dumps, physical intrusion (yes), blind XSS that phoned home an admin panel months later....I could go on, but that was nostalgic enough.
I think the volume of destructive activities outweighs the constructive ones,
if many such perpetrators went on to become Software Engineers and Pen Testers for Meta, Google, and other companies.
Like others I don't think they should be arrested for the less harmful examples - but there are lines that cause significant societal harm that should end in proportional punishments.
After checking out your cart on a hypothetical web-store, you are redirected to the receipt page. Sharing the link with a cohort via email, you leave off a single digit in the r? parameter in the URL, causing a receipt from someone else to display.
It was a brisk fall dew-filled dawn the next morning when the State-Cyber-Police made their swift, immemorial performance. Donned with insignia "pastor sapientiae," they had long ago forgotten their purpose, aside from the prevention of the proliferation of the unwise and their defiance of authority.
Improvements are expenses. The only unknown here seems to be whether nation-state attackers would recruit these gifted and experienced kids at a rate larger than corporations would be able to improve their security.