Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I agree, dubious use of the term white-hat. He hacked into their systems, stole the code, and kept a copy on an external hard drive. Didn't do anything malicious, but didn't contact Facebook about it either. They discovered the intrusion by accident, and it took them months to track him down.

So "keeping the data to himself and doing nothing with it" is considered white hat?



I think they are trying to distinguish it from those who actually cause harm.

I think he should be called gray hat. (Black: Harm. Gray: Does nothing. White: Helps company.)




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: