3 ms·
Since organizations do not observe an attacker's failure, the market generally does not reward extreme competence in cyber defense... Blackhats, in stark contr
by stcredzero 9y ago
Since organizations do not observe an attacker's failure, the market generally does not reward extreme competence in cyber defense...
Blackhats, in stark contrast, are sexy.
Bounty hunters are sexy. Why doesn't the government start paying bounties? Paying bounty hunters to run honeypots would convert many black hats into hunters of black hats. This could well create an ecosystem where the more knowledgeable hackers directly prey on the script kiddies for fun and profit. Taking useful idiots out of the ecosystem strikes me as desirable. Such a program would also be useful for recruitment.
In a way, this is analogous to such bounties in the transition of the wild west into a more normal society.
- im3w1l 9y agoThis would incentivize black hats to frame innocents. And black hats strike me as the type of people that would be able and willing to run with it.
- stcredzero 9y agoThis would incentivize black hats to frame innocents. I thought of that too. This also happened with bounty hunters. There will need to be safeguards.
- lucb1e 9y agoIf you have a rat problem and start paying for rat corpses, people might start breeding rats.
- stcredzero 9y agoThe analogy falls down a bit, because while rats are born rats, a hacker is first a person. People can witness people becoming examples, and decide not to do that. That said, problems can arise, due to national borders, limited jurisdictions, and differences in access to socioeconomic resources.
- roywiggins 9y agoThe last time we paid bounties, we ended up with a bunch of people in Guantanamo who had no reason to be there.
- oblib 9y ago"Why doesn't the government start paying bounties?" They employ NSA workers to find and exploit them instead.