4 ms·

I'm fully on board with changing these terms, both because of the racial aspects, but also because "AllowList" and "DenyList" are more descriptive. I've alread

I'm fully on board with changing these terms, both because of the racial aspects, but also because "AllowList" and "DenyList" are more descriptive. I've already changed much of my cryptography masterclass slides and code, but I'm looking for good replacements for "White Hat Hacker" and "Black Hat Hacker". Suggestions? I'm drawing a blank ...

hypertexthero 6y ago
Here’s one suggestion, including for Grey Hat Hacker: Virtuous Hacker Pragmatic Hacker Malicious Hacker More information on this subject: * Terminology, Power and Oppressive Language: https://tools.ietf.org/id/draft-knodel-terminology-00.html#rfc.section.1.2 https://tools.ietf.org/id/draft-knodel-terminology-00.html#r... * A Class Divided - https://www.youtube.com/watch?v=1mcCLm_LwpE https://www.youtube.com/watch?v=1mcCLm_LwpE I hope one day we don’t have to think about these things any longer but given our history I think it is worth keeping them in mind.
robocat 6y ago
> replacements for "White Hat Hacker" and "Black Hat Hacker". There are context dependant replacements. A security researcher is always white hat. A black hat is called an attacker or threat actor etc. I presume “white hat” and “black hat” come from https://en.wikipedia.org/wiki/Spy_vs._Spy https://en.wikipedia.org/wiki/Spy_vs._Spy so it isn’t black and white whether removing those terms is just whitewashing. The term black hat usually implies a security context. A “black hat hacker” is a confused usage, and should not be in any training materials IMHO. Depending on your social circle (or context) hacking may be always good (hacker news) where you might use cracker or attacker for the bad sense, or the popular usage of hacker where they are always bad (and white hat would be an alien term to that crowd). I re-edited this comment for clarity.

hypertexthero 6y ago

Here’s one suggestion, including for Grey Hat Hacker: Virtuous Hacker Pragmatic Hacker Malicious Hacker More information on this subject: * Terminology, Power and Oppressive Language: https://tools.ietf.org/id/draft-knodel-terminology-00.html#rfc.section.1.2 https://tools.ietf.org/id/draft-knodel-terminology-00.html#r... * A Class Divided - https://www.youtube.com/watch?v=1mcCLm_LwpE https://www.youtube.com/watch?v=1mcCLm_LwpE I hope one day we don’t have to think about these things any longer but given our history I think it is worth keeping them in mind.

robocat 6y ago

> replacements for "White Hat Hacker" and "Black Hat Hacker". There are context dependant replacements. A security researcher is always white hat. A black hat is called an attacker or threat actor etc. I presume “white hat” and “black hat” come from https://en.wikipedia.org/wiki/Spy_vs._Spy https://en.wikipedia.org/wiki/Spy_vs._Spy so it isn’t black and white whether removing those terms is just whitewashing. The term black hat usually implies a security context. A “black hat hacker” is a confused usage, and should not be in any training materials IMHO. Depending on your social circle (or context) hacking may be always good (hacker news) where you might use cracker or attacker for the bad sense, or the popular usage of hacker where they are always bad (and white hat would be an alien term to that crowd). I re-edited this comment for clarity.