The distinction between hacker and legitimate security researcher can be difficult to make. In 2001, Maiffret's firm, eEye Digital Security, found a weakness in Microsoft's Internet Information Services server software. The security firm notified Microsoft about the flaw, and Microsoft issued a patch. But a month later, the notorious Code Red worm raced through the Internet and attacked hundreds of thousands of unpatched systems around the globe by taking advantage of the security weakness eEye discovered.
The hacker community itself makes that distinction by referring to white-hat and black-hat hackers, which reflects what sociologist Bernhardt Lieberman refers to as the "dual nature of hacking." There are hackers who are enthusiasts who try to push technology as far as it can go to learn how things work, and there are hackers who are serious threats to businesses and systems, whose intrusions and malicious code cause great pain.
The terms hack and hacker originated in the 1950s at The Model Railroad Club at the MIT. The image of the computer hacker has been romanticized in popular culture in movies such War Games and Hackers. Today, however, the word hacker is commonly used to refer to criminal--or at least arrant--activity. "It's come to mean anyone who works their way around legitimate controls in systems," says Herb Mattord, an information systems instructor at Kennesaw State University in Georgia.
Those clinging to a less-tainted definition of hacker don't think of themselves as criminals. Most say they just want to learn more about computers, says sociologist Lieberman, director of the research firm Social Inquiry and professor emeritus of sociology at the University of Pittsburgh. Lieberman has conducted detailed interviews with 42 hackers, analyzed the content of 2600: The Hacker Quarterly magazine, and attended hacker gatherings.
When asked about their motives for hacking, nearly 100% say they hack for intellectual challenge, to increase knowledge, to learn about computers and computing, or to understand how things work. However, 14% cite attacking authority and the government among their motivations. And 7% say it's to attack capitalism, break the law, or become well-known.