Do you think the "Hack The Pentagon" program is a good idea, or a disaster waiting to happen?

PO3 Steven Sherrill — Thu, 31 Mar 2016 17:14:59 -0400

https://threatpost.com/hack-the-pentagon-trial-program-registration-open/117119/?utm_source=twitterfeed&utm_medium=linkedin+company+page

I agree with the principle of using hackers to test security, but I am kinda concerned that this is going to end disastrously for the DOD, What do you think RPers?

Hack the Pentagon Trial Program Registration Open

The Department of Defense announced that registration for its Hack the Pentagon bug bounty trial program is open, and that the program will be run on the HackerOne platform.

Response by PO1 William "Chip" Nagel made Mar 31 at 2016 5:18 PM

PO1 William "Chip" Nagel — Thu, 31 Mar 2016 17:18:51 -0400

Definitely Inherit Risk. Fact everyone is constantly trying anyway. It is the ultimate challenge for a Hacker. If the NSA Part of the DOD is doing their Job, It should be fairly hard. I appreciate the concept as a Means to recruit Hackers also. Respectfully a Black Box Man, a Capt'n Crucher (Predecessor to Hackers) and Retired Navy Spook.

Response by LTC Stephen F. made Mar 31 at 2016 5:19 PM

LTC Stephen F. — Thu, 31 Mar 2016 17:19:46 -0400

It may be a good idea to draw out hackers from this nation PO3 Steven Sherrill; but, tempting China and a few other nations to hack us is not a great idea.

Response by SGT Private RallyPoint Member made Mar 31 at 2016 5:30 PM

SGT Private RallyPoint Member — Thu, 31 Mar 2016 17:30:57 -0400

I think "honey pot" for some list I wouldn't want to be on.

Response by LTC Marc King made Mar 31 at 2016 6:10 PM

LTC Marc King — Thu, 31 Mar 2016 18:10:21 -0400

If you have to ask the question --- it is a really bad idea.

Response by PO3 Steven Sherrill made Mar 31 at 2016 6:13 PM

PO3 Steven Sherrill — Thu, 31 Mar 2016 18:13:14 -0400

Personally, I think that with the government's track record lately for information security, that this could potentially end with wikileaks multiplied by Snowden with a little foreign power just to complete the SNAFU.

Response by LTC Paul Labrador made Mar 31 at 2016 6:40 PM

LTC Paul Labrador — Thu, 31 Mar 2016 18:40:35 -0400

The use of White Hat hackers to find weaknesses in cyberdefenses is a pretty common practice. You would need to make sure the people doing it are truly folks doing to help you not to hurt you later.

Response by Maj John Bell made Mar 31 at 2016 9:21 PM

Maj John Bell — Thu, 31 Mar 2016 21:21:42 -0400

I have wondered if it isn't time to start a 6th "armed service". I think we need the skilled hackers, but they need to be on our payroll.