When My Nephew Hacked This Blog
Tuesday, May 5th, 2009
Photograph by gutter (cc)
There it was before me – my web site on one screen, this blog on another. Normally, this would not seem particularly strange, but it was not the blog as you see it (I hope). Both were opened to my admin. panels - my private admin. panels. It looked as though I had logged on and was getting ready to either make some changes or write a post. My brain hastened to justify this. During a previous late night session had I left myself logged on to both and forgotten to log out? Sure, that was it. I breathed deeply. No, wait, the night before, my nephew and I had gone out for a late dinner. We had come home and I had gone off to bed. No, there was no blogging at all.
My nephew handed me a cup of coffee, “Still blurry, eh, Aunt Ellie?” I took the coffee and sat down at the laptop, still feeling even more hazy. Perhaps this was just a bad dream?
“Why are my web site and blog open to the admin. panels?” is all that I could manage for a good morning greeting.
He looked snarky, yes, that is the word – snarky, “Last night you didn’t seem to believe that I am a hacker, did you?”
The conversation from the night before came back in a dribble of memory. I had more or less passed by his comment, supposing it to be youthful bravado. My lack of belief now was apparently catching up to me.
Remaining calm and hoping that my original, life-long assertion that my nephew was not malevolent was still correct, I asked, “Did you do anything to my sites?”
He looked theatrically stunned, “Aunt Ellie, I am hurt. Do you believe I would do anything to your sites?” Visions of stop watches, swirls and such danced through my mind. I merely glanced at him with raised eyebrows (some times I can act like the elder I am supposed to be). He then hit a few keystrokes and the presentation part of the blog and web site took the screens. They looked normal. They looked like I had left them.
“It is what I do, Aunt Ellie, ” he told me with what seemed like sincerity.
“Great. Just great. My own nephew, is a cyber rogue. Hasn’t you father taught you better than this?” I asked feeling incredulous. Would my humble home suddenly become a haven of hackers, degenerates, and perhaps an infiltrating cyber cop?
He actually looked hurt, “You have it all wrong. Being a hacker now days does not mean I am going to wipe out people’s sites, leaving cryptic messages that will lead to my eventual demise. It does not mean spreading viruses. It means just the opposite. I am all about IT Security. I am the good guy.”
I did what I always do – I took a long, slow sip of coffee, using the pause to collect my thoughts. Nope. I was still puzzled. Hackers are the good guys now? My nephew continued to explain. Like everything, there is the bad side (the one which got the rise out of me) and the good side. He has learned how to hack into various cyber systems (apparently one of his preparatory teachers showed him how to do this - great). Instead of doing damage, he freelances himself out to various companies to hack into their systems so that that the companies know their security weaknesses. My nephew is what is termed as an “ethical hacker.” Apparently it is a new career field (or an old one and I am just a bit out of it).
He stilled snarky, “You out of all people should understand,” he tells me, “you are into behavior modification. You just need to modify your thoughts on hacking. And like you are a certified hypnotist, I am a Certified Ethical Hacker” Perfect. My own nephew preaches the good book of hypnosis at me.
Needless to say, I felt great relief from all this – but then my curiosity also became involved. Is this not the same thing as hiring robbers to rob your bank to see what happens? Maybe this is not a bad idea. As he showered, I looked up The International Council of Electronic Commerce Consultants (EC-Council). They deal with teaching students to understand hacking cycles, offer an interesting training modality (online e-courses), and provide subjects like security fundamentals, ethical hacking, penetration testing, computer forensics, disaster recovery and secure programming. Sounds more Batman than the Joker.
But the points remains - he still hacked my web sites. Was that ethical?
His response? “Sure it is. This is what ethical hacking is all about. Now you know you know your site weakness.” Hmmm.









