Littlee300 said:
http://en.wikipedia.org/wiki/Grey_hat
That is all.
Edit: I still do think they're blackhat though.
If anything, Lulsec are
white-hat hackers (they currently espouse full disclosure, grey-hats and black-hats do not). The shade-based hacker classification system (tm) is more complicated than white=good, black=bad, grey=somewhere in between.
EDIT: In fact, among the more old-school hacking types, they're considered to be doing EXACTLY the right thing by releasing these details. Grey-hats are typically mercenaries or part-time security professionals that directly profit from their "benevolent" hacking, benefiting the public less and themselves and private corporations more (the individual company might benefit, but the exploit still exists worldwide and can be used against other companies), whereas black hat hackers would never expose discovered security flaws, except to other black hats (usually for a price).
The reason white hat hacking is considered (by many old-school hackers) to generate the most public benefit is that it provides the fastest response (companies have no
choice but to fix the problem once it's been publicly exposed) as well as benefiting the most possible people (the company can't decide to hide the vulnerability rather than fixing it, and more than one company benefits from the discovery).
But tens of thousands of personal account data was compromised! How could that possibly be good for anyone?
I'm glad you asked! The logic behind white hat behavior is as follows: If you disclose the data in private, the company might ignore your warnings, delay in fixing the problem, or only make a token effort to close the loophole in their system, leaving potentially millions of users at risk. Simply telling the public about the exploit without releasing the data defeats the point as well, as it becomes very easy for the company to deny the leak while also suddenly making the public
very exposed. The idea here is to go with the lesser of two evils. Yes, people's data have been exposed, but at least now they know about it, and if the data had not been released they were at a very real risk of having it taken and
not knowing.
A quick recap, in case that was confusing:
Color: Ethics: Stance
---------------------
White: Idealists: Full disclosure of data
Grey: Mercenaries: Partial disclosure for profit
Black: Criminals: No disclosure