The term 'hacker' was originally used to describe a person who had advanced skills in computing.
Bill Gates and Steve Jobs (founders of Microsoft and Apple) could be, and probably were, described as hackers during their membership of the pioneering 'Homebrew Club'. This was an informal society for people interested in early microcomputers.
At about the same time, a number of people who called themselves 'phreakers' were using various tones (normally used by engineers to test lines and exchanges) to get free telephone calls.
Because the tones were transmitted along with the call, it was possible to whistle down the telephone line and control the exchanges. Calls were routed to wherever they wanted, for free.
The phreakers become interested in breaking in to many of the computer systems they could contact using their tones. Somewhere along the line, the terms got confused, and the current usage of 'hacker' became common.
When the Internet came into regular use, the hackers went to town. See below for more on:
The media thinks...
It takes all sorts...
Generally you can break the hackers down into three tiers:
A first tier hacker is a programmer with extensive, specific experience of systems, protocols and processes. They are often professional programmers who enjoy coding as a hobby on the side.
First tier hackers discover vulnerabilities and code programs to exploit them. They are not common, and carry out a lot of research to stay current.
Second tier hackers have experience of networking, different operating systems, and understand how to exploit vulnerabilities.
System administrators make good, second tier hackers. They will have a large collection of tools and understand hacking methods, but rely on others to find and code most exploits.
Third tier hackers are also known as 'Script Kiddies'.
These people earn no respect amongst the hacker community because they have no real idea what they are doing.
Generally, they are not IT professionals, but will download code from the Internet and run it on the office network or across the Internet. They know just enough to be dangerous.
All of the above equates to a monetary loss, either directly or indirectly.
There is a lot that you can do to protect your organisation against the threat of hacking and other unauthorised events on your systems.
For further advice see our Unauthorised Access and Good Housekeeping sections.
If you are concerned about your own risk from unauthorised access, check the Unauthorised Access Risk page, or run a Health Check now.
If you have been the victim of a hacking incident, check the Unauthorised Access Recovery page.