Can you hack...? That was the first message I got after replying to a LinkedIn job post. Not exactly what I…
Innocent A. — Cybersecurity Analyst
Can you hack...?
That was the first message I got after replying to a LinkedIn job post.
Not exactly what I expected, but I stayed in the conversation.
Here's what unfolded.
A young man had posted what looked like a vague freelance opportunity. When I responded, he dropped the real ask fast: his school had allegedly failed a large number of students in their final exams. He believed it was unjust. He was angry, desperate, and convinced the only way to fix it was to find someone who could break into the school's systems and change the results.
He was willing to pay well.
In fact, he had already lost thousands of dollars trying.
Scammer after scammer had taken his money and disappeared. And yet, he kept looking. That desperation tells you something important, because it wasn't really about the money anymore. It was grief dressed up as a mission.
I listened. Then I told him the truth.
What he was asking for is a crime.
Not a grey area. Not a technicality. Unauthorized access to a computer system, tampering with academic records, fraud. In most jurisdictions, that is multiple felonies stacked on top of each other. The school's negligence, real or perceived, does not change that calculus.
But here is the part that cybersecurity professionals need to sit with:
Someone always says yes.
For every ethical practitioner who walks away, there is someone who takes the money. And when the damage surfaces, it rarely stops at the target. Innocent students get flagged. Institutions lock down legitimate access. Investigations sweep up people with no involvement. The person who paid? Often the first one talking to investigators.
Desperation is one of the most consistently exploited attack vectors in social engineering, and it works just as well on the person hiring as it does on the person being phished.
What I told him instead: document everything, engage a lawyer, contact the relevant regulatory bodies for education in his country, and rally the affected students to file a formal complaint together.
Collective, legal pressure has reversed institutional decisions before. It does not make the headlines a "hack" would, but it actually works.
He went quiet after that.
I do not know what he decided.
But I know what I decided, and that is the only part I control.
Skill without ethics is just a more sophisticated way to cause harm.
If you work in cybersecurity long enough, someone will test your boundaries. Sometimes directly. Sometimes with a compelling story. Sometimes with real money on the table.
Know where you stand before that moment arrives.
1 reactions · 0 comments