All official HINAC Advocates and HINAC Volunteers are required to review and agree to the following HINAC Core Values
I believe hackers don’t exploit out-of-scope for malicious intent. I believe hacking is a lifestyle, skillset, and a state of mind. It is my professional responsibility to represent Information Security in a positive way.
I believe the current federal legislation is outdated and requires significant reform. I understand that we work to support and raise awareness to organizations that are redefining and protecting the rights of hackers.
I agree to avoid claiming authority to speak on behalf of HINAC when asked for commentary by external sources. Shall the occasion arise, I will consult with HINAC Leadership before providing a response.
I understand HINAC Advocates must present themselves in a meaningful way. In the event that I would like to engage with an external entity, I will get assistance from at least one other representative of HINAC.
I understand that we work with a wide array of media outlets to change the narrative that is presented and attacking the media is prohibited; all commentary on any issues must be presented in a meaningful, and educational light.
I will avoid being disrespectful, especially when representing HINAC. I will be empathetic and attempt to maintain a neutral standpoint when participating in the active resolution of presented issues. Supporting HINAC's mission requires continuous awareness of mislabeling.
I have read the Hacker Manifesto and Hacker Ethic. I agree to and follow the I am the Cavalry's position on disclosure.
If I am employed by a company that does not have vulnerability disclosure policies, I will recommend Disclose.io as an example of how to get started with vulnerability disclosure policies.
I understand that the usage of "white hat" and "black hat" are not appropriate. As a replacement, I support the following naming alternatives to be used instead to describe these personas:
White Hat
» Hacker
» Ethical hacker
» Professional hacker
» Security researcher
Black Hat
» Attacker
» Criminal
» Cybercriminal
» Malicious actor