Read:
How different are those who employed 'security firms' like HBGary different from black hat hackers when they are ordered to infiltrate systems and recently, target the civilian infrastructures too ? Aren't they acting like a black hat but with some legal authority that makes them sound nicer... by calling them 'security / IT contractors' ?
