Some say that they are deserving of nothing less than jail time. Yet others say that their skills are a necessary evil that if used for good can help secure networks and sensitive data. How do you weigh in on this issue?

Having been a victim of hackers I am more inclined to agree with the former. Granted that several attacks are not malicious but are really a demonstration of prowess/weaknesses in your security. However, I still do not believe that a person should break into my house just to show me that my locks are weak. I also disagree with the notion that their skill could be used for good. Would you feel any safer if a known terrorist was your personal bodyguard? I think not.

It is also my opinion that not enough is begin done to bring these ones to justice.

Having said all of this, I have started learning the very skills that they use in order to defend the sites that I develop. You have to some how marvel at their abilities especially when you consider that they do, what they do, in the middle of the night, listening to rock music and under the influence of alcohol and/or drugs.

They are always one step ahead of IT security.