A person discovers a vulnerability on a system without permission, anonymously alerts the owner, and instructs how to secure it. What type of hacker is this?

A person discovers a vulnerability on a system without permission, anonymously alerts the owner, and instructs how to secure it. What type of hacker is this?

• A. Black hat
• B. White hat
• C. Gray hat
• D. Script kiddie

Answer: (C)

Disclosing a vulnerability without official permission but providing a fix or guidance shows crossing a testing boundary without authorization, yet aiming to improve security. That combination is characteristic of a gray hat hacker: they don’t have formal authorization to test the system, but their actions are meant to help by alerting the owner and offering steps to secure the flaw. White hats operate with explicit authorization and usually follow a formal process or program; black hats exploit or cause harm for gain; script kiddies rely on ready-made tools with little understanding. Anonymous notification can fit gray hat behavior because the intent is protective, even if the method doesn’t follow sanctioned testing rules.

Disclosing a vulnerability without official permission but providing a fix or guidance shows crossing a testing boundary without authorization, yet aiming to improve security. That combination is characteristic of a gray hat hacker: they don’t have formal authorization to test the system, but their actions are meant to help by alerting the owner and offering steps to secure the flaw. White hats operate with explicit authorization and usually follow a formal process or program; black hats exploit or cause harm for gain; script kiddies rely on ready-made tools with little understanding. Anonymous notification can fit gray hat behavior because the intent is protective, even if the method doesn’t follow sanctioned testing rules.