this post was submitted on 16 Feb 2024
250 points (83.6% liked)
Technology
59436 readers
4272 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Red Team is a hacking term that refers to people who try to sabotage or use the system to create harmful content, as a way to test and discover problems before it is usable by any external users.
https://en.wikipedia.org/wiki/Red_team
That's inaccurate. Red Team is the guys that test your security from an attacker view point. Red Teams are often contractors hired by companies. The companies are the ones paying to be "hacked", so they can fix whatever gaping security holes the red Team finds.
At least, that's usually the definition. If just talking about AI stuff, I'd call those people testers.
I always thought that people hired to pen test are white hat hackers? What is the difference to red team?
People in red Teams are white hats. The terms describe different things. The "color wheel" is operational and thinks in the context of an organization. Red Team tries to attack our stuff, blue team tries to defend our stuff, yellow team builds our stuff etc.
White hat is just a term for ethical hackers, black hat is a term for criminals. Grey hat means someone in-between (think political hacker defacing website of organization they don't like), there is also some more but the shades of grey are most important.
While white hats are sometimes paid, it is generally in bounties. It just means being adversarial without trying to be unethical. So, find the hole but tell the person that made it rather than the crooks that will exploit it.
A red team on the other hand is a known value. They are the bad guys in a simulation. The military exercises similarly or any organization that wants to test defenses. Red team == the make believe bad guys.