Hacking Power

A version of this column first appeared in the New Philosopher magazine.

In his book The Death of the Gods: The New Global Power Grab, the British author and researcher Carl Miller describes the mind-set of a hacker taking control of a digital device. First comes exhaustive attentiveness: learning how something works, its limitations, its imperfections. Then comes the quest for a method that can turn these imperfections into vulnerability. Finally, you exploit the vulnerability. It’s a model of the scientific method in action—and of power grasped via empirical research. “Through a mixture of knowledge, skill, perseverance,” writes Miller, “you’ve owned the device!”

This idea of “owning” something or someone, in the sense of conquest or domination, is central to hacking. To hack is to subvert a system, substituting your intentions for those of the designers. Hackers have the power to do things that, so far as everyday users of technology are concerned, are not so much forbidden as impossible—because the system itself defines what is possible with absolute authority.

Most of us can no more sidestep the rules of the software girdling our lives than we can temporarily switch off the force of gravity. As hackers would be the first to point out, these protocols are some of the 21st century’s most ubiquitous and coercive structures of power. Neither optional nor obvious, they map our relationships with everything from money and property to the state and each other. And they come wrapped in a rhetoric of empowerment that is, at best, disingenuous—and at worst deceitful.

If a hacker “owns” your smartphone—most probably by tricking you into executing malicious code on it—they exercise far greater authority over its contents than you ever did. This is because the actions you can perform on your own hardware are carefully circumscribed. You don’t fully control most of your data, or the software you use every day. Genuine ownership, together with its power and entitlements, remains with the companies of whom you are a customer. The vast quantity of metadata that profitably constitutes you, online, is someone else’s property. You are owned.

Does this matter? This depends upon how far you mind being beholden to those maintaining the services you rely upon—and what recourses you have when your desires clash with the system’s desires for you.

***

The history of ownage/pwnage in hacking is interwoven with the history of online games, complete with their zero sum outcomes. In gaming and hacking, to be pwned is not so much to lose as to be destroyed utterly. Everything you have—your in-game character, the complete contents of your system—becomes subject to someone else’s whim. Annihilation arrives at the click of a button. Hackers sometimes refer to their victims as “sheep” because, like livestock to the slaughter, they can’t begin to resist or comprehend what is happening.

As part of his research, Miller paid a visit to the world’s biggest hacking convention, DEF CON in Las Vegas—and felt this energy crackling through the air. “To me,” he writes, “every crescendo on these DEF CON stages meant one thing: power.” You’ve probably got an image of the DEF CON crowd in your head: dark hoodies, pale skin, tattoos and pseudonyms. If so, you’re not far wrong.

Hacking is often treated, in law and media reports, as a special species of theft. To hack is to perform a brilliant heist: to break into a locked room and remove its treasure. Yet, for those swelling the DEF CON crowds, treasure is largely beside the point. Prizes and profits are for criminals and script kiddies. True hackers are in it (or would like you to believe that they’re in it) for the pure thrill of pwnage. They don’t want to take power away from you, the sheep-like user, because you don’t have it in the first place. They want to step into the shoes of the engineers who own the fabric of your digital existence—to reach inside and reconfigure the black boxes whose code is law.

This symmetry is embedded at the heart of the world’s most influential tech companies. If you want to visit the headquarters of Facebook’s global operation, you’ll find it at One Hacker Way, Menlo Park, California. If you wander the company’s sprawling campus, you’ll see the word HACK blazoned on walls, floors and clothing. “Move fast and break things” is the unofficial mantra of digital disruption. It signals innovators’ refusal to play by established conventions—their appetite for smashing existing systems, then putting them back together in new forms. They, too, are wrestling mastery away from the designers and administrators of complex systems while users bleat their ignorance. But the systems they’re hacking are regulations, markets, economies, social norms.

So far as big tech is concerned, you don’t win the game by playing fair. You win it by designing a new game in which you own all the pieces, then convincing the world to play. You win it by knowing more—and more, and more, until the way you say the world should work becomes the way it does.

***

Anyone who’s been hacked will tell you that it’s accompanied by a sense of fierce helplessness. Depending on whether you suffer extortion, abuse or just inconvenience, it represents a humiliating loss of assets and agency. Watching your phone succumb to hacking is particularly painful, as your most useful, personal and adaptable device betrays your trust. It’s as if a close friend inexplicably ransacked your house and turned over its contents to a stranger.

In our age of overwhelming technical complexity, hackers are among the few people who can reduce transnational corporations to a state of similar helplessness: can slice through the fortifications of wealth and privilege. No wonder they’re so often mythologised by movies as something between mavericks and magicians, unweaving the spells in which mere mortals are snared.

And yet—no freedom waits to be unlocked somewhere beyond the hacked corpses of tech giants. For the power that hackers tap into is something they usurp, not something they create. It may be exploited and undermined, but hackers’ strength ultimately has the same foundations and limitations as that of the systems they commandeer: uncomprehended complexities, unaccountable manipulations, and a citizenship who know exponentially less about the systems they use than those systems do about them.

In our digital world, ignorance is impotence. Information is aligned with power not just because it allows those who possess it to do more, but because it defines the fabric of what can be said, done and acted upon in the first place.

To paraphrase Arthur C Clarke, the power technology grants its designers and manipulators is a kind of magic—and, like all magic, the first step in dispelling it is to keep on asking how it’s done. If you wish not simply to exploit but also to push back against others’ disempowerment, in other words, it all begins with the collective investigation of whatever mere users aren’t supposed to know; and with the creation of products, regulations and nations within which power itself is surfaced, interrogated and held to account.