One of my sons is interested in hacking and hacking-adjacent technology - he maintains a popular list of proxies that circumvent his school network, and his favorite possession is his flipper zero which he's been watching youtube videos on and keeps trying new types of interactions with it. He's gotten in trouble before for using some kind of tool to crash in-class kahoot, and most recently he took his flipper out into the neighborhood and tried to mess with the ring doorbells of strangers. I really enjoy the creativity, ingenuity, and entrepreneurial spirit he brings to these activities, but right now it seems like he's on a path that is going to get him expelled and/or arrested. Does anyone else have experience with kids like this, and did anything work to get them back on track without destroying their love of technology? I'm worried coming down too hard will just move this behavior into the shadows rather than eliminating it.
You make more money and have better career prospects on the straight and narrow. My circle of friends in highschool were a bunch of script kiddies and had lots of fun trolling people, stores, businesses with dumb hijinks in the late 2000s. The ones that went to university and pursued engineering degrees are happy, have families and are content to hack around on home automation and drones with their spare cash. The ones that went too deep into the black-hat world are divorced, can't hold down an apartment, let alone a stable job. Have been swatted (instigated by rivals), have been raided (actually got caught with their hand in the cookie jar), had all their electronics confiscated (the government does not like hacktivism!) and are failures in life. Sure, ripping off CC numbers from a business with a shitty PHP storefront website is exciting, but it's a bitch to cash out on. And its very inconsistent work, like feast-or-famine, which is shitty for things like paying rent and bills. It's just not worth the risk, especially for internet fame.<p>Edit: I would suggest getting them involved in positive activities that scratch that itch. Does their school have a robotics team? Can you buy them a kit for building a DIY FPV drone? Got any projects of your own they can help you with? Are there any local competitions you can get them in? (Math, drone racing etc.)
Have a chat with him on what motivates him. Is he seeking attention, approval or is he generally curious about understanding and breaking things?<p>As others have mentioned, things are better when he is on the straight and narrow. If he doesn’t want to work for a company, he can work for himself and consult / sell his expertise for companies that are willing to pay top dollar for finding serious securirty issues in their products and services.<p>Finding a mentor (as has been mentioned) will go a long way. Someone that had been trouble for himself and others - but decided to go on the straight and narrow - and basically provide and educate with various choices and consequences (both good and bad).
Finding a mentor, getting him to meet professionals and showing him the way of white hat is probably good.<p>My parents didn’t understand my obsession for computers at a young age and I also went down a fairly black hat learning route.<p>I suggest you inform him via the likes of DEFCON, support groups, local hacker spaces. It’s easy to go down a wrong path in this field.
Do you have any local cyber groups (BSides or similar) you could bring them to and find a mentor for them? They need combined investment from you and a practitioner, and you're trying to do your part. Broadly speaking, you want to help them channel the drive and talent into something productive and legal, where they will be rewarded and validated in a healthy way.