On Hacking Back

A commentary on “hack back” by former DoJ attorney John Carlin outlines the legal boundaries of active cyber defense, noting that purely defensive actions limited to a victim’s own systems are permissible, while offensive measures targeting attackers’ systems are generally prohibited without government authorization. The piece highlights risks such as misattribution, collateral damage, and retaliation, and recommends pursuing government oversight or court authorization for any gray-area tactics pending clearer statutory guidance.