Hacking (unauthorised access to a computer system)

The idea

Hacking is unauthorised access to a computer system: someone gains entry to data, accounts or networks without permission from the owner. The key idea is the lack of authorisation, not the technical method used. A person who guesses a password, exploits a software weakness or tricks a user into revealing login details is still hacking if access was not permitted. This matters ethically and legally because it breaches the owner's control over their data and invades privacy. Personal records, financial details or private messages may be copied, altered or leaked. Hacking is a criminal offence under computer misuse law, so a hacker can face prosecution. It also has a social cost: organisations must spend money on security, and individuals may suffer fraud or distress.

What earns the marks

• Defines hacking as gaining access to a computer system, data or account without the owner's permission.
• Identifies that the defining feature is lack of authorisation, not the particular technique used to gain entry.
• Explains an impact on privacy, such as exposure, copying or alteration of personal or confidential data.
• Explains a legal consequence, such as hacking being a criminal offence that can lead to prosecution.
• Distinguishes hacking from authorised access, for example a security professional testing a system with the owner's permission.
• Explains a wider social or financial cost, such as organisations spending on security or individuals suffering fraud.

Common mistakes and how to put them right

• Believing hacking only means using sophisticated technical skills.

  Put it right by explaining that guessing a password or tricking a user without permission is still unauthorised access.

• Confusing hacking with any use of a computer or with lawful security testing.

  Put it right by stressing that permission from the owner is what separates hacking from authorised access.

• Thinking hacking has no victim because no physical harm occurs.

  Put it right by explaining the privacy breach, financial loss and legal offence involved.

Exam tips

• Anchor your answer on the phrase 'without permission' to show you understand what makes access unauthorised.
• When asked about impact, name the effect on the individual or organisation, such as loss of privacy, fraud or the cost of improving security.
• Use the legal angle: state that unauthorised access is a criminal offence, rather than only describing it as 'bad'.