Skip to content
matthewcm.dev

    ↑ ↓ move · ↵ open · tab scopeopen graph →

    Hacking Forums as Learning Communities

    Game hacking and modding forums are, first of all, places where people learn — sharing tools, tutorials and status. The same dynamics that make them great teachers raise the question of where the learning leads.

    Seedtended planted 2 min read

    🌱 A rough idea, planted recently. Expect rough edges — it will grow.

    On this page

    The National Crime Agency’s Pathways into Cyber Crime (2017) suggested that game cheating and modding communities can be an early step towards criminal hacking. My dissertation set out to test whether data could support that (Pathways into Cybercrime). Along the way, I came to see these forums less as dens of iniquity and more as something familiar: learning communities.

    What makes them good at teaching

    • Motivation built in. People want an edge in a game they love, or a mod that makes it theirs. Intrinsic motivation is the best kind there is.
    • Learning by doing. Reverse engineering a game client, reading memory, writing a trainer. These are real skills, practised on real targets with fast feedback.
    • Shared resources. Tutorials, tools, code and answers, the same “access to shared resources” that defines a community (Online Communities and Interaction Spaces).
    • Status and belonging. Peer recognition for clever work, and a sense of family that can form remarkably quickly.

    Put like that, it’s a description of any good community of practice, including the ones I’ve helped run at work.

    Where the worry comes from

    • The competitive edge doesn’t stop at the game. In games with real-money economies, cheating sits next to buying and selling accounts and items, and from there it’s a short step to the grey and black markets researchers study on dark-web forums (Tavabi et al., 2019; Kigerl, 2018).
    • Consequences feel abstract. Knocking a rival guild offline with a denial-of-service attack can feel like a prank. It’s a crime, with real fines and arrests attached.
    • Status loops reward escalation. If reputation comes from what you can break, the next bigger target earns more.
    • Grievance can justify it. Anger at an unresponsive authority makes hacking feel legitimate (Why People Legitimise Hacking).

    What I wanted to measure

    The question was whether you could see a pathway in the data: topics shifting over time from game mods towards more serious hacking, and pseudonymised accounts moving between communities. The method combined Topic Modelling with LDA for what’s being discussed with Social Network Analysis for who’s connected to whom. It deliberately allowed the answer to be “no”: the claim might be unsupported, or just wrong.

    The more hopeful reading

    If these forums are learning communities, the intervention isn’t only enforcement. It’s better on-ramps: bug bounties, capture-the-flag competitions, modding programmes and security careers that reward the same curiosity legitimately. Many security professionals started by poking at games. The skill isn’t the problem; the direction is.

    Sources

    • National Crime Agency (2017). Pathways into Cyber Crime.
    • Tavabi, N. et al. (2019). Characterizing activity on the deep and dark web. Companion Proceedings of The Web Conference.
    • Kigerl, A. (2018). Profiling cybercriminals: topic model clustering of carding forum member comment histories. Social Science Computer Review.
    • #cybercrime
    • #online-communities
    • #learning
    • #game-hacking
    • #research
    • Online Communities and Interaction SpacesGrowing
      …if status comes from what you can break, a community can nudge people further than they meant to go. More in Hacking Forums as Learning Communities.
    • Pathways into CybercrimeGrowing
      …h from a harmless game mod to something less harmless might be shorter than it looks. More on that framing in Hacking Forums as Learning Communities and Online Communities and Interaction Spaces.
    • Why People Legitimise HackingSeed
      …vance is the shared identity may be more fertile ground for legitimising harm than forums built around craft (Hacking Forums as Learning Communities).

    ↪ Links to (5)