Your life as every level of the world's most wanted hacker. You are 17 years old. You are sitting in your bedroom in the dark. The only light comes from three monitors arranged in a half circle on a desk covered in energy drink cans and crumpled chip bags. Your parents are asleep down the hall. Your school thinks you are an average student with a B- minus average who spends too much time on the computer. What your school does not know, what nobody in your life knows, is that over the last 6 months you have broken into the computer systems of the United States Department of Defense, stolen 3,300 classified emails, downloaded $1.7 million worth of proprietary software from NASA, and installed a backdoor into a server at the Defense Threat Reduction Agency that gives you access to information about nuclear, biological, and chemical weapons threats to the United States of America. You are not a spy. You are not a terrorist. You are not working for a foreign government. You are a teenager. And you did it because you wanted to see if you could. Right now, agents from the FBI, the Department of Defense, and NASA are building a case against you. They do not know your real name yet. They know your screen name. They know your IP address. And they are getting closer every day. This is your life as every level of the world's most wanted hacker. And it starts with a blinking cursor on a black screen. Level one, the script kiddie. It starts in a chat room. You are 13 years old. You have just discovered the internet, and the internet has just discovered you. You are not a hacker yet. You are what real hackers call a script kiddie. Someone who downloads tools that other people wrote and runs them without understanding how they work. You find a program on an underground forum that can crash someone's internet connection. You type in a target IP address. You press enter. And 30 seconds later, your friend's Xbox Live disconnects in the middle of a game. He is furious. You are thrilled. You have just executed your first denial-of-service attack, and you did not even know that was what it was called. You spend the next 2 years lurking in hacker forums, IRC channels with cryptic names that disappear and reappear on different servers, dark corners of the internet where people share exploits, leaked databases, cracked passwords, and step-by-step tutorials on how to break into systems you have no business being anywhere near. You teach yourself the language of intrusion like other kids learn Spanish or French. SQL injection, inserting malicious code into a website's database through a search bar or login field. Cross-site scripting, tricking a website into executing code that steals a user's session data. Buffer overflows, exploiting the way a program handles memory to inject your own instructions into a system. Privilege escalation, turning a low-level access point into administrator control over an entire network. Zero-day exploits, vulnerabilities that have never been discovered, never been patched, and are worth hundreds of thousands of dollars to the right buyer. You learn what a proxy is. You learn what the Tor network is and how it bounces your internet traffic through encrypted relays operated by volunteers in 30 different countries so that your real IP address is virtually impossible to trace. You are not dangerous yet. But you are learning faster than anyone around you realizes. At 15, you write your first original piece of code. It is a keylogger, a small program that records every keystroke a person types on their computer and sends the data to an email address you control. You install it on your school's computer lab machines. Within a week, you have the login credentials of every teacher in the building, the administrator password for the school's grading system, and the personal email passwords of three dozen students. You do not use any of it. You do not change any grades. You do not read anyone's emails. You just wanted to prove that you could get them. That is the beginning. That is the first taste. And it is the moment that separates the people who close the laptop and walk away from the people who open it wider. Level two, the gray hat. You are 16 now, and you have a reputation. Not in the real world. In your high school, you are invisible. The kid who eats lunch alone and stares at his phone. But online, in the communities where it matters, people know your screen name. You have earned respect by finding vulnerabilities in websites and software that nobody else has found. Sometimes you report them to the companies. Sometimes you do not. That is what makes you a gray hat. You operate in the space between the white hats who hack legally for companies and the black hats who hack for money, for destruction, or for power. You start taking on bigger targets. You find a vulnerability in a major social media platform's authentication system, a flaw in how they handle session tokens that would allow anyone who knew about it to take over any account on the platform. Any account. Celebrities, politicians, CEOs, anyone. You could sell this exploit on the dark web for $50,000. There are buyers who would pay that amount within the hour. Instead, you report it to the company through their bug bounty program. They pay you $2,000 and a thank you email. $2,000 for a vulnerability worth 50,000. You tell yourself you did the right thing. But part of you wonders what that $50,000 would have felt like. The line between gray and black gets thinner every day. And the money makes it thinner faster than anything else. You start accepting freelance work from people you have never met in chat rooms that use end-to-end encryption and messages that automatically delete after 24 hours. Someone with no profile picture and a three-letter username asks you to find a vulnerability in a competitor's website. You do it in 40 minutes. They pay you $800 in cryptocurrency. Someone else asks you to extract a customer database from an e-commerce platform, names, emails, phone numbers, credit card numbers. You do it in 2 hours. They pay you $3,000. Where the data goes after you deliver it, you do not ask. You do not want to know. A third person asks you to write a custom exploit for a specific piece of corporate software, a tool that will give them administrative access to any company running that software. You write it in a week. They pay you $5,000 and tell you they will be in touch. The money is better than anything a 16-year-old could earn at a part-time job, better than anything most adults earn in a week. You tell yourself it is harmless, that you are not hurting anyone, that you are just proving that their security is bad and they should have fixed it. But deep down, you know you have crossed a line that you cannot uncross. And the people you are working for are not interested in making the internet safer. Level three, the intruder. You are 17, and you have just broken into a system that you should never have gone near. It started as curiosity, a challenge posted on a private forum. Can anyone get into a particular government network? The network belongs to the Defense Threat Reduction Agency, a division of the Department of Defense responsible for analyzing threats from weapons of mass destruction, nuclear weapons, biological agents, chemical attacks, the most sensitive national security information in the United States government. You spend 3 weeks probing the network's defenses. You find a vulnerability in an outdated server running software that has not been patched in months. You exploit it. You install a backdoor, a hidden piece of code that gives you persistent access even after they update the software. And suddenly you are inside the Department of Defense. You can see everything. Emails between military officials discussing classified operations, internal memos about threat assessments, user credentials for dozens of defense employees. You download over 3,300 emails. You capture 19 usernames and passwords. And then you make a mistake that will define the rest of your life. You do not stop. You move to NASA. Using the same techniques, you break into 13 computers at the Marshall Space Flight Center in Huntsville, Alabama. You find the source code for the software that controls the International Space Station's life support systems, the programs that regulate temperature and humidity in the living quarters where astronauts eat, sleep, and breathe. The software is worth $1.7 million. You download it. NASA discovers the breach and shuts down its entire network for 21 days. 21 days of a space agency going dark because a 17-year-old in a bedroom in Florida wanted to see what was on the other side of a firewall. This actually happened. In 1999, a 15-year-old named Jonathan James, operating under the screen name c0mrade, did exactly this. He hacked into the Defense Threat Reduction Agency, stole thousands of classified emails, and downloaded NASA software worth $1.7 million. He was the first juvenile ever incarcerated for cybercrime in the United States. He was sentenced to 7 months of house arrest and 6 months in a federal correctional facility. He was 16 years old. Level four, the collective. You do not hack alone anymore. You have joined a group, a collective of hackers scattered across a dozen countries connected by encrypted channels and shared ideology. You tell yourselves you are fighting for transparency, for freedom of information, for holding powerful institutions accountable. You call yourselves by names the media will eventually make famous, Anonymous, LulzSec, AntiSec. The names change. The mission stays the same. Hack the powerful, expose the corrupt, and laugh while you do it. Your collective targets corporations, governments, and law enforcement agencies. You breach Sony Pictures Entertainment and steal confidential data on 100,000 user accounts. You hack into the Public Broadcasting System and post a fake news story claiming that the rapper Tupac Shakur is alive and living in New Zealand. You attack the website of the CIA and take it offline for hours. You infiltrate the computer systems of the United States Senate. You release the personal emails of law enforcement officers. You leak classified documents from defense contractors. Each operation is planned in encrypted chat rooms. Each target is chosen by consensus. And each successful hack is announced to the world with a press release posted to Twitter signed with the collective's logo and a simple message, "We are watching." The media covers you like you are a revolutionary army. Cable news channels run breathless segments about the mysterious hacker group that nobody can catch, splashing your collective's logo on screen while retired generals in studios warn that this is the future of warfare. Politicians call you cyber terrorists. Security experts call you a national security threat. And teenagers around the world worship you. They print your logo on t-shirts. They wear the masks. They set your manifestos as their phone wallpapers. Your screen name becomes a legend in underground forums. You are fighting the system. You are exposing corruption. You are the system's worst nightmare and you are 19 years old. Sitting in your apartment in your underwear, eating cereal at 3:00 in the morning, reading your own name on CNN's website, wondering how much longer you can keep this going before someone figures out who you really are. Because here is the thing about being an anonymous revolutionary on the internet. You are only anonymous until someone talks. And someone always talks. Level five, the hunted. The FBI has been watching. For months they have been infiltrating the chat rooms, tracking the patterns, mapping the network. And they have made a breakthrough. One of the founding members of your collective, a man who goes by the name Sabu, has been arrested in his apartment in New York City. His real name is Hector Monsegur. He is 28 years old, unemployed, and the sole guardian of two young cousins. The FBI gives him a choice. "Cooperate or spend the rest of your life in prison and the children go into foster care." Monsegur cooperates. He becomes an FBI informant. For the next 7 months, Sabu continues to operate inside the collective as if nothing has happened. He chats with you. He plans operations with you. He encourages you to hack bigger and bolder targets. And every word you type, every plan you discuss, every target you share is being recorded by the FBI. They know your screen name. They are working to match it to your real name. They are subpoenaing your internet service provider. They are analyzing your writing style for linguistic patterns that can identify you. They are tracking cryptocurrency transactions you thought were anonymous. The digital walls are closing in and you have no idea. You start to get paranoid anyway. Not because you know about Sabu, but because anyone who has been doing this long enough develops an instinct for when something is wrong. The chat rooms feel different. The energy has shifted. People are asking questions they never asked before. Someone you have never interacted with wants to know what country you are in. Someone else casually asks what operating system you run. A third person offers to share a new exploit but wants you to test it on a specific target first. A target that smells like a honeypot, a trap set up by law enforcement to catch hackers in the act. These are not the questions hackers ask each other. These are the questions investigators ask when they are building a profile. You change your screen name. You burn your old encryption keys and generate new ones. You wipe your hard drive and reinstall your operating system. You route your traffic through new servers in countries with no extradition treaties. You stop talking to people you used to trust. You become a ghost inside a community of ghosts. But it is too late. The FBI does not need you to keep talking. They already have 7 months of recorded conversations, transaction logs, and IP address correlations. They already have enough to put you away for a very long time. Level six, the raid. It happens at 6:00 in the morning. You are asleep. The first sound you hear is the front door coming off its hinges. Then shouting, "Federal agents! FBI! Search warrant! Hands where we can see them!" Your mother screams. Your father stumbles into the hallway in his underwear. And before you can reach for your laptop, before you can wipe the drives, before you can destroy the evidence, there are three men in tactical vests standing in your bedroom doorway. One of them is holding a battering ram. Another is holding a search warrant with your name on it. Your real name. The name your parents gave you. Not your screen name. Not your online identity. You. They take everything. Every computer. Every hard drive. Every USB stick. Every phone. Every external drive you hid in a shoe box under your bed. They pull the router from the wall and bag it. They bag your keyboard because the FBI's digital forensics lab can recover deleted files, match fingerprints, and extract data from hardware you thought you wiped clean. They photograph every inch of your room, the three monitors, the energy drink cans, the tangled cables, the router with custom firmware, the posters on the wall, the sticky notes with IP addresses you were too careless to destroy. They open your closet. They check your drawers. They look under your mattress. Your entire life, your entire digital identity, every secret you thought was hidden behind seven layers of encryption, reduced to evidence tags and numbered bags that will be transported to an FBI forensic laboratory where teams of analysts will spend months reconstructing every keystroke you ever made. You are handcuffed and walked past your parents who are standing in the kitchen in their bathrobes watching their child be led away by federal agents. Your mother is crying. Your father cannot speak. He is staring at you like he has never seen you before. In the United States, the Computer Fraud and Abuse Act carries penalties of up to 20 years in federal prison for each count of unauthorized access to government computer systems. If they charge you as an adult and for crimes against the Department of Defense and NASA, they almost certainly will. You are looking at a decade or more behind bars. Your lawyer will use words like plea bargain and reduced sentence and cooperation agreement. The prosecutors will use words like national security threat and critical infrastructure and unprecedented breach. You are 17 years old. You were supposed to graduate high school next year. You were supposed to apply to college. Your mother had already started looking at universities. And instead, you are sitting in a federal holding cell wearing an orange jumpsuit that is two sizes too big, waiting for a public defender who is handling 40 other cases, wondering how a blinking cursor on a black screen in a dark bedroom led you to this concrete room with a steel door that only opens from the outside. Level seven, the aftermath. Jonathan James, the first juvenile convicted of cybercrime in the United States, was released after serving his sentence. He was banned from using computers. He was put on probation. And for a few years, he tried to live a normal life. But the label followed him. Once you are known as the kid who hacked the Pentagon and NASA, the world does not let you forget it. In 2007, the department store chain TJX suffered a massive data breach. The Secret Service investigated. They found that some of the hackers involved were people James had known online. They raided his house. They raided his brother's house. They raided his girlfriend's house. James swore he had nothing to do with it. He told anyone who would listen that he was innocent. But he had been here before. He knew how the system worked. He knew that being investigated was sometimes worse than being convicted. And on May 18th, 2008, Jonathan James died at his home in Pinecrest, Florida. He was 24 years old. He left a note that said he believed he would be prosecuted for crimes he did not commit and that he refused to go through the system again. Kevin Mitnick, once called the most wanted cybercriminal in the United States, was hunted by the FBI for 2 and 1/2 years before being arrested in Raleigh, North Carolina in 1995. He served 5 years in federal prison. 8 months of that time was spent in solitary confinement because a federal prosecutor convinced the judge that Mitnick was so dangerous he could launch nuclear missiles by whistling into a payphone. That claim was absurd. It was technically impossible. But the judge believed it and Mitnick sat alone in a cell for 8 months because the world was so afraid of hackers that they had turned a computer nerd into a supervillain. After his release, Mitnick reinvented himself as a cybersecurity consultant. He built a successful company. He wrote bestselling books. He became one of the most famous reformed hackers in history. He died of pancreatic cancer in 2023 at the age of 59. Two paths. Two outcomes. One kid who could not escape the label the system put on him and died at 24. And one who spent 5 years in a cell, walked out, and built a multi-million dollar career on the same skills that put him in prison. The difference between Jonathan James and Kevin Mitnick was not talent. They were both brilliant. The difference was timing, luck, the quality of their lawyers, and whether the system decided to give them a second chance or grind them into dust. The hacker underground that raised you will not protect you. The collective that called you brother, that shared exploits with you, that celebrated your biggest hacks, they will disown you the moment the FBI knocks on your door. They will delete every message. They will deny they ever knew you. The screen name that made you famous online will be read aloud in a federal courtroom by a prosecutor in a dark suit. And the judge will not call you a genius. He will not call you a prodigy. He will call you a criminal. And he will sentence you like one. Right now, somewhere in the world, a teenager is sitting in a dark bedroom staring at a screen learning to do things with a computer that most adults cannot comprehend. They are 13 or 15 or 17. They are brilliant and bored and looking for something to prove. And they are standing at the same crossroads that every hacker in history has faced. Turn left and you use your skills to build things. You become a security researcher, a software engineer, a white hat consultant who gets paid six figures to break into companies legally. Turn right and you break things. You become a fugitive, a convict, a cautionary tale that FBI agents use in training presentations. The keyboard is in front of you. The screen is glowing. The cursor is blinking. And the choice you make next will determine whether you spend your 20s building a career or sitting in a cell. The internet does not care about your intentions. The law does not care that you were curious. And the FBI does not care that you are 17. The only thing that matters is what you do with the next keystroke. If you made it this far, subscribe and drop a comment telling me which path you would take. And check out our video on every level of a CIA whistleblower. I'll see you in the next one.