This is actually not as bad as it sounds. Third parties who test the security of a system just for the fun of it generally could be prosecuted if they let the system owner know of the flaw they exploited. A white hat hacker is just an enthusiast or a commercial security expert who looks for security flaw without the intent of damage or theft.