When I was a pre-teen I used to test the security of websites because it was a fun challenge. I spent days trying to find exploits in Myspace which allowed me to build cookie grabbers because it was very satisfying to know that I was able to beat experienced engineers. It's kind of like contributing to open source software... it's a way to use your skills in a way that doesn't feel like "work".