I won't talk about me, but I've seen some friends doing shady things.
Let's just say I had to convince a friend of mine (for his startup) that DDoSing his competitor at peak times wasn't a wise idea...
Another guy I knew (not really a friend) was using xrumer (a tool to spam forums for SEO purposes) directly on his website...
