Secure Coding mailing list archives

RE: Re: Questions when interviewing new people


From: jnf <jnf () datakill org>
Date: Thu, 15 Apr 2004 23:35:11 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

asking them to think like a hacker is to have them write the exploit (and 
possibly the patch)



- -- 

It is only the great men who are truly obscene.  If they had not dared to 
be obscene, they could never have dared to be great.
                -- Havelock Ellis
 


On Thu, 15 Apr 2004, David Crocker wrote:

Eric Murray wrote:



Another interesting idea would be to draw up some code on a white board 
and ask the candidate to identify the buffer overflow.

_that's_ asking them to think like a hacker.

<<

No, it's asking them to think like a software professional.

David Crocker
Escher Technologies Ltd.
www.eschertech.com
Tel. +44(0)1252 336565  Fax +44(0)1252 320954



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (OpenBSD)

iD4DBQFAfvptsKAeTAhLiCERAiBjAJY4PtOzNxq3MHCAq1YJBH6oaqcxAJ0ThY5c
xU9536BmknfHV2DdIUiURA==
=wCbI
-----END PGP SIGNATURE-----






Current thread: