5 ms·
Yes, it is wrong. There's no reason to disclose the security systems of your previous employer, and there's no reason for an employer to ask. Any security quest
by rgbrenner 10y ago
Yes, it is wrong. There's no reason to disclose the security systems of your previous employer, and there's no reason for an employer to ask. Any security question that can be asked specifically about one company, can be asked and answered in a more general way.
It's the difference between - "What security controls were in place at Corp?" and "What security controls would you put in place to protect X system?"
The 1st version is bad, not just because it discloses security controls at the previous employer.. but also because it makes the candidate responsible for (possibly bad) security decisions that were outside of their control and/or existed before they were hired.
The 2nd version gives the candidate a chance to talk generally/ideally about security.. even if the previous employer did something else.
- Chris2048 10y ago> There's no reason to disclose the security systems of your previous employer But isn't it relevant what technologies you used in your most recent roles?
- deleted 10y ago[deleted]
- deleted 10y ago[deleted]
- technofiend 10y agoSo if my current employer uses SELinux heavily and I answer a question on how to fix an http server because of a missing or incorrect context your guy would say "Nope, you disclosed secrets, get lost?" Probably not. But if I give it as an example because I once had to do it for real I'm out? That's a very fine line to draw. I agree something specific to an employer could be an issue, but there are plenty of problems no employer may uniquely claim.