3 ms·
During a job interview at one mid-size startup one of the interview questions involved handing me a 2 page excerpt of server logs and asking me to identify bugs
by kevingadd 8y ago
During a job interview at one mid-size startup one of the interview questions involved handing me a 2 page excerpt of server logs and asking me to identify bugs/issues from the messages and tracebacks in the logs. (neat idea!)
The logs contained user credentials, and they hadn't noticed. I pointed it out to the CTO.
- stevenwliao 8y agoWow, their interview question (in the hands of the wrong interviewee) could have caused a data breach.
- londons_explore 8y agoIf it's a plaintext password, the minute it hits any human eyes, it is IMO compromised and the user should be required to change it. Employee, Interviewee, Hacker - doesn't matter.
- itslennysfault 8y agoI'd go a step further. IMO the second it hits a hard drive it's compromised so just the act of having that in the log would count.
- rhizome 8y agoHey, in the wild! I've long advocated for companies to use actual bugs (that have been fixed) in testing candidates. Heck, as your anecdote suggests, they might find the candidate provides a fix better than their ninja rockstar did, and in this way could serve as part of a performance review for existing employees. ;)