4 ms·

How would you select candidates to make sure they avoid this kind of security bug?

• Arbortheus 2y ago
  “You are building an account authentication system and need to store user passwords, what design measures would you take to ensure this would be done securely?” Follow up question. “What measures would you take to ensure this complies with relevant data protection regulations?” If they give a somewhat competent answer, you at least know they’re the sort of developer that can critically analyse this sort of thing.
  • tjpnz 2y ago
    >What measures would you take to ensure this complies with relevant data protection regulations? We hire devs to work on safety critical systems and do gauge for familiarity with standards applicable to our industry. This happens regardless of whether you're mid career or a new grad. I don't think it unreasonable to expect similar of devs working on systems where there are security or privacy considerations (which might as well be everything).
• deleted 2y ago
  [deleted]
• pbhjpbhj 2y ago
  Avoiding the bug in the first place is not the big issue, surely. An employee can leave a door open to a secure area, if you employ security people they should have worked to mitigate that, and to catch it if it did happen. Well "we want to run an audit to find if any passwords are stored in plaintext in our file systems". Sounds like a problem any highschooler could answer? The idea of an audit might need a person who has done a remedial level of security work.