3 ms·
after hundreds of infosec interviews in the past ~5 years, i leave you with this gem: "describe a 'padding oracle' attack, what versions of Oracle does it affec
by JCJoverTCP 12y ago
after hundreds of infosec interviews in the past ~5 years, i leave you with this gem: "describe a 'padding oracle' attack, what versions of Oracle does it affect?" this was not a trick question.
i wish there was a topic: 'worst answers you've given to interview questions?' The sheer amount of interviews i have been on speaks to my epic failure here.
- meowface 12y agoI feel like that would actually be a really good question to easily see if a candidate is a bullshit artist. That's hilarious (and sad) that in this case it's the other way around.
- JCJoverTCP 12y agoi had to tiptoe around the douchey way it was presented, without appearing to do the superior dance at the same time, cuz for once, i wasnt the one getting smoked during an interview. i actually had relevant background knowledge on the attack, crafting my own version as an exercise during a prior interview with a guy at DirecTV who was in charge of testing all their appliances. THAT guy I really wanted to impress, instead of the monkeys at <blah>HatSec
- meowface 12y agoThere's only one <blah>HatSec I know of, and unfortunately my organization uses them. :( Oh well, I'm sure they must not all be idiots.
- JCJoverTCP 12y agono they arent, i am just upset that i didnt make the cut, basically lashing out at my own failure.