News for hackers. Stuff that matters.

A comment on Twitter names famed hacker 'Mudge' as head of security. Parent comment

Re:Twitter names famed hacker 'Mudge' as head of security by Mysterise on Monday November 16, 2020 @11:37PM (#25120305)
You're testing recall only when asking about TLS. You may be testing recall for "how to implement a known algorithm", but there's still plenty of room for testing actual problem solving too.

If you are the interviewer, even if you are asking a standard "how to invert a binary tree" type algorithm question, you hold the cards to keep pushing the bounds for problem solving by extending the question.

[ Parent | on HN ]
Re:Twitter names famed hacker 'Mudge' as head of security by bawolff on Tuesday November 17, 2020 @04:06AM (#25121532)
Well if you're willing to push boundries, you can certainly do the same with TLS. Ask why the TLS spec does X instead of Y, for various subtle design decisions. This is probably actually much easier to do than with a binary tree, as TLS is a lot more complex and a lot more subtle. It would certainly be an appropriate line of questioning if you were hiring a crypto engineer, not sure it would be relavent to a security engineer or software engineer.
[ Parent | on HN ]