Re:Former NSA Employee Arrested on Espionage-Related Charges
by walrus01 on Thursday September 29, 2022 @07:36PM
(#33028830)
saw a CISSP who didn't know the difference between a SHA256 checksum and SHA1 or even how to hash a file using openssl
[ Parent
| on HN ]
Re:Former NSA Employee Arrested on Espionage-Related Charges
by computerfriend on Friday September 30, 2022 @12:55AM
(#33031145)
I'm relatively deep in this stuff. If you asked my how to use the openssl CLI for anything other than X.509 and s_client I would fail your interview.
Re:Former NSA Employee Arrested on Espionage-Related Charges
by est31 on Friday September 30, 2022 @04:26AM
(#33032413)
Yeah openssl CLI is so incomprehensible. And some parameters have to be configured using .conf files, ewww. The C API is hardly any better.
When I read the RFCs behind the stuff to write what I needed in Rust, suddenly it dawned on me: wow this stuff isn't nearly as complicated and horrible as openssl's interface makes it seem like.
Re:Former NSA Employee Arrested on Espionage-Related Charges
by walrus01 on Friday September 30, 2022 @04:53AM
(#33032560)
I didn't expect the knowledge of the cli to do it immediately, this person didn't even know they could do it. "openssl dgst -sha256 filename". An answer that they'd need to check the man page would've been sufficient...
Re:Former NSA Employee Arrested on Espionage-Related Charges
by 3pt14159 on Friday September 30, 2022 @08:58AM
(#33034246)
Would you have accepted a python solution? I typically don't do this type of stuff using raw openssl on the rare occasion I need it.
Re:Former NSA Employee Arrested on Espionage-Related Charges
by walrus01 on Friday September 30, 2022 @06:34PM
(#33041633)
I would have accepted even the person knowing and confirming they were aware SHA1 is obsolete
Re:Former NSA Employee Arrested on Espionage-Related Charges
by Something1234 on Thursday September 29, 2022 @08:06PM
(#33029068)
Does anyone have a tutorial on using the openssl cli? It seems to barf on some inputs if it's not exactly perfect or you miss a step in the stack overflow answer.
Honestly I would expect some to be more familiar with the hashXsum tools.
Re:Former NSA Employee Arrested on Espionage-Related Charges
by throwoutway on Thursday September 29, 2022 @07:44PM
(#33028895)
I would expect that. But the lack of knowing the definitions is embarrassing