News for hackers. Stuff that matters.
Re:The Tangled Web: A Guide to Securing Modern Web Applications by tptacek on Sunday January 25, 2015 @11:24AM (#8943265)
Extremely strong recommend on this book. It's one of the books Matasano gave to all applicants before interviewing them.
Re:The Tangled Web: A Guide to Securing Modern Web Applications by tedunangst on Sunday January 25, 2015 @02:02PM (#8943843)
I've never heard of giving applicants material before the interview. More commonly, I think companies give new hires (especially interns) a book or some material to read before their start date, but usually the investment comes after the decision.

Did the book shape the interview? Like if I didn't read it, I'd have a hard time? Or maybe even if I nailed the book, but didn't know anything else, that'd be bad?

Re:The Tangled Web: A Guide to Securing Modern Web Applications by tptacek on Sunday January 25, 2015 @03:34PM (#8944145)
The books did not shape the interviews, and we were careful to tell candidates that they shouldn't treat them as homework, and they could probably do just fine without reading them at all.
Re:The Tangled Web: A Guide to Securing Modern Web Applications by _djo_ on Monday January 26, 2015 @06:12AM (#8946456)
What are the other books, if you don't mind me asking?
Re:The Tangled Web: A Guide to Securing Modern Web Applications by Tomte on Monday January 26, 2015 @11:48AM (#8947952)
I think 'tptacek wrote in some other thread about WAAH and Cryptography Engineering being two of the others.
Re:The Tangled Web: A Guide to Securing Modern Web Applications by tptacek on Monday January 26, 2015 @12:19PM (#8948191)
WAHH and The Art Of Software Security Assessment (TAOSSA) were the other two. We didn't grill candidates on crypto or have work-sample tests that involved crypto. Sadly: you'd be discarding 95% of the candidate pool, and particularly and paradoxically the experienced candidate pool, if you screened for crypto ability. The software security field is just awful at crypto.
Re:The Tangled Web: A Guide to Securing Modern Web Applications by _djo_ on Tuesday January 27, 2015 @10:24AM (#8953435)
Thank you, much appreciated.