Re:The Tangled Web: A Guide to Securing Modern Web Applications
by Tomte on Monday January 26, 2015 @11:48AM
(#8947952)
I think 'tptacek wrote in some other thread about WAAH and Cryptography Engineering being two of the others.
[ Parent
| on HN ]
Re:The Tangled Web: A Guide to Securing Modern Web Applications
by tptacek on Monday January 26, 2015 @12:19PM
(#8948191)
WAHH and The Art Of Software Security Assessment (TAOSSA) were the other two. We didn't grill candidates on crypto or have work-sample tests that involved crypto. Sadly: you'd be discarding 95% of the candidate pool, and particularly and paradoxically the experienced candidate pool, if you screened for crypto ability. The software security field is just awful at crypto.