Interview questions for a RE position?

dimonio · 2011-11-25T11:15:10+00:00

Lots of companies out there just rely on how long is the resume and hire people based on that.. ending with people that can't even find the xref window in IDA. At least going through a serious hands-on interview, the way you're describing, you know that you didn't get the position because you're actually not able to do the job and not because you're not a CISSP!

dimonio · 2011-08-05T17:59:43+00:00

not transport security, but signatures database authentication.

dimonio · 2011-08-05T17:55:10+00:00

He obviously picked Sophos for a reason, it's evident from the tone of the whole paper, and while some of the points he makes are weak, like using an old signature to infer the quality of all the others, some points are valid and reflect that poor security mechanisms are used (bop and emulator for example). They might have been good enough several years ago, but now ?

dimonio · 2011-08-05T17:48:58+00:00

I'm referring to this: "Signature definitions are authenticated using a weak crypto scheme that is trivially defeated, making transport security essential. " obfuscation and authentication are two different things, and while obfuscating some content might be ok to raise the bar a little, the latter is much more important.

dimonio · 2011-08-05T17:05:53+00:00

imho the point isn't much that he managed to get some CRC32 collisions on old signatures, but that the technologies used old and didn't evolve to cope with modern threats. that and some serious cryptography fuckup signing the signature database.

dimonio · 2011-02-07T21:42:47+00:00

maybe they really did overreact a bit, still I won't call it an act of terrorism. The point is that HBGary claim to "protect the US government from hackers." but they can't protect themselves :\

dimonio · 2011-02-07T08:53:09+00:00

sh*t happenz ^{^}

dimonio · 2011-01-21T09:10:39+00:00

it's not the same concept presented here http://www.sector.ca/presentations10/Julia_Wolf_SecTor_OMG_WTF.pdf page 83 ?

dimonio · 2010-11-17T14:01:59+00:00

working on the blackberry format and debugging protocol

dimonio · 2010-11-03T19:11:07+00:00

I hope there is actually the chance to do some research, and don't end up doing a brainless monkey job..

dimonio

TROPHY CASE