Hacker News Reader

Comment by logicalmonster | Hacker News Reader

> For my current job I got grilled with leetcode style questions.

I don't mind being asked a leetcode style question or two in an interview. Even if somebody struggles with solving an unfamiliar problem off the cuff, you can see if they they take some logical problem solving approaches.

But it's frustrating that no practical web-development questions are ever asked for those kinds of jobs.

For instance, security is really important to the survival of any company. An insecure system that has a data leak could literally destroy a company overnight. Having a secure system is far more important than knowing a more efficient algorithm for sorting some data or whatever.

But I've never been asked 1 practical question about security in a technical job interview.

It's so painfully stupid it hurts.

View on HN

> Even if somebody struggles with solving an unfamiliar problem off the cuff, you can see if they they take some logical problem solving approaches.

I hear this a lot, from the likes of Google on down, but does any interviewer ever take away anything positive from "almost" solving an interview question? In my experience, most interviews are pass/fail and getting close isn't a pass.

They do. I do, and the interviewer who hired me for current job also did.

> a data leak could literally destroy a company overnight

Source?

I'm sure we "wish" that were true, but data leaks haven't even destroyed companies whose entire existence is predicated on storing data such as Equifax.

A data point - the capital one AWS breach ended up costing $270M[1]. While they weren't destroyed, it wasn't cheap either.

1. https://techmonitor.ai/technology/cybersecurity/capital-one-...

That is peanuts for AWS. The OPs point stands: pretty much no engineer or software company suffered serious consequences over their security practices. The worst was some internet drama and slightly lower *profit*.

Ashley Madison tanked from a data break, and there's an ever growing list of cryptocurrency exchanges that were hacked and ended. It may be that for some businesses a data breach is manageable, but that's not always the case, though more importantly that kind of attitude towards the seriousness of data breaches and vulnerabilities is not wise.

It’s CapitalOne, not AWS, who had the flaw and suffered the loss. (And survived it, as is the main point of the thread.)

probably a fraction of a percent of their net worth

"could" is not "will"

Pretty sure it was the end of Ashley Madison a few years back?

https://securityboulevard.com/2022/07/a-retrospective-on-the...

Equifax operates in an industry with a strong network effect and the data they lost belonged to the targets of their data collection, who are neither the people who submit credit reporting information to them nor their paying customers.

Other companies can be much more screwed. Suppose your customer list gets leaked, including their contact info and how much they're paying you for which services. First of all they're pissed at you. The next thing that happens is a competitor downloads the data and sends each of your customers a custom email offering their services for 10% less than they're paying you. While they're pissed at you.

But also, suppose you're Equifax and the people who breach your systems, instead of leaking the data, just delete it. Including the backups. Now you're out of business, because you have nothing to sell.

Reply on news.ycombinator.com