The approach tptacek and Matasano take is explained (for a potential candidate's benefit) on the Matasano site: http://www.matasano.com/careers/