infraruby's comments

infraruby | 8 years ago | on: How I implemented my own crypto

> I'm describing the CBC padding oracle attack.

Ah! Wouldn't that be "attackers can replace an original ciphertext with two chosen blocks"?

> I'm surprised this is the thing you want the link for, and not "1 biased bit destroys the security of a 256 bit nonce where the other 255 bits come from secure random".

IIRC the link for that is in your hiring post!

infraruby | 8 years ago | on: How I implemented my own crypto

> You could "weaken" a protocol so that attackers can replace an original plaintext with 16 uniform random bits. If the protocol is using CBC mode, you've allowed attackers to recover whole plaintexts.

Do you have a link explaining this?

infraruby | 9 years ago | on: Resources for Amateur Compiler Writers

For a program without recursive calls the students can get away with believing that local variables are statically allocated, but for a program with recursive calls the students must understand that local variables are allocated on the stack; that what appears (lexically) to be one variable in the source may be many variables at runtime!

infraruby | 10 years ago | on: How I Interview

> Plus a number of other things according to the article.

Yes, combining methods works even better! It's far from saying that the best way is "to just talk to them".

infraruby | 10 years ago | on: How I Interview

> I can see this being misinterperted badly in the field of software engineering (it doesn't seem specific to software)

Would you prefer Google's take on it? http://www.wired.com/2015/04/hire-like-google/

> So most "sample work" for an interview will actually be nothing like that but a short rushed version that is supposed to emulate it in some way.

Yes, that's the idea! And it works.

infraruby | 10 years ago | on: Cancer survivors less likely to receive callbacks from potential employers

> The research article you linked confirmed that job experience (years in a similar job) has positive predictive validity for job performance.

Job performance does improve with experience up to a point (evidently six months), so this factor will have some predictive validity just for that, but this does not support comparing five years vs ten years.

> Can a hiring manager improve their hiring decision by excluding a factor known to have positive predictive validity?

Yes, if the manager had given undue weight to that factor (say, by rejecting applicants with little experience, regardless of performance on job knowledge tests), which is precisely what happens whenever managers consider employment history.

> This roughly matches how a lot of hiring is done in practice

No, what happens in practice is that managers say "no unemployed need apply" or ask for the applicant's "most recent résumé" (with dates, of course) and then exercise the sort of prejudice against the unemployed that you displayed earlier.

> What concrete change should a manager of a small business make tomorrow to improve their hiring?

The manager should filter applicants using GMA tests, job knowledge tests and integrity tests, which are inexpensive and have high validity, and then pay the candidates to take work-sample tests. The manager may consider experience (up to six months), but as no more than 5% of each candidate's grade, and this should be monitored by the business owner.

page 1