We've hired more people off HN than from any other vector.
(Or, you know, ask Stripe for a job. I'm sure they're hiring too!)
(Or, you know, ask Stripe or Matasano or Tinfoil Security for a job. They'll pay you far more than you'd ever get from Tarsnap's bug bounties.)
A lot of people have fun with this kind of challenge, as well as network security in general. Over 10,000 people went to DEFCON this year (I've seen estimates between 13,000 and 16,000). Hacker IRC rooms are constantly buzzing. Security is fun, and while building software is immensely satisfying, so is breaking it.
So why is the information security industry so tiny?
For one, it's competitive, but I think that many, many qualified security guys don't realize that there's a thriving industry around this kind of stuff.
If you want to work in security, these CTF-style challenges are a great way to show that you're self-motivated and clever. I'm always hiring application security engineers, and honestly it's pretty difficult to find people who are new to the field. People seem to either have a decade of experience and bounce from company to company, or no experience at all and assume that they "aren't good enough."
If a company can't take some raw talent and refine it, they don't deserve raw talent in the first place. We call that training.
If you like this kind of stuff, apply at Stripe, or Matasano, or Tinfoil Security -- or even my engineering team at Redspin. If you mention "HN" or "Hacker News" in an email to jobs at redspin.com, I'll know exactly where you came from :)
PS: Redspin hires all kinds of security engineers, from policy & procedure specialists to network infrastructure guys to appsec experts. It's better to apply and have a conversation than to be too afraid to try!
(Or, you know, ask Stripe or Matasano for a job. They're both crazy awesome, have a ton of respect from me, and are also hiring.)
Game, marketing exercise, recruitment tool.
I'm totally stuck on Level 7 after getting some waffles and have no time to continue though, oh well.
I just made it to level 8 this morning and haven't a clue where to really begin with it.
It's definitely a lot of fun and has been an interesting journey for sure. Love little games like this.
Yeah it was pretty tricky but once you get down the approach it's not too bad. Took me awhile to realize what was going on.
Anyway, love the challenge, the attention to detail is awesome :)
Maybe after you complete a level you could get the choice of "Pause the game" or "give me the next challenge" ?
Would love to sit down with it for a bit longer and crack on.
I think if they didn't provide code, it would have been really difficult. Is everyone feeling same way?
> $url = "https://upload.wikimedia.org/wikipedia/commons/f/f8/ . "Question_mark_alternate.svg";
can't someone edit the image on wikipedia and change the image displayed to everyone else here -- or is the wikimedia image system only accessible by admins?
I believe it is very editable once login.
Is this not dangerous?
Edit: the IRC helped. the issue isn't ruby, sinatra, etc.