08What is a TOCTOU race, how does it turn into privilege escalation through files, and how do you write privileged code that avoids it?▼hardNewGoogleMicrosoftApple○ sign inCheck, then use: two system calls, and an attacker in between. The answer interviewers want replaces names with handles and checks with atomic operations, and can show it in code.Open full answer →
21What security risks does AI-generated code introduce, and what controls help?▼mediumNewMicrosoftGoogleAmazon◆ premiumGenerated code ships faster, which is the point and the risk. The scored answer names the specific failure modes and keeps the normal controls working at the new speed.Open full answer →