08What is a TOCTOU race, how does it turn into privilege escalation through files, and how do you write privileged code that avoids it?▼hardNewGoogleMicrosoftApple○ sign inCheck, then use: two system calls, and an attacker in between. The answer interviewers want replaces names with handles and checks with atomic operations, and can show it in code.Open full answer →
28An agent proposes a high-value purchase for a user to approve. How do you make sure the approval covers exactly what gets executed?▼hardNew◆ premiumFreeze the resolved purchase, authenticate the approver and verify the same action at execution. Then handle mutable addresses, simultaneous workers and a supplier timeout without treating a hash as a complete transaction protocol.Open full answer →