"President Li, this is the delivery I received yesterday."
Cai Xiaowei walked into the office with a document bag and placed it on Li Yi's desk.
After putting down the package, Cai Xiaowei turned around to leave.
"Wait, the company's official seal and business license should be in the document bag. Do you know the payment process for employees' social security? If you don't, study it now." Li Yi suddenly instructed.
Hearing this, Cai Xiaowei's spirits were lifted. She was considering changing jobs when Li Yi's words summoned hope. She was so excited that tears almost fell.
"President Li, are you going to buy me social security?" Cai Xiaowei asked with concern.
"That's right! If I don't buy it for you, I'm afraid it won't be long before I receive a resignation letter." Li Yi looked at Cai Xiaowei and smiled.
"How could that be?!" Cai Xiaowei smiled awkwardly and said insincerely.
"Go and do your work! Hurry up and settle the payment of social security. You also have to hurry up with the recruitment. I usually have no classes on Wednesdays and Thursday afternoons. Arrange the interviews for these two days," Li Yi suggested.
"Alright!" Cai Xiaowei agreed happily.
Li Yi smiled and watched Cai Xiaowei leave. He began to get busy and added a "safety lock" to the loophole scanning tool.
The function algorithm of the loophole scanning tool used many new algorithms. It was unique and had huge technical value. Without registering a patent, Li Yi wanted to change the loophole scanning tool to a client mode and store important data in the server room.
The server that provided data services to the client was equipped with a "safety lock" to protect the data.
The client had more than ten functions. There was employee authority design, loophole data record, intelligent data analysis, and so on. Li Yi spent most of his time writing the code and improving the client.
After coming to the company today, Li Yi began to deploy the server environment to test the client.
Time spent being busy always passed quickly.
Unknowingly, more than two hours had passed.
Cai Xiaowei appeared at the door. "President Li, an applicant is here. Are you free for the interview?"
"Alright, give me his resume and bring him to the meeting room to wait for me." Li Yi agreed gladly.
"Alright!" Cai Xiaowei left the other party's resume respectfully.
Li Yi picked up the resume and checked it.
Zhang Yang: Male, Age: 27, Height: 178, Weight: 77KG, from Minnan, undergraduate degree from Fu University, computer software, proficient: Server/Linux, Database, Middleware, etc., operating maintenance, security reinforcement, and other professional knowledge; Work experience: 3 years, former unit: Ossi Electronics, held position: security engineer, currently leaving the job…
Job Applications: Technical Manager
Li Yi skimmed through it and had a rough understanding of the applicant's situation.
From his resume, it could be seen that his age and ability were not a problem. He just did not know how capable the other party was. He needed to talk to him in detail.
Li Yi brought the resume to the meeting room.
To be honest, this was Li Yi's first time officially interviewing someone. As for Cai Xiaowei's interview, it was not official. At that time, he only needed a person to help him work. If he liked the person, he would casually hire the other party.
Zhang Yang, who was waiting in the meeting room, revealed a regretful expression and somewhat regretted participating in this company's interview.
Not only was the company small, but it also looked like it had just opened. There were not many employees, and the hall was empty. It was basically a dummy company.
Just as Zhang Yang was hesitating about bidding farewell, the door to the meeting room was pushed open.
A young man walked in with his resume in his hand.
Damn, was this his interviewer? He was so young!
Had he just graduated?
With the other party's age, the other party's technical level was definitely not high. One could imagine the foundation of this company if they let a person with poor technical skill be the interviewer.
Zhang Yang wished he could immediately turn around and leave. However, out of courtesy, he still endured it.
"Hello, Mr. Zhang. I'm the boss of this company, Li Yi." Li Yi sensed something from Zhang Yang's expression and smiled as he introduced himself.
Hearing this, Zhang Yang's expression became slightly better.
So it was the boss! It was definitely not a problem for him to be the interviewer with this identity if he was young and had a good background.
"Hello, President Li!" Zhang Yang replied.
"Mr. Zhang, you have three years of work experience. You must have come into contact with many system loopholes in your work, right?!" Li Yi asked with a smile.
"Yes, it's very difficult to avoid the loopholes in the system's hardware, software, agreement, or system security strategy," Zhang Yang said calmly.
"Yes, is it fine for me to ask a few technical questions?" Li Yi asked with a smile.
"No problem!" Zhang Yang was not afraid at all.
He did not have much expectations for this job, but the interview had already begun. Zhang Yang wanted to see what problems this young man could give him. He would just treat it as an interview drill!
"Have you ever encountered such a loophole?" Li Yi asked with a smile.
"It's very common. Overpowering access is a loophole in the design of the 'data-based access control'…" Zhang Yang replied.
Li Yi smiled and nodded before asking, "Yes! That's right. If it were you, how would you defend against a higher level attack?!"
"There are indeed a few defensive methods. 1, the login certificate has to be verified at all times… 2, the user's operation has to be checked with the corresponding authority. They can't only perform functions according to the operation parameters or links…" Zhang Yang introduced in detail.
Li Yi nodded. Zhang Yang's answer was very specific and showed that he had a strong foundation.
"If you get a station that's waiting to be tested, what are you prepared to do?" Li Yi continued to ask.
Zhang Yang thought for a moment and replied, "It has to be divided into a few steps. The specific procedures are: information gathering, loophole digging, loophole exploitation, authority increase, log cleaning, summary report, repair plan… and so on."
"When it comes to Mysql injection point. What are the conditions for using a tool to directly write a sentence to the target station?"
"How many situations can lead to the 3389 being disconnected?"
"Please explain how to break through and transfer the runic symbols."
"In the case that the target station forbids registered users, the following notification is displayed in the password retrieval channel: 'This user does not exist'. How can you take advantage of this?"
…
Soon, Li Yi asked one question after another. Zhang Yang's expression gradually became serious, and his answering speed became slower and slower.
The other party's questions were all very basic, but they were all-encompassing and knowledgeable.
The other party even easily gave detailed answers to some questions he could not answer.
From the questions the other party casually asked and the standard answers the other party quickly gave, Zhang Yang already understood that he had made a mistake. This boss in front of him who was a few years younger than him actually had a higher level of knowledge in the system's security.