The interview was done by a tech lead but he is quite junior comparing to his job title. And he is a very cocky one too. The questions he asked indicate that not only he does not know much about the latest tech trend, but also he doesn’t have enough experience. For example, he asked me a question about protecting a public online contact us form. My answer was use a WAF and use something like recapture. But he said that what about securing the form without WAF or recapture. I was quite puzzled. And then he said, should use CORS policy. Oh yes. Definitely should use it. But I also said CORS policy can be easily bypassed with a browser plug-in or changing host file. Without WAF and recapture, it is quite vulnerable for attacks. He of course did not like the answer. Another question was about indexing something something with customised indexes. I cannot remember the details but I got the impression that it was over engineered too much. I give my honest answer again to explain what are the alternatives. His body language and tune of his voice were even more cocky and elegant. I interview people too and most of times, no right or wrong answers because that what exactly is the best practice really depends. I instead of trying to get the answer you look for, try to see whether the person has the skills and experience that are required. Either that person is too junior to understand what I was saying. Or he was on purpose rejected people who are better than him. But either way, it's no good for BUPA digital team...
