Seqrite (Quick Heal) interviews
Proving a finding
“An isolated memory-limit error does not establish exploitation.”
Satyarth PrakashSeqrite blog (Quick Heal)
Containing access
“Deploy the full runtime update, restart the workers and review suspicious activity from the period before patching.”
Satyarth PrakashSeqrite blog (Quick Heal)
Verifying the fix
“Updating the application alone does not fix the underlying runtime.”
Satyarth PrakashSeqrite blog (Quick Heal)
Update the runtime, not just the app
Did the fix keep the supported behaviour? Practise the review.
Example“Check the version serving web requests separately from the command-line PHP executable; they can be different installations.”
Satyarth PrakashSeqrite blog (Quick Heal)
Check the version that serves requests
Did the fix keep the supported behaviour? Practise the review.
ExampleLast reviewed
