Technical details:
"The plugin does not authenticate the request, which means that the attacker can insert another memberId (aka the victim) and get a code that represents the victim. With that code, he can use ChatGPT and access the GitHub of the victim."
Actually, the CVE-2023-283131 vulnerability was published with the full details just two days ago. In April Expo published a short post but without too much technical information.
You can find more details about CVE-2023-283131 in the link I shared here:
with challenges that very similar to the problems you described. But it will take a few weeks to be ready.
For your question:
Maybe they undervalue a well design code because it's hard to be measured. At the end of the day, you judge them based on their tasks and not quality. Try to give them a motivation to think like architects.
What would happen if you ask them to be reviewed by a team member, before pushing it to your review?
Advantages of this platform compared to other challenging sites:
1. For hiring: instead of only relying on the final solution, we analyze the entire solution pathway to get visibility similar to a frontal interview. (for example: where the candidate got stuck, how long each step took them, detect cheating using anomaly detection, and more)
2. A new experience: during the challenge, there is a virtual assistant (interviewer) that gives you hints when needed (for example, if it recognizes that you are stuck). This feature has a lot of advantages, both for practice(learning) and also for recruiters who want to give their candidates a full chance.
3. The challenges: most of the challenges are more realistic and simulate real day-to-day skills.
You get a web server with a "bug" in the configuration, and you try different ways to tackle it, while the virtual interviewer sees your progress and makes sure you are on the right track.
I had this problem too as a team leader.
Most of the time employees are aware of this bad decision but still want to make their own engine/library because it's more fun and they think they can get more credit by building their own library.
Instead of telling them what to do (nobody like it) try to give them a clear deadline for the whole project.