Live data from Hacker News

How does one get hired by a top cybercrime gang?

krebsonsecurity.com

71–80 of 152 posts

Re: How does one get hired by a top cybercrime gang?

#72
post #65

Earlier quoted context omitted.

If I recall correctly many had regular jobs that even paid better. The idea of a full time 'career criminal' guy who works at it full time without another job seems less common than people seem to think.

Most drug dealers I know just do it to achieve a lifestyle they wouldn't normally be capable of with their existing job(s).

Most drug dealers are doing it so they can smoke/drink for free maybe make a few dollars.

Re: How does one get hired by a top cybercrime gang?

#73
post #5
post #3

Quite frankly she doesn’t come across as very smart, and certainly not very technologically sophisticated. The idea that you run into a problem and use Google to solve it hardly constitutes skill development. It is interesting that they’re hiring based on job boards. I don’t know how normal gangs recruit but I’d guess it’s a lot of word of mouth. It seems when there are real honest alternatives out there for skilled…

This doesn’t in any way downplay your point, I just noticed this sentence and it made me think: “The idea that you run into a problem and use Google to solve it hardly constitutes skill development.” It’s probably natural for most folks on HN to consider “googling problems” an obvious, basic first solution - but I’m always stunned by how many people in real life, outside of the IT industry, don’t have that path in th…

> I wonder if there’s an opportunity to teach a “how to search” class in schools. You could have some fun open-Google exams!

I had something similar to that when I was in elementary school, including comparing results across search engines. Boolean searches plus Smart Selection of keywords would quickly lead you to good sources.

Sometime between when I graduated high school and 2016, most of those tricks stopped working reliably. Google, Bing, and DDG are the only games in town for the anglophone world and all three drown out the worthwhile results in reposted blog spam. Until you magically discover the shibboleth that directs you to actual information, you’re stuck in a hell of shitty how-to websites that have nearly-identical irrelevant information.

It’s less hassle and more accurate (though slower and possibly outdated) to directly ask a known local expert.

Re: How does one get hired by a top cybercrime gang?

#74

Getting hired is just applying to another job posting. The interview process is two-step, with a project-based technical component. The job itself is also two-step: first year is similar to contract work, with good employees brought into the fold not long after. It looks like DOJ is trying to make an example out of some lowly frontend/freelance developer. Her work includes: - creating a "web panel used to access vict…

Why would doing these be fundamentally less bad then other tech other work for gang? It is pretty clear from your examples that she knew who she is working for. And yes, this sort of admin codinf large part of any hackers group. Large scale operation reaquires that.

Second, your section "Her work includes" picks least harmful sounding sentences. And they still sound harmful enough.

Re: How does one get hired by a top cybercrime gang?

#75

Earlier quoted context omitted.

The hospital costs for uninsured low level drug dealers who have a lead allergy must be astronomical.

Sure, but society picks up the tab

If you examine marginal behaviour, we're all picking up each others' tabs.

Re: How does one get hired by a top cybercrime gang?

#76
post #3

Quite frankly she doesn’t come across as very smart, and certainly not very technologically sophisticated. The idea that you run into a problem and use Google to solve it hardly constitutes skill development. It is interesting that they’re hiring based on job boards. I don’t know how normal gangs recruit but I’d guess it’s a lot of word of mouth. It seems when there are real honest alternatives out there for skilled…

The idea that you run into a problem and use Google to solve it hardly constitutes skill development. You need to understand a domain somewhat well in order to Google effectively. For example, I don't know anything about flowers. Sometimes I see a flower that I'd like to identify, but I can't really Google it -- aside from color and perhaps the number of petals I'd have no idea what terms I'd use to describe a flower…

Is this true anymore? It used to be true back when all the really cool Google search operators worked and the service didn’t use natural language processing to process search queries. But these days you’re ‘supposed’ to use google like this: ‘what is the purple wild flower that grows in spring in England?’ as opposed to ‘filetype:pdf site:blah.org +foo -bar 2010..2012’ which would find files of type pdf on domain blah.org referring to foo but not bar between the years 2010 and 2012.

Honestly I prefer searching the latter way and would love to know which search operators still work these days.

Re: How does one get hired by a top cybercrime gang?

#77

https://www.fbijobs.gov/

Wait, the "wall of perp photos connected by bits of yarn" is REAL?! And here I thought I was watching way too many procedurals. Mind = blown.

Look at how your last few jobs were represented by the recruiting department compared to how the actual job was. Everybody does this, it’s a transparent lie to push you over the edge if you were already interested.

Re: How does one get hired by a top cybercrime gang?

#78
post #31
post #5

Earlier quoted context omitted.

This doesn’t in any way downplay your point, I just noticed this sentence and it made me think: “The idea that you run into a problem and use Google to solve it hardly constitutes skill development.” It’s probably natural for most folks on HN to consider “googling problems” an obvious, basic first solution - but I’m always stunned by how many people in real life, outside of the IT industry, don’t have that path in th…

Many (most?) people are simply not curious. When they run into something they don’t know how to do, they don’t wonder how to figure out how to do it, they just sit there until someone shows them how. I assume when most people here on HN run into a problem, their first thought isn’t, “who can I ask?” but instead, “how can I figure it out?” because most hacker types are naturally curious and relish an opportunity to le…

> Many (most?) people are simply not curious.

Is this really so? With respect, this take seems too cynical to me. I say this as a person to whom many come when they can't figure things out.

I often initially feel much like you do, but I temper that feeling with the knowledge that the asker is likely under delivery pressure, etc and has to subvert their curiosity in order to maintain velocity.

Re: How does one get hired by a top cybercrime gang?

#79
post #58
post #55

Earlier quoted context omitted.

They're not really pyramids though. If you're a baseball player, you either make a lot of money by most people's standards, albeit for a possibly short career, or you basically don't make much at all, even if you can play in the minors. Law isn't quite so stark. You don't have to be at a white shoe firm to do OK (corporate counsel, prosperous practice in a smaller city) but a lot of lawyers certainly make pretty mode…

It's still a pyramid. There are a few people at the top. There is the next layer of the people who make a decent living, aka the "middle class" actors, the folks making MLB minimum wage ($600K/yr), etc. and then all the people in the bottom layer trying to break in (the starving actors, the minor league players, etc). And lawyers are very bimodal. You have a ton of lawyers who make less than $200K/yr, and not a lot i…

Exactly. The middle ones are all government attorneys who exchange earning potential for stability and more humane hours.
Post reply on HN