Did he get the job? because i guess he was fired from the previous one.
It’s also possible that he quit instead. If I interviewed for a new job, accepted an offer, and then everything blew up in my face… I’d probably not want to stick around.
A fake job offer took down Axie Infinity
71–80 of 364 posts
Re: A fake job offer took down Axie Infinity
#72I've got to say, this is an incredibly cyberpunk article.
> Ronin, the Ethereum-linked sidechain that underpins play-to-earn game Axie Infinity, lost $540 million in crypto to an exploit in March. While the US government later tied the incident to North Korean hacking group Lazarus, full details of how the exploit was carried out have not been disclosed.
It's not in William Gibson's style, sounds more like Bruce Sterling's.
> Axie Infinity was huge. At its peak, workers in Southeast Asia were even able to earn a living through the play-to-earn game. It boasted 2.7 million daily active users and $214 million in weekly trading volume for its in-game NFTs in November last year — although both numbers have since plummeted.
> Earlier this year, staff at Axie Infinity developer Sky Mavis were approached by people purporting to represent the fake company and encouraged to apply for jobs, according to the people familiar with the matter. One source added that the approaches were made through the professional networking site LinkedIn.
Also gives me Charles Stross vibes.
Re: A fake job offer took down Axie Infinity
#73Earlier quoted context omitted.
Exploits in the PDF viewer. The Adobe tools in particular have been a bountiful source of exploits for decades, but it's a complicated spec and there are plenty of opportunities for bugs.
I see, much like Unicode exploits. I use Chrome to view PDFs which I assume to be safe.
Chrome's PDF viewer seems to be implemented in native code. But it probably benefits from the sandboxing that Chrome does.
I would say Firefox is the safest here, because its built-in PDF viewer is written in JS, although Firefox's sandboxing is not as strong as Chrome's.
Re: A fake job offer took down Axie Infinity
#74Re: A fake job offer took down Axie Infinity
#75[deleted]
Re: A fake job offer took down Axie Infinity
#76Earlier quoted context omitted.
Perhaps they not taking his word, but waiting for him to move the funds?
They already know where the money went: https://home.treasury.gov/policy-issues/financial-sanctions/... And it has already been moved: https://www.blockchain.com/eth/address/0x098B716B8Aaf2151299...
From the group that brought you The Interview hack, here is an interview hack.
Re: A fake job offer took down Axie Infinity
#77Two points to highlight from this article: 1. LinkedIn is an absolute godsend for bad guys, allowing easy targeting of everyone in the company with spear phishing emails and texts. I know many security professionals no longer use their real name, and don't list the real name of their company, because they know it's such a great hacking vector. Not sure what/whether LinkedIn can do anything about this. 2. I wish there…
Personally I don't update my LinkedIn until I start looking for a new job. There is absolutely no need for anyone to know where I work (or at least for me to share that far and wide publically) and I'm not interested in cold emails/cold linkedin messages. My decision was cemented in 2020 when someone who didn't like a tweet of mine retweeted it to my old company's twitter account trying to get me fired/reprimanded (T…
Which is why I simply don't use my real name (well, not a full name) for my Twitter account. I have the right to keep my professional and private persona separate, and if someone really wanted to, they could find out where I work anyway. (I'm not tweeting anything extreme in my own view, but there's always someone who will regard it as such, and as you say, what's good about giving people such option to begin with).
Re: A fake job offer took down Axie Infinity
#78This is so interesting, I just reported someone doing this on LinkedIn to the IC3. They create fake companies and ask for details like your SSN to ostensibly run a background check on you but in actuality it's to steal your identity or use your info to gain access to restricted resources.
Re: A fake job offer took down Axie Infinity
#79I've got to say, this is an incredibly cyberpunk article. > Ronin, the Ethereum-linked sidechain that underpins play-to-earn game Axie Infinity, lost $540 million in crypto to an exploit in March. While the US government later tied the incident to North Korean hacking group Lazarus, full details of how the exploit was carried out have not been disclosed. It's not in William Gibson's style, sounds more like Bruce Ster…
Cyberpunk is now, just sans the 80s fashion inspirations :)
Re: A fake job offer took down Axie Infinity
#80They rely on 9 trusted validators, the hacker managed to get access to the private keys of 4 out of the 9 validators.
What's the point of using a Blockchain if you end up centralizing validations like that?