Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A fake job offer took down Axie Infinity

theblock.co

Post reply on HN
Print view View original

101–110 of 364 posts

Re: A fake job offer took down Axie Infinity

#101

Post by joshstrange »

cmeacham98 wrote: post #58
joshstrange wrote: post #35

Earlier quoted context omitted.

Yeah, though I'd get dinged by that either way since I normally update my bio to include recent projects/tech I've worked with. This way I can hide behind plausible deniability "Oh, I just got around to adding X company to my LinkedIn" if I need to, whereas updating an existing entry is harder to justify (without giving away you are looking). Though I also try not to work for companies that I would need to worry abou…

I doubt they'd actually ask you about it (and thus give you a chance to "explain" yourself), HR would just note you down and you'd be more likely to be laid off, less likely to get promotions approved, etc.

Fair, though if I'm looking I'm planning on being gone in 1-2 months max and I'm probably leaving in part due to lack of promotion.

Re: A fake job offer took down Axie Infinity

#102

Post by ChrisMarshallNY »

PebblesRox wrote: post #100
ChrisMarshallNY wrote: post #84

Earlier quoted context omitted.

Yup. I'm gonna remove my cynical comment (although I still totally believe it). It's just not helpful. I think people can figure it out, for themselves. Also, people use LI as a way to aggregate information, then send emails that appear to be from LI, but are not. I got one of those, yesterday, and reported it to LI, saying "These guys obviously used your service to construct this honker." And LI's reply was ... enve…

I'd love to hear more about your experience with con artists!

It's not the type of story that I really share in the venue of press, radio and films, if you get my drift.

I'm happy to chat -a bit- about it, directly. Many of the stories that I know, are not mine, to tell.

Re: A fake job offer took down Axie Infinity

#103

Post by abxytg »

rmbyrro wrote: post #99
hn_throwaway_99 wrote: post #4

Two points to highlight from this article: 1. LinkedIn is an absolute godsend for bad guys, allowing easy targeting of everyone in the company with spear phishing emails and texts. I know many security professionals no longer use their real name, and don't list the real name of their company, because they know it's such a great hacking vector. Not sure what/whether LinkedIn can do anything about this. 2. I wish there…

The main problem was using a machine that had access to half a billion dollars to also browse the web and do stuff like applying for jobs. If you're gonna have access to such amount of money, it's worth buying a dedicated machine and using it very, very cautiously.

Yep. Bad opsec at the org level. Either the eng was doing work stuff on a personal laptop or personal stuff on a work laptop. This is easily preventable and should be table stakes when handling money, phi, etc

Re: A fake job offer took down Axie Infinity

#104

Post by outworlder »

joshstrange wrote: post #35
hn_throwaway_99 wrote: post #29

Earlier quoted context omitted.

> Personally I don't update my LinkedIn until I start looking for a new job. Perhaps semi-off topic, but note there are companies that sell software (spyware?) to HR departments that specifically trolls LinkedIn looking for when employees update their LinkedIn profiles as a sign they're looking for a new job. This may or may not be a good thing depending on your position, perspective, or company, but just be aware it…

Yeah, though I'd get dinged by that either way since I normally update my bio to include recent projects/tech I've worked with. This way I can hide behind plausible deniability "Oh, I just got around to adding X company to my LinkedIn" if I need to, whereas updating an existing entry is harder to justify (without giving away you are looking). Though I also try not to work for companies that I would need to worry abou…

You can't really reason with algorithms.

You'll be placed in a list with a score next to your name.

> Though I also try not to work for companies that I would need to worry about that.

How do you figure out what kind of software your company uses internally?

Re: A fake job offer took down Axie Infinity

#105

Post by joshstrange »

outworlder wrote: post #104
joshstrange wrote: post #35

Earlier quoted context omitted.

Yeah, though I'd get dinged by that either way since I normally update my bio to include recent projects/tech I've worked with. This way I can hide behind plausible deniability "Oh, I just got around to adding X company to my LinkedIn" if I need to, whereas updating an existing entry is harder to justify (without giving away you are looking). Though I also try not to work for companies that I would need to worry abou…

You can't really reason with algorithms. You'll be placed in a list with a score next to your name. > Though I also try not to work for companies that I would need to worry about that. How do you figure out what kind of software your company uses internally?

> How do you figure out what kind of software your company uses internally?

I work for smaller companies that are more concerned with building instead of turning their workforce into scores on a list.

Re: A fake job offer took down Axie Infinity

#106

Post by abirch »

rmbyrro wrote: post #99
hn_throwaway_99 wrote: post #4

Two points to highlight from this article: 1. LinkedIn is an absolute godsend for bad guys, allowing easy targeting of everyone in the company with spear phishing emails and texts. I know many security professionals no longer use their real name, and don't list the real name of their company, because they know it's such a great hacking vector. Not sure what/whether LinkedIn can do anything about this. 2. I wish there…

The main problem was using a machine that had access to half a billion dollars to also browse the web and do stuff like applying for jobs. If you're gonna have access to such amount of money, it's worth buying a dedicated machine and using it very, very cautiously.

I still can't believe that they opened the PDF on the company computer. I always use my home computer and the poor hacker would get bored of seeing all of my Raspberry Pi projects that I haven't done.

Re: A fake job offer took down Axie Infinity

#107

Post by munificent »

pjbeam wrote: post #79
Apocryphon wrote: post #72

I've got to say, this is an incredibly cyberpunk article. > Ronin, the Ethereum-linked sidechain that underpins play-to-earn game Axie Infinity, lost $540 million in crypto to an exploit in March. While the US government later tied the incident to North Korean hacking group Lazarus, full details of how the exploit was carried out have not been disclosed. It's not in William Gibson's style, sounds more like Bruce Ster…

Cyberpunk is now, just sans the 80s fashion inspirations :)

> sans the 80s fashion inspirations :)

You definitely haven't been paying attention to Gen-Z people then. The 80s are back.

Re: A fake job offer took down Axie Infinity

#108

Post by PragmaticPulp »

rmbyrro wrote: post #99
hn_throwaway_99 wrote: post #4

Two points to highlight from this article: 1. LinkedIn is an absolute godsend for bad guys, allowing easy targeting of everyone in the company with spear phishing emails and texts. I know many security professionals no longer use their real name, and don't list the real name of their company, because they know it's such a great hacking vector. Not sure what/whether LinkedIn can do anything about this. 2. I wish there…

The main problem was using a machine that had access to half a billion dollars to also browse the web and do stuff like applying for jobs. If you're gonna have access to such amount of money, it's worth buying a dedicated machine and using it very, very cautiously.

> The main problem was using a machine that had access to half a billion dollars

Going up a level, the main problem was that the company had a system where a single person could irreversibly transfer half a billion dollars away from the company.

Re: A fake job offer took down Axie Infinity

#109

Post by heleninboodler »

hn_throwaway_99 wrote: post #29
joshstrange wrote: post #22

Earlier quoted context omitted.

Personally I don't update my LinkedIn until I start looking for a new job. There is absolutely no need for anyone to know where I work (or at least for me to share that far and wide publically) and I'm not interested in cold emails/cold linkedin messages. My decision was cemented in 2020 when someone who didn't like a tweet of mine retweeted it to my old company's twitter account trying to get me fired/reprimanded (T…

> Personally I don't update my LinkedIn until I start looking for a new job. Perhaps semi-off topic, but note there are companies that sell software (spyware?) to HR departments that specifically trolls LinkedIn looking for when employees update their LinkedIn profiles as a sign they're looking for a new job. This may or may not be a good thing depending on your position, perspective, or company, but just be aware it…

Last time my RSU cliff came around, I logged into LinkedIn, updated my profile and accepted the backlog of connection requests (and read the flurry of "congratulations on your 4 year anniversary" messages). I almost immediately got Slack messages saying "are you leaving?" But I wanted them to notice; that was the point.

Re: A fake job offer took down Axie Infinity

#110

Post by vgel »

wly_cdgr wrote: post #62

How do you go through a whole job interview process and not realize that the company you are applying to is fake and doesn't exist?! ...Oh wait, this is crypto

I applied (and got a job and worked at for a bit) a stealth-mode startup and it felt like a scam. No web presence, nobody had it listed as their job on LinkedIn, a couple vague references to funding rounds online that mentioned a different business model (turns out they had pivoted), etc. Remote applications are weird.
Post reply on HN