I almost got hacked by a 'job interview'
blog.daviddodda.com
I almost got hacked by a 'job interview'
1–10 of 534 posts
Re: I almost got hacked by a 'job interview'
#2I own a company and get contacted daily by tons of applicants who scammers took advantage of using fake similar domains and such. My opinion is that scammers, wherever they are in the world, should get bombed. Criminals only stop when the risks are higher than the rewards. And we need to stop victim blaming companies and individuals.
Re: I almost got hacked by a 'job interview'
#3AI didn't save him.
His intuition did.
Re: I almost got hacked by a 'job interview'
#4I’ve grown to depend on little snitch for this sort of thing. Always run in either Alert or Deny mode.
It is a little wild how many things expect to communicate with the internet, even if you tell them not to.
Example: the Cline plugin for vscode has an option to turn off telemetry, but even then it tries to talk to a server on every prompt, even when using local ollama.
Re: I almost got hacked by a 'job interview'
#5I own a company and get contacted daily by tons of applicants who scammers took advantage of using fake similar domains and such. My opinion is that scammers, wherever they are in the world, should get bombed. Criminals only stop when the risks are higher than the rewards. And we need to stop victim blaming companies and individuals.
I read somewhere that if all of online scamming was calculated as a country's production, it'd have the 3rd largest GDP in the world. Edit, link: https://sponsored.bloomberg.com/quicksight/check-point/the-w...
But then again, aren't there obviously scams, and scams that are deemed legal? Like promising a car today that will be updated "next year" to be able to drive itself? Or all the enshittified industry's dark patterns, preying on you to click the wrong button?
Re: I almost got hacked by a 'job interview'
#6> The scary part? This attack vector is perfect for developers. We download and run code all day long. GitHub repos, npm packages, coding challenges. Most of us don't sandbox every single thing.
Embedded into this story about being attacked is (hopefully) a serious lesson for all programmers (not just OP) about pulling down random dependencies/code and just yolo'ing them into their own codebases. How do you know your real project's dependencies also don't have subtle malware in them? Have you looked at all of them? Do you regularly audit them after you update? Do you know what other SDKs they are using? Do you know the full list of endpoints they hit?
How long do we have until the first serious AI coding agent poisoning attack, where someone finds a way to trick coding assistants into inserting malware while a vibe-coder who doesn't review the code is oblivious?
Re: I almost got hacked by a 'job interview'
#7The article never really addresses if it was a totally fake setup or a real crypto company scamming interviewees. Does "Symfa" exist? Does the "Chief Blockchain Officer"?
Re: I almost got hacked by a 'job interview'
#8why is this website `daviddodda` while the linkedin message mentions `arun`.
This might be the forth or fifth time I've seen this type of post this week, is this now a new form of engagement farming?
Re: I almost got hacked by a 'job interview'
#9This article was written by an LLM.
I get that the author might be self-conscious about his English writing skills, but I would still much rather read the original prompt that the author put into ChatGPT, instead of the slop that came out.
The story - if true - is very interesting of course. Big bummer therefore that the author decided to sloppify it.
David, could you share as a response to this comment the original prompt used? Thanks!
Re: I almost got hacked by a 'job interview'
#10I own a company and get contacted daily by tons of applicants who scammers took advantage of using fake similar domains and such. My opinion is that scammers, wherever they are in the world, should get bombed. Criminals only stop when the risks are higher than the rewards. And we need to stop victim blaming companies and individuals.
I read somewhere that if all of online scamming was calculated as a country's production, it'd have the 3rd largest GDP in the world. Edit, link: https://sponsored.bloomberg.com/quicksight/check-point/the-w... But then again, aren't there obviously scams, and scams that are deemed legal? Like promising a car today that will be updated "next year" to be able to drive itself? Or all the enshittified industry's dark pat…
You're making a "perfection" kind of fallacy. If we extend the term "scammer" to mean "anyone who didn't 100.0% deliver on every statement they ever made", congrats: EVERYONE is a scammer.