"transforming real estate with blockchain" is the only red flag needed
Imagine if this guy had run the malicious code and transferred ownership of his house. Oops.
He would have to hand to over to them. "Code is law"
I almost got hacked by a 'job interview'
131–140 of 534 posts
Re: I almost got hacked by a 'job interview'
#132> I ran the payload through VirusTotal - check out the behavior analysis yourself. Spoiler alert: it's nasty.
The VirusTotal behavior analysis linked to says 'No security vendors flagged this file as malicious'
Re: I almost got hacked by a 'job interview'
#133I had someone who was targeting junior developers posting on Who Wants to Be Hired threads here on Hacker news. They reached out saying they liked my projects and had something I might be interested in, then set up an interview where they tried to get me to install malware.
Maybe I should implement this as a weed out question during interviews. If the applicant is willing to download something without questioning it, then the interview can be ended there. Don't need someone working with me that will just blindly install anything just because.
Re: I almost got hacked by a 'job interview'
#134I had a very similar experience: https://kaveh.page/blog/job-interview-scam
I would never agree to run someone's code on my own machine that didn't come from a channel I initiated. The odd time I've ran someone else's code, ALWAYS USE A VM!
Re: I almost got hacked by a 'job interview'
#135Earlier quoted context omitted.
Create an account and let it age. Seasoned accounts are a positive heuristic in many domains, not just LinkedIn. For example, I some times use web.archive.org to check a company's domain to see how far back they've been on the web. Even here on HN, young accounts (green text) are more likely to be griefing, trolling, or spreading misinformation at a higher rate than someone who has been here for years.
> Seasoned accounts are a positive heuristic in many domains, not just LinkedIn. Yep. This is how the 3 major credit bureaus is the United States to verify your identity. Your residence history and your presences on the distributed Internet is the HARDES to fake.
Same in the UK (which is currenty a contentious issue again with Digital ID), because there is no concept of having a cryptographic signature tied to your identity in the way it is done in other EU countries.
Instead you need: - five years of address history - a recent utility bill or a council tax bill that has your full address - maybe a bank statement - passport or driving license
It just so happens that Experian, etc. have all of that, and even background checking agencies will depend on it.
Re: I almost got hacked by a 'job interview'
#136The pseudonym "Mykola Yanchii" on LinkedIn [1] doesn't look real at all. Click "More" button -> "About this profile", RED FLAGS ALL OVER. -> Joined May 2025 -> Contact information Updated less than 6 months ago -> Profile photo Updated less than 6 months ago Funny things, this profile has the LinkedIn Verified Checkmark and was verified by Persona ?!?! -> This might be a red flag for Persona service itself as it migh…
You can click on the verification badge and see if the person has job verification. If not, that's a red flag. I never paid attention to this myself but I will in the future.
I honestly didn't even know about the feature until my most recent job when LI offered to verify.
Re: I almost got hacked by a 'job interview'
#137Re: I almost got hacked by a 'job interview'
#138>a "legitimate" blockchain company When you lie down with dogs, you get up with fleas.
I wonder if willingness to be involved with Bitcoin is a flag for scammers? It at least raises the chance you'll have a wallet or other program around and therefore more payoff for easy hacks
It certainly signals a willingness to tolerate sketchy behavior, since that is mandatory when working with crypto.
Re: I almost got hacked by a 'job interview'
#139Earlier quoted context omitted.
Create an account and let it age. Seasoned accounts are a positive heuristic in many domains, not just LinkedIn. For example, I some times use web.archive.org to check a company's domain to see how far back they've been on the web. Even here on HN, young accounts (green text) are more likely to be griefing, trolling, or spreading misinformation at a higher rate than someone who has been here for years.
> Seasoned accounts are a positive heuristic in many domains, not just LinkedIn. Yep. This is how the 3 major credit bureaus is the United States to verify your identity. Your residence history and your presences on the distributed Internet is the HARDES to fake.
sucks to be young I guess.
Re: I almost got hacked by a 'job interview'
#140I did this to someone. But it was my best friend Pancho, and I made it so his computer loudly exclaims "I love white wieners!" at random points when Zoom is open.
Pancho, if you're reading this, sorry I exposed you like that