Live data from Hacker News

I almost got hacked by a 'job interview'

blog.daviddodda.com

241–250 of 534 posts

Re: I almost got hacked by a 'job interview'

#243

I'm seeing red flags all over the story. "Blockchain" being the first one. The use cases for that are so small, it is a red flag in and of itself. Then asking you to run code before a meeting? No, that doesn't "save time", that is driving you to take actions when you don't yet know who is asking. Still, I appreciate the write-up. It is a great example of a clever attack, and I'm going to watch out more for such thing…

> I'm seeing red flags all over the story. "Blockchain" being the first one.

Agreed. That would have forced me to abort the proceedings immediately.

Re: I almost got hacked by a 'job interview'

#244
post #16

The pseudonym "Mykola Yanchii" on LinkedIn [1] doesn't look real at all. Click "More" button -> "About this profile", RED FLAGS ALL OVER. -> Joined May 2025 -> Contact information Updated less than 6 months ago -> Profile photo Updated less than 6 months ago Funny things, this profile has the LinkedIn Verified Checkmark and was verified by Persona ?!?! -> This might be a red flag for Persona service itself as it migh…

PSA: If you are logged in to LinkedIn, then clicking on a LinkedIn profile registers your visit with the owner -- it's a great way for someone to harvest new people to target. On another note, what's unreal about the pseudonym? It's a Ukrainian transliteration of Николай Янчий (Nikolay Yanchiy). Here's a real person with this name: https://life.ru/p/1490942

You can change a setting so that you only show up as a view but not who you are.

Re: I almost got hacked by a 'job interview'

#245
post #66

Earlier quoted context omitted.

> Seasoned accounts are a positive heuristic in many domains, not just LinkedIn. Yep. This is how the 3 major credit bureaus is the United States to verify your identity. Your residence history and your presences on the distributed Internet is the HARDES to fake.

> Your residence history and your presences on the distributed Internet is the HARDEST to fake. Only if you don’t plan ahead. I can’t remember which book/movie/show it was from, but there was a character who spent decades building identities by registering for credit cards, signing up for services, signing leases, posting to social media, etc so that they could sell them in the future. Seems like it would be trivial…

That is a "valid" scam idea. However it is tricky to pull off. If anyone you sell the account to is investigated they may find you and can possibly get you on fraud even before they cannot arrest your customer. You also need to sell all these accounts - investigators look for and hang out in the places where such services are sold just so they can buy from you first and then shut you down (they don't know of all such places and eventually shut down the ones you know of). There are also suspicion that investigators are running that same plan and so nobody smart will buy because they can't be sure you are not the police.

There are probably more ways this can fail.

Re: I almost got hacked by a 'job interview'

#247

Earlier quoted context omitted.

>Seasoned accounts are a positive heuristic I've found for the most part account age/usage is not considered at all in major online service providers. I've straight up been told by Google, Ebay and Amazon that they do not care about account age/legitimacy/seasoning/usage at all and it is not even considered in various cases I've had with these companies. They simply don't care about customers at all. They are only lo…

Eventually, some of these companies will realize that a well-managed customer service org is a profit center and they will get an enormous amount of business. Unfortunately, they'll all keep fucking over customers until they realize that accepting life in the crab bucket is a negative-sum game. I'm considering going back to school to write a "Google Fi 2016-2023: A Case Study in Enshittification" thesis but I'm not s…

Unfortunately ebay has a lock on large parts of the market and only a small number of people have been called frauds by them. I personally can't buy from you because they have decided my account is compromised, but I'm just one person and so that is a tiny number of potential customers.

Re: I almost got hacked by a 'job interview'

#248
post #16

The pseudonym "Mykola Yanchii" on LinkedIn [1] doesn't look real at all. Click "More" button -> "About this profile", RED FLAGS ALL OVER. -> Joined May 2025 -> Contact information Updated less than 6 months ago -> Profile photo Updated less than 6 months ago Funny things, this profile has the LinkedIn Verified Checkmark and was verified by Persona ?!?! -> This might be a red flag for Persona service itself as it migh…

"LinkedIn Verified Checkmark" I never managed to pass the verification check. Phone always freezes.

Re: I almost got hacked by a 'job interview'

#249

This article is so interesting, but I can’t shake the feeling it was written by AI. The writing style has that feel for me. Maybe that shouldn’t bother me? Like, maybe the author would never have had time to write this otherwise, and I would never have learned about his experience. But I can't help wishing he'd just written about it himself. Maybe that's unreasonable--I shouldn't expect people to do extra work for fr…

that was the case. you can find the base write up and the prompt used in one of my comments on this post.

i did not have much time to work on this at all, being in the middle of a product launch at my work, and a bunch of other 'life' stuff.

thanks for understanding.

Re: I almost got hacked by a 'job interview'

#250

Earlier quoted context omitted.

Why censor your answer? The F is for Fucking. DFE: Delete Fucking Everything.

It's a joke. An older version of the joke, from Usenet, is that RTFM stands for "Read The Manual". The gag is that the newbie asking the question will wonder why the F wasn't included in the expansion, and rapidly figure it out. Or they ask, and you make fun of them for it. The joke is either kinda cerebral or really juvenile... and the tension between the two is part of the joke.

Or there were those on Usenet with what at the time was considered basic professionalism.
Post reply on HN