251–260 of 382 posts
Do you trust any work related email sent to you using a gmail account? Cause I absolutely don't. I work in a very very tiny startup and even this guy sent me the acceptance mail through his company site.
Earlier quoted context omitted.
But what difference does it make? If I were a scammer I would: - buy a domain for 20 USD/year and create the corresponding hr@MyNiceAndSeriousLookingDomain.com - do what the scammer did in the blog post but without grammatical errors (I could even use chatgpt for that) and alway using my custom email address See. That's easy to fake. If people are willing to pay the scammers, then the grammar errors and proton emails…
Because the real domain is already taken by the real company.
There are even other TLDs you could play with that most non-tech people would think are legit. For example auto-nation.co or autonation.inc autonation.corporation. All of these would cost less than $20. I haven't checked these all for availability, but I suspect at least half the ones on this list are available, and even if they aren't you can play with different combinations to get something that is available. The purpose is only to fool people at first glance.
While most people on HN might know that internal-autonation.com does not actually mean its from autonation, I suspect it would still fool a lot of HN readers. Outside of tech workers, I think this technique would fool the vast majority of the population.
You could even buy a domain for something like new-fake-hrm-saas.com and make a fake website for a fake SaaS HRM/Recruiting tool. Then send all emails from that domain. If anyone asks, you can say that intial emails go through that SaaS tool until you have fully onboarded. This is something legit that actually happens in real life early on in the hiring process when they want all hiring correspondance to go through an HRM tool. Again, maybe a tech worker would be cautious of this technique, but most people would be none the wiser. This would allow you to maintain one domain for multiple scams so you could easily burn one if you get exposed. You could even do subdomains with it like autonation.fakehrm.com and salesforce.fakehrm.com and so on for each company you impersonate.
Again, this isn't to give people ideas. But this could be easily done for $20 a year and minimal effort. (The fake hrm saas site could be a template site, all real SaaS sites look the same anyway).
Earlier quoted context omitted.
Because the real domain is already taken by the real company.
I almost hate to say this to not give scammers any ideas, but it seems pretty obvious to me that you can buy look-alike domains that most people wouldn't think too much about. For example, autonationusa.com, autonationcorp.com, autonation-corp.com, autonation-hq.com, internal-autonation.com hr-autonation.com, autonationrecruiting.com, autonation-hiring.com and so on, you get the idea. There are even other TLDs you co…
Earlier quoted context omitted.
That people buy gift cards at all boggles my mind. You're buying a currency with less versatility (and hence value) for 1:1. Where I live, we have perfectly fine government-issued bills to gift if that's your thing. Somehow, that's considered a bad present? Because it's lazy? Because it doesn't show your opinion on clothes brands? I don't get it, from the consumer's perspective. To the shop/mall it's a clear winner,…
In order for a gift to serve its social function, it must be specifically matched to its recipient. Cash is not specifically matched to its recipient. (The exception is if there's some other social expectation that specifically says that the gift should be cash, like Jewish wedding gifts).
Earlier quoted context omitted.
Definitely a cause for alarm for someone that supposedly works in software in Florida, but there are professionals who don't have English as their first language.
Well, yeah there are professionals who don't have English as their first language, but I mean making a mistake in the most basic punctuation marks? Sure if he doesn't know the difference between "it's" and "its" then it's fine, but if he doesn't know how to properly use commas in a sentence then one must question his professionality. Additionally, there was no way he couldn't have had access to automation.com
Earlier quoted context omitted.
One look-alike letter in the domain is all you need.
I guess, but autonatlon.com kind of sticks out.
For example imagine getting an email from recruiting@internal-autonation.com. Again, I know a tech worker who actually is likely to have purchased a domain might know what is happening here, but most Americans would think this is legit.
Earlier quoted context omitted.
The McDonalds manager story in question: https://abcnews.go.com/2020/story?id=3688563&page=1 Which would be completely unbelievable if there wasn't security footage of the whole thing!
Meanwhile if an actual police officer directs a private citizen to perform this kind of search, it's not only apparently legal but approved by the medical and nursing board. https://storage.courtlistener.com/recap/gov.uscourts.azd.985...
The real life story is pretty sickening: an ~8 hour ordeal starting with the CDP saying "we think you have drugs" and forcibly sending an 18 year old girl to the hospital for an x-ray, in handcuffs, where she is instead invasively strip searched (with the CDP and hospital staff in audience). Nothing is found so they eventually let her go.
The court basically ruled that:
- The CDP did its job "correctly". They just need to think you did something wrong to detain you and force you to accept medical interventions.
- This was the wrong way to sue: the plaintiff must seek state-law tort action against the doctor for malpractice.
I can only hope that additional legal remediation brought some kind of justice and relief. Maybe this is yet another example of how contorted US law practice can be.
I'm not holding my breath.
You know it's fake because the company hasn't made you sit through 6 interviews with random panel guests then ghosted you for 3 month then low balled you and put a 24 hour expiry on the offer. Bonus credibility points for only giving half of the question during the whiteboard session only to casually remember remember at the very end while grading harshly for missing that. If the offer hasn't been rescinded at least…
He asked for 40 they counter-offered 45 :)
To be honest, one can easily realize that this "Marc Cannon" is a fake with the amount of spelling and grammatical errors he makes. Real professionals do not make spelling and grammar errors such as: "Do you have any other question ?" "Good morning how are you this morning." "I will send you later" "Good morning, How are you doing today ?" "This is very disrespectful and all director are to meet you for training on m…
I don't know, I've had a couple of bosses who were native English speakers and they would dash off emails so fast obviously without reading them that it took me multiple reads to parse what they might be trying to say. If it were just punctuation or spelling errors I would have been happy. I suspect they wrote to their bosses much more carefully. But something as sketchy as this setup would have my antenna twitching…
They act like Colt, polling any semi-relevant phrase from scrap-bag of memory, and shooting with it.
1- Unusually bad English (Not talking about normal immigrant English like mine, but like really bad, no way someone hired this person to recruit for these kind of positions). 2- These `recruiters` talk in very low volume, I had to tell them to speak louder, my guess is that they are in an office with a lot of people doing the same. 3- They ask you about weird stuff in their e-mail communication, like sign something in early phases of interviewing. 4- When tell you when they will call you and the number is flagged as 'SCAM LIKELY' then they tell you to save the number, super red flag
After that I googled the companies / job postings and were super generic with bad reviews in glassdoor.