Hacker News

Ask HN: Interesting MITM Employment Scam?

Hacker News - Sun, 11/17/2024 - 9:47am

I got an employment offer out of the blue on LinkedIn matching my skills, from a “Frank B”, “Talent acquisition specialist @ Gauntlet” from supposedly Beaverton, Oregon with no picture. It didn’t mention what company it was for, but seemed interesting otherwise. I submitted a (public) link to my resume and other info about me.

They said: Sounds good. We’re moving quickly because the project is on a tight schedule, so we’re keeping our hiring process simple.

First, we’ll narrow down candidates based on their resumes. Next, there will be a 20-minute online skills assessment. Then, we’ll conduct a 30-minute HR interview. Finally, we’ll extend an offer.

We’ll review your resume and get back to you soon.

I said Sounds good. Heard nothing for a while. Yesterday I wrote: Any updates?” And I received this today:

Thank you for your interest in the opportunity with us. We appreciate the time and effort you put into your application.

We are pleased to inform you that you have successfully passed the initial resume review! As the next step, we invite you to complete a second technical assessment.

Please find the link to the assessment below:

https://app.willotalent.us/invite/REDACTEDHERE

Make sure to complete it by tomorrow, as we will review your results shortly after. If you have any questions, feel free to reach out.

We wish you the best of luck!*

The title says “Recording a Great Interview” LOL.

I was suspicious and looked at the domain site root page, which has a parking page.

It seems to be a proxy for “willo.video”. Clicking the button opens a proxy page which seems to launch into 3 questions, that it seems to proxy.

What happens when I answer these questions, I wonder? Surely at some point the company would want to interview me and ask my name, no? Probably there will never be any interactivity and the MITM site will ask me static questions for video responses, or maybe it will have someone in near-real-time give same answers to the employer but change the name?

I simply replied “can you tell me which company I’m interviewing for?

The incongruence of the response times with the new time pressure, and the vague nature of the employer tipped me off. The LinkedIn profile did have 75 connections, some of them to verified accounts of the CFO and top people at this “Gauntlet” firm.

I requested to connect to a couple of them on LinkedIn and will ask about this “Frank B.” But my question is: should I complete this assessment? What do you think would happen?

With AI, by the way, the MITM could be trivial, replacing just the names in my voice etc. One has to wonder how remote jobs could even work, if the MITM of interviews could be complete, and then don’t turn on the camera for a while. Or even turn on the camera but the AI voice and face changer does the rest.

The scams where someone poses as a lender or employer to get your personal data at the end are devious, but at least they are trivial: https://consumer.ftc.gov/consumer-alerts/2023/05/scammers-are-hijacking-job-ads-heres-how-spot-fakes https://www.reddit.com/r/recruitinghell/comments/13v1fcc/sighs_i_get_contacted_via_text_about_a_remote_job/

My question is what if this is a true MITM. Like this: https://drjohnsullivan.com/articles/identify-fraud-with-remote-hiring-could-your-new-hire-be-an-impersonator/ https://www.reddit.com/r/ExperiencedDevs/comments/16c6d1c/my_company_just_hired_a_bait_and_switch_person/

I imagine that the entire job search marketplace and every other marketplace (eg dating) has been MITMed for resumes and profiles for decades, at least by agencies to “stuff with good candidates/employers that are too bus to respond”. It was hard to invent entirely fake profiles, until AI, so real ones could be used like that.

Comments URL: https://news.ycombinator.com/item?id=42164448

Points: 1

# Comments: 1

Categories: Hacker News

How to Improve at Peer Review?

Hacker News - Sun, 11/17/2024 - 9:31am

I've recently joined a new company and I've begun to realize that I had never previously been exposed to good PRs and general peer review. My colleagues seem able to pick up on many details that could be improved in each others' and my code. These range from minor comments about docstrings, variable names to more general comments about the philosophy of the codebase and particular function implementations. Whereas I find it hard to pick up on anywhere near the same amount of detail. Are there any good resources out there on how to achieve a thorough review, akin to the resources available on how to read a scientific paper? Any tips from the community?

Comments URL: https://news.ycombinator.com/item?id=42164366

Points: 1

# Comments: 0

Categories: Hacker News

Haskell Mafia

Hacker News - Sun, 11/17/2024 - 9:05am
Categories: Hacker News

ReliveAI_V2

Hacker News - Sun, 11/17/2024 - 8:55am

Imagine a unified platform that elevates your business with powerful AI-driven tools for outreach, customer support, and API integration: AI BDR: SupportAgent, AI Copilot: Simplify your operations with NLP capabilities.

Learn more at reliveai.com

Comments URL: https://news.ycombinator.com/item?id=42164192

Points: 1

# Comments: 0

Categories: Hacker News

A century of motorways

Hacker News - Sun, 11/17/2024 - 8:54am
Categories: Hacker News

Show HN: Pull metrics for your favorite stocks

Hacker News - Sun, 11/17/2024 - 8:50am

Hey HN! I've built a simple application that let's you pull data like price, moving averages, stop-losses etc. for your favorite stocks. I always found myself looking up the same things (on yahoo finance, trading platforms etc.), so I wanted an easy way to fetch the data.

It's still baby steps - right now you cannot specify the data you want, and it only supports US stocks, but it's a start!

I'd love to hear from you what data and functionalities could be useful for you to have access to, so I can continue improving on this :)

If you input your own stock tickers, it generates a new url that you can share with others. Like here's my current portfolio: https://numeric-replica-441407-p8.ew.r.appspot.com/portfolio...

Best,

Comments URL: https://news.ycombinator.com/item?id=42164178

Points: 1

# Comments: 0

Categories: Hacker News

Soldering Is Easy

Hacker News - Sun, 11/17/2024 - 8:49am
Categories: Hacker News

Google Flood Hub

Hacker News - Sun, 11/17/2024 - 8:49am
Categories: Hacker News

Show HN: GitHub Multi-Topic Explorer: A Tool for Multiple Topics Searches

Hacker News - Sun, 11/17/2024 - 8:48am

Hey HN,

If you've ever tried to explore GitHub topics and found that the platform doesn't exactly let you explore repositories that span multiple topics, you're not alone. While GitHub allows you to search by a single topic, it doesn't natively provide a way to search for repositories at the intersection of multiple topics. That can make it hard to discover more nuanced projects that fall into overlapping areas of interest.

To solve this, I’ve developed GitHub Topics Explorer. This allows you to combine multiple topics and explore the repositories that match all of those topics, giving you much more granular results in your search for perfect tool , framework or app.

Key Features: Multi-Topic Search: Combine multiple topics (e.g., machine-learning + deep-learning + python) to find repositories that fit all of your search criteria. Granular Filtering: Focus on more specific intersections of topics and discover projects that you wouldn’t find with single-topic searches. Simple Interface: Just input your topics and hit search to get a refined list of repositories that fit your criteria.

Why This Is Useful: Better Discovery: For developers who are interested in niche or specific intersections of technologies (e.g., blockchain + machine-learning), this tool enables more precise exploration than GitHub’s built-in search. Targeted Research: Researchers, hobbyists, and developers can now more easily find repositories that align with a multi-faceted set of interests, improving the chances of discovering useful or related projects.

Community and Collaboration: Finding repositories at the intersection of multiple topics can foster collaboration between people working on similar but distinct areas of interest.

Example Use Cases: Searching for repositories that deal with both WebAssembly and Rust. Finding machine learning projects that also incorporate Natural Language Processing (NLP). Exploring open-source software that spans both data-science and cloud-computing.

If you're someone who’s limited by GitHub's current topic search, give this tool a try and let me know what you think! I’d love feedback, suggestions, and ideas for how to make it even more useful.

Feel free to play around with the search functionality. I present to you the Triton for Repo Searches! Happy coding!

https://githubtopics.cloudninelabs.site/

Comments URL: https://news.ycombinator.com/item?id=42164169

Points: 2

# Comments: 0

Categories: Hacker News

Pages