Maybe this is a real problem, IDK. But this article is so scant on actual details, and is mostly just weasel-wording it's way to "it's a problem, trust us."
> Chief among these disconnects were "shallow" LinkedIn profiles paired with "beefy resumes," she explained, citing job-seeker claims of working at Meta, attending Ivy League schools, developing major tech companies' flagship products … but then only having 25 LinkedIn connections.
LinkedIn is not the end-all be-all of résumés, and my coworkers have wildly varying numbers of connections.
> "We've certainly seen applicants that fit into this category with various IOCs [indicators of compromise] that we've shared with partners and peers," Snowflake CISO Brad Jones told The Register.
This is an abuse of the technical term IoC to try and dress up what amounts to "my gut hunch".
> Once the recruitment team began meeting via video conferences with some of the applicants, they noted extremely Western-sounding names, like James Anderson, paired with East Asian appearances and accented English, in much higher numbers than they expected.
That's just discriminatory.
> "You can't profile people, […] *But*
sigh
> The fraudster's answers weren't word-for-word ChatGPT, Little noted. "These people are smart, they're not unskilled, they're sophisticated," she said.
… no, that's because that's not how LLMs work.
> routing everything through a VPN
I'm not even sure how you would know this about a candidate.
> These IOCs, or indicators of compromise, include email addresses, physical addresses, and phone numbers that have been flagged as associated with non-legitimate candidates.
This is begging the question: the candidate is suss because they're suss. What makes the email address et al. "flagged"?
> The final step is always an in-person interview.
I mean … if you're not doing that, then … okay, I see how the scammers got to you.
> "We require people to come to the office to pick up their computer," Robinson said as an example.
I mean, if you pay for the plane tickets, the hotels, the taxis, the meals, and the time, sure, I guess.
If this is truly a problem — and maybe it is — the Register's reporting is so unspecific that it leaves us with no details of how we might tell, what to look out for (in ways that doesn't run afoul of racial discrimination, or seen elsewhere in the comments, political discrimination). It leaves me thinking this is an ad designed to leave me going "I'd have to hire a company that specializes in this to know if I'm being affected by it."
> Chief among these disconnects were "shallow" LinkedIn profiles paired with "beefy resumes," she explained, citing job-seeker claims of working at Meta, attending Ivy League schools, developing major tech companies' flagship products … but then only having 25 LinkedIn connections.
LinkedIn is not the end-all be-all of résumés, and my coworkers have wildly varying numbers of connections.
> "We've certainly seen applicants that fit into this category with various IOCs [indicators of compromise] that we've shared with partners and peers," Snowflake CISO Brad Jones told The Register.
This is an abuse of the technical term IoC to try and dress up what amounts to "my gut hunch".
> Once the recruitment team began meeting via video conferences with some of the applicants, they noted extremely Western-sounding names, like James Anderson, paired with East Asian appearances and accented English, in much higher numbers than they expected.
That's just discriminatory.
> "You can't profile people, […] *But*
sigh
> The fraudster's answers weren't word-for-word ChatGPT, Little noted. "These people are smart, they're not unskilled, they're sophisticated," she said.
… no, that's because that's not how LLMs work.
> routing everything through a VPN
I'm not even sure how you would know this about a candidate.
> These IOCs, or indicators of compromise, include email addresses, physical addresses, and phone numbers that have been flagged as associated with non-legitimate candidates.
This is begging the question: the candidate is suss because they're suss. What makes the email address et al. "flagged"?
> The final step is always an in-person interview.
I mean … if you're not doing that, then … okay, I see how the scammers got to you.
> "We require people to come to the office to pick up their computer," Robinson said as an example.
I mean, if you pay for the plane tickets, the hotels, the taxis, the meals, and the time, sure, I guess.
If this is truly a problem — and maybe it is — the Register's reporting is so unspecific that it leaves us with no details of how we might tell, what to look out for (in ways that doesn't run afoul of racial discrimination, or seen elsewhere in the comments, political discrimination). It leaves me thinking this is an ad designed to leave me going "I'd have to hire a company that specializes in this to know if I'm being affected by it."