I was asked to install malware during a fake interview

ashishb.net

54 points·ashishb··10 comments

> become a technical advisor for their web3 project

That by itself should have been the first red flag. I also heard a lot of these stories recently. I think this might be one of the good use cases of GitHub Codespaces.

Not for someone who get 10-20 such requests a year. None till date were such scams.

All of them were scams, this was just the first time you were the intended victim.

Those were real companies. The conversation started online and immediately moved in-person.

I was never asked to install anything. I was not even given code access (without NDA) and I did get paid with equity/money in cases there was a mutual match and we proceeded.

Oh god, thanks for the heads up. It's a wonder how many people fell for it, definitely non-zero I reckon. I would hate for this to become a thing on LinkedIn.

> If it is open-source, you will see a meaningful activity - stars, forks, contributors.

That's not true, I'm quite sure most repos on GitHub have neither many stars, nor forks, nor multiple contributors.

To add to that, any metrics like these can be quite meaningless since you can just buy them online.

Please never rely on any such "social" metrics.

This is just a negative filter to see as a warning sign. It is like walking into a dark alley at night.

Nothing might happen but you should be on the alert.

Kudos for giving the actual names of the guys.

Yeah. Real profile names.

Unlikely that those guys were real. And I did reach out to them for explanation. Only to be blocked by both!

Reply on news.ycombinator.com