138
How bad is this? (lemmy.world)
submitted 11 months ago by to c/cybersecurity@sh.itjust.works
30 comments fedilink hide all child comments
 

On a job application site for my local government it reveals if a specific social security has been used or not on that site. The site is very outdated.

you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 11 months ago (12 children)

Perfect thing to mention at the interview

  • permalink
  • fedilink
  • source
  • hideshow 12 child comments
    •
  • [–] [S] 15 points 11 months ago (11 children)

    We'll see if I get there, I obviously used a phony ss number because f that. I also have zero professional it experience, just homelab stuff, building PCs running a lemmy instance, that kind of stuff. I know I can do the job, it's just hard to get your foot in the door. I'm considering getting CompTia Network+

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 11 child comments
    •
  • [–] 23 points 11 months ago (7 children)

    Using a fake ssn on a job application is profoundly counterproductive.

    If you don't trust them with your ssn why are you applying

    When they try the standard background check and find you lied they will have no interest in you

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] [S] 4 points 11 months ago (6 children)

    Would you hire someone for it if they willingly put in their SSN to a random sketchy, unsecure looking website? I have never had another online application ask for that.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 21 points 11 months ago (4 children)

    I can assure you they are far more interested in your ability to follow instructions than they are in your online hygiene.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 7 points 11 months ago (3 children)

    Well, then he dodged a massive red flag.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 6 points 11 months ago (2 children)

    Maybe they're a local government, they inherited this undocumented unmaintained system and really need help? Sounds like that's what's happening here.

    It would be different if the application was for a dodgy online make money from home setup

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 2 points 11 months ago (1 child)

    It seems like it's a third party, the base url is https://www.applitrack.com/ but redirects to a different url for education applications.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 11 months ago*

    If it's for local government... seriously, spend 20 minutes writing up your findings & concerns about their job signup website, from the standpoint of IT security. Then just walk in person to the relevant government office with that and a copy of your resume, and ask to schedule a time to talk about the position.

    If you have time to wait, the IT director or hapless Town Manager who wishes he had an IT director may well talk to you when they have a spare 20 minutes that day.

    As long as you don't pick your nose or demand to work naked, IMO you'd have a solid shot at the job. Esp if most people are using the crappy online submission form.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 11 months ago

    This is correct. It could even be part of the application process. I would write them an email that the obvious fake one didn't work and you'll not put your SSN on that site for security concerns. Especially not in the application phase. If they reject you for that you have dodged a bullet.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 11 months ago (2 children)

    Don't get your network+! I'm working on getting mine and I don't need the competition /lh

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 11 months ago (1 child)

    Alternatively get CCNA if you want to be certified for something useful.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 11 months ago

    I have the A+ and am already scheduled for the Network+ test. I still consider myself quite the noob, but am learning a lot. I will look into the CCNA, as you're not the first to mention it to me. Next on my list was Security+, however. At this point, I just want any entry-level job in IT. Or fuck... almost any job at all. Going on 6 months of unemployment here.

  • permalink
  • fedilink
  • source
  • parent