告诉HN：在回应“谁在招聘”的职位发布时要小心。
亲爱的HN：
在不点名的情况下（尽管到四月份我会针对特定的发帖者进行回应），我想分享一些建议，因为我自己曾经粗心大意，事后意识到错误。
当我们处于求职状态，尤其是在这个糟糕的就业市场中，我们容易受到社会工程攻击，而一些不良行为者似乎正利用这些（预期的）脆弱性。
其中一个脆弱性是时间资源有限。在申请每一家公司之前进行尽职调查是一种我们根本无法奢侈享受的奢侈品。这在申请一些鲜为人知的初创公司时尤为重要。如果你和我一样，每个月的第一天，你会逐一浏览页面，申请那些看起来合适的职位。
另一个（预期的）脆弱性是在申请过程中，提出了一些通常需要经过严格考虑的要求。
这个月，我收到了一家公司的回复，他们在对我的申请表示出极大热情后，要求我提供一个视频介绍。对此，我应该意识到这是一个警示信号，因为当我从一个知名服务提供商那里提供这个视频时，他们要求提供一个不需要登录该服务的链接。在我提供了一个不需要记录他们访问视频的链接后，他们就不再回应我，也没有回复我的后续联系。这让我感到奇怪，最终我开始深入挖掘他们关于页面上团队成员的名字，所呈现的画面与他们关于页面上的小片段截然不同。（结果发现，他们的首席执行官实际上并不是一个技术愿景者，而是一个被美化的市场营销人员。）
现在，这完全有可能只是我们社会中退化的社会规范的又一个例子。但也有可能这家公司正在收集简历和视频（生物特征），特别是因为他们的“隐私”页面表明了对与他们沟通的内容的版权的典型声明。
今后我将采取的做法（我建议大家也这样做，并期待YCombinator在“谁在招聘”主题的置顶帖子中也推荐这一点）是，在提供此类内容之前，首先获得关于版权不转让和严格限制共享范围的确认。毕竟，我们生活在一个轻易创造AI替身的时代。
查看原文
Dear HN,<p>Without naming names (although come April will do so in response to specific poster) I want to share a piece of advice after having been careless myself and realizing the error afterwards.<p>When we are in job search mode, specially in this atrocious job market, we are vulnerable to social engineering, and some bad actors appear to be taking advantage of these (expected) vulnerabilities.<p>One such vulnerability is limited time resources. To do due diligence on every single company before applying is a luxury that we simply don't have. This is specially important when applying to little known startups. If you are like me, come first of the month, you are going down that page and applying to whatever seems a good fit, one after another.<p>The other (expected) vulnerability is when in response to the application requests are made that one would normally subject to critical consideration.<p>This month I received a response from a company that after having expressed great enthusiasm regarding my application, requested a video introduction. It should have been a red flag for me that when I provided this from a well known service provider they requested a link that did not require their logging in to that service. After providing a link that did not require a record of their access to the video, they have ghosted me and have not responded to follow ups. This felt strange and (doh) I finally started digging deeper into the names of the team members on their about page and the picture that emerged was unlike the little snippets on their about page. (Turns out their ceo is actually not a tech visionary but rather a glorified marketer.)<p>Now it is entirely possible that this is simply yet another example of the degraded social norms in our society. But it is also possible that this company is collecting resumes and video (biometrics) specially since their "privacy" page indicates the typical assertion of copyrights over communications with them.<p>What I will be doing going forward (and I recommend the same and expect YCombinator to also recommend this in the top post for the who is hiring thread) is to, before providing such content, first obtain an acknowledgement regarding non-transfer of copyrights and strictly limited scope of sharing of such content before providing it. We live after all in the age of trivially created AI dopelgangers.