警惕:YC联合创始人匹配中的恶意个人资料
今天我通过YC的联合创始人匹配平台收到了一个匹配请求。该用户声称自己是一位名叫“Dave J.”的经验丰富的英国技术专家。
匹配后,他们立即给我发了一个WhatsApp链接,并要求在那儿联系。随后,他们表示自己正在“进行某个程序”,无法进行语音或视频通话。
对他们的YC个人资料照片进行反向图像搜索后,我发现了一个名为“David W.”的网站和GitHub。然而,当我询问与我交谈的人要他们的GitHub时,他们提供了一个完全不同的账户,里面全是与信息安全相关的项目。
还有几个其他的警示信号:
• 尽管声称自己是英国人,但他们的英语水平很差。
• 他们声称没有LinkedIn,而真实的David W.似乎使用了他们的照片,并且有一个活跃的LinkedIn个人资料。
• 他们不愿意或无法通过语音或视频验证自己的身份。
我没有时间或兴趣让这次互动持续超过几分钟,但请大家在联合创始人匹配平台上要小心。似乎有些人使用虚假的身份和可能被盗用的照片来发起对话,并迅速将其转移到平台外。
这并不是我在该平台上遇到的第一次可疑互动。之前,有人想让我以我的身份为他们申请工作或在HN上为他们发帖。
我已经将此事报告给YC。
查看原文
Today I received a match through YC’s Co-Founder Matching Platform. The user claimed to be an experienced British technologist named “Dave J.”<p>Immediately after matching, they sent me a WhatsApp link and asked to connect there. They then said they were “having a procedure” and were unable to voice or video call.<p>A reverse image search of their YC profile photo led to the website and GitHub of someone named “David W.” When I asked the person I was speaking with for their GitHub, however, they provided a completely different account filled with infosec-related projects.<p>There were several other red flags:<p>• Their command of English was poor despite claiming to be British.
• They claimed not to have LinkedIn, while the real David W., whose photo appeared to have been used, has an active LinkedIn profile.
• They were unwilling or unable to verify their identity by voice or video.<p>I didn’t have the time or interest to let the interaction play out beyond a few minutes, but please be careful on the Co-Founder Matching platform. There appear to be people using fabricated identities and potentially stolen photos to initiate conversations and quickly move them off-platform.<p>This also isn’t the first suspicious interaction I’ve encountered there. On a previous occasion, someone wanted me to apply for jobs on their behalf using my identity or post to HN for them.<p>I’ve reported this one to YC.