Hacker News: CITIZENDOT

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Thu, 23 Jul 2026 03:09:37 +0000

> C2 interface

do you mean the machine which is connected through the victim's machine? if so, i should put this in a VM, run and see where it's sending/receiving requests from. i'll do that.

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Thu, 23 Jul 2026 02:21:20 +0000

everything is hosted on github pages, i'll have to use some cdn for images.

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Thu, 23 Jul 2026 02:18:56 +0000

hmm, i don't understand why you think this is suspicious. doing their stuff on their machine is ... fine i guess?

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Thu, 23 Jul 2026 02:15:50 +0000

wow

> I maintained a very popular NPM package with 43+M weekly downloads

makes sense why they targetted you, good that you have 2FA enabled.

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Thu, 23 Jul 2026 01:06:13 +0000

thanks!

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Thu, 23 Jul 2026 00:19:54 +0000

It's either leetcode style interviews or take-home assessments AFAIK

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Thu, 23 Jul 2026 00:12:12 +0000

might as well "curl https://citizendot.github.io/articles/fake-job-interview-git..." and read the output :')

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Wed, 22 Jul 2026 23:45:33 +0000

> I wonder if vscode would still load the script if you click “don’t trust author”

It doesn't. VSCode dev replied here on it here: https://news.ycombinator.com/item?id=46719712.

But, I don't think anybody pays attention to the workspace trust. When ".vscode" has launch commands, it should rather say, "Trusting this workspace runs the following command on your behalf" or something similar.

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Wed, 22 Jul 2026 23:40:31 +0000

i should've highlighted that better, it has more gravitas (https://youtube.com/shorts/LpevGTOP1-A?si=DRJUH4EMujesXiXN)

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Wed, 22 Jul 2026 22:57:14 +0000

yea, i'm just lazy

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Wed, 22 Jul 2026 22:03:13 +0000

fair point

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Wed, 22 Jul 2026 21:58:53 +0000

> they could implement verification using company emails

they added this back in 2023 (https://news.linkedin.com/2023/april/linkedin-s-new-verifica...), but very less people actually bother to verify with their email, so not having it doesn't always mean it's illegitimate.

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Wed, 22 Jul 2026 21:29:36 +0000

sorry, i added it to set the mood for my site :') yk, like moving lamps at the top, hanging dementor at the right side (only visible on desktops).

should i remove it?

New comment by CITIZENDOT in "I Inspected My Take-Home Interview Project. It Was a Whole Operation"

CITIZENDOT — Wed, 22 Jul 2026 21:22:38 +0000

yea, i had fun looking around, this felt like a ctf challenge lol. if they had any vuln on their server, it would've been even better.

I Inspected My Take-Home Interview Project. It Was a Whole Operation

CITIZENDOT — Wed, 22 Jul 2026 20:33:44 +0000

Article URL: https://citizendot.github.io/articles/fake-job-interview-git-hook-malware/

Comments URL: https://news.ycombinator.com/item?id=49013036

Points: 306

# Comments: 82

New comment by CITIZENDOT in "Trust your compiler: Modern C++"

CITIZENDOT — Sun, 05 Jul 2026 14:50:57 +0000

std::accumulate is sequential and guarantes in order traversal. std::reduce is parallel version of it

New comment by CITIZENDOT in "Which NPM package has the largest version number?"

CITIZENDOT — Mon, 15 Sep 2025 11:20:25 +0000

threejs ?

New comment by CITIZENDOT in "An engineer's perspective on hiring"

CITIZENDOT — Sun, 10 Aug 2025 10:14:37 +0000

After getting good at it, there is no "additional" prep time, unlike take homes, where you would need to spend hours for every individual assignment. Is that so hard to understand?

New comment by CITIZENDOT in "23andMe is out of bankruptcy and it still hasn’t substantially changed its ways"

CITIZENDOT — Fri, 18 Jul 2025 06:16:30 +0000

Why not? Elaborate

New comment by CITIZENDOT in "Why content is becoming less and less interesting to consume"

CITIZENDOT — Mon, 16 Jun 2025 20:47:47 +0000

I think we prefer effort put in. If it feels like that post is a direct copy paste of LLM, It doesn't feel worthy to be read. If the poster made some effort to make it their own and give it a personality, it's fine I guess.