12 ms·
Tell HN: Triplebyte is, yet again, making user profiles public without consent?
Triplebyte (YC S15) is a tech recruiting company that operates by getting developers to take skill tests, and then using the results to match them with employers. Back in 2020, they got in a lot of hot water by suddenly announcing that user profiles -- which had been collected with assurances that the data wouldn't be shared without consent -- would be made public, unless you opted out within a week[1]. This provoked a lot of backlash, especially since the CEO seemed totally oblivious to the privacy concerns[2]. After a lot of angry comments, he publicly apologized and reversed course[3].
Then in 2021, some users started once again being notified that their profiles were automatically being made public[4]. This time, it was explained away as an "oversight" related to the fact that previously, opt-outs weren't permanent but had a hidden expiration time. Triplebyte once again apologized and promised that it wouldn't happen again, and many people seemed satisfied with the "transparency and candidness" of their response.
Now it's 2022, and yesterday I got a recruiting email from a company that found me via the Triplebyte account I created back in 2019. When I logged in to check, sure enough, my profile was set to "publicly visible" and "open to new opportunities". I was pretty sure I had never made those changes, but just in case I was misremembering, I contacted Triplebyte support to find out what was going on. Today I got this response:
"I was able to do some digging on to why this must have happened, It looks like before we did our last update to the platform you did not have the profile visibility set to indefinitely so the profile was turned on. Since then we have made a privacy chance once you set the profile to off there is not reset time frame it will remain off until you turn it on."
(Unlike the user in [4], I never got any kind of notification that this automatic change was being made.)
So despite their explicit promises, Triplebyte did not actually go back and fix the privacy settings for users who had them silently changed by the previous "dark pattern". This is a heads-up to anyone else who has a Triplebyte account and might be affected by the same issue.
[1]: https://news.ycombinator.com/item?id=23279837
[2]: https://news.ycombinator.com/item?id=23280120
[3]: https://news.ycombinator.com/item?id=23303037
[4]: https://news.ycombinator.com/item?id=27255742
- comboy 4y agoFree publicity. I would love to hear some ideas for fixing this or maybe some inside stories but in my mind this kind of behavior has close to zero negative consequences for the company, even if it gets loud.
- jb1991 4y agoI've come to believe that there is a Murphy's law equivalent for tech recruiting. "If you can be abused as a technical candidate, you will be." It's just going to happen eventually that recruiters, either individual recruiters or recruitment firms/companies as a whole, will abuse your rights to just about everything or treat you with disrespect at some point or another. Developers are just commodities for these guys now.
- gnicholas 4y agoNot just technical candidates — I saw garbage like this when I was a lawyer, also.
- azemetre 4y agoIDK when it recently started but I've been getting direct messages from various recruiters to an email that I only make public on certain open source packages. As a result I remove all instances of email and just mark every recruiter that I never reached out to as spam. It's just so disrespectful, as you said.
- chirau 4y agoWhat is disrespectful? Their job? I think it only becomes disrespectful when they keep nagging after you have told them off or something. Otherwise, they are just doing their job, seeking out good candidates. It's not like all of them are conniving to swamp you, they act individually and what you eventually hate is the sum of those individual parts.
- Hellion 4y agoI went through their process, passed in their top cohort (or so they told me, probably it was to massage my ego). And then they dropped that public profile bomb the first time around. I’d say I cost them a lot of money when I deleted my account, but they actually cost it themselves. They could have asked me if I wanted a fancy jacket, because that ended up immediately getting recycled. The book was dece tho Anyways, I ended up getting a job that I love the old fashioned way - through a friend. Great concept, shit company. Edit: Triplebyte employees reading this: you massively betrayed my trust. Had you asked me, and let me review on my own time, I might have even been proud to have a verified skill set badge page I could link to. Instead, I will probably look directly for your competitors on my next job search. You had a great idea, too bad that you seem to be irresponsible.
- jonny_eh 4y ago> Great concept I'm not sure it is.
- Hellion 4y agoEliminating the same boring foo bar baz coding test is a great concept. Being able to skip an hour or two out of a full interview across many companies is a great concept. Having a 3rd party verified that allows you to be quickly matched with potential employers is a great concept. Execution may be difficult, or impossible even. But that’s not an issue, when said company insists on shooting itself in the foot constantly.
- akagusu 4y ago> old fashioned way - through a friend I wish more companies use this method.
- lesuorac 4y agoI think Nepotism generally causes legal issues for companies. https://en.wikipedia.org/wiki/Nepotism https://en.wikipedia.org/wiki/Nepotism
- TechBro8615 4y agoGood, hopefully they’ll find the image I left for them in my avatar the last time they did this.
- KerryJones 4y agoTriplebyte has given me my favorite interview to date. I love the concept, I had some interesting chats with Uber and Apple, but didn't end up going anywhere (they wanted me for positions I wasn't interested in -- currently at a different FAANG). The repeated fails on execution is pretty disheartening.
- ravenstine 4y agoI totally forgot about Triplebyte. Are they even relevant still? I remember back when it seemed like their ads were appearing everywhere and was a bit worried they were going to be the new way of hiring engineering talent. Seems like there's been nothing but crickets chirping for the last few years. Why? My experience with them was pretty bad. I took their assessment for web development, I think I even did an assignment, and got put on a video call with someone from Triplebyte. He never cracked a smile. Suddenly I got asked a bunch of CS questions that really were not very relevant to web development, some of which were entirely inappropriate like sorting a binary search tree. I even told the guy that I thought I was getting those questions wrong and he just scowled and said "well you just don't know when you're going to use this stuff." "My point exactly," I thought. Ultimately I got rejected. The whole idea that you can boil down a candidate to some coding challenges and a video quiz is bad. I do like the idea of streamlining the hiring process for developers, but there's more to it than knowing a bunch of stuff, because that can be gamed. And quizzing me on irrelevant material was a bad move. A firm like Triplebyte won't be as good at interviewing a candidate as the employer itself, and may even keep perfectly qualified candidates out of view from all employers affiliated with them.
- KerryJones 4y agoWow, that sounds pretty bad. When I went through they did 4 different interviews (a little bit fuzzy; many years ago) but it did: 1) Create an incremental game (start simple, see how far you can get) 2) Live debugging (can run tests, they fail, you need to figure out why and fix it) 3) Flash rounds (Do you know what Big O is? Can you explain linked lists?) 4) ... I forget I thought it was one of the widest range of actual skills and their final assessment I agreed with. Stayed away from algorithms-y questions (which I hate)
- gcampos 4y agoMy impression is that they are still around, but they failed to deliver the "recruiting revolution" and I think the reasons are: - The screening had a lot of false negatives. "I got rejected by Triplebyte, but got a FAANG offer" is quite common. - Most companies used Triplebyte not as an interview replacement, but as an additional screening process, which means that as a candidate, you don't have any real incentive to use them. The only real use case I heard recently about Triplebyte is to send candidate who normally you wouldn't even screen, so if they pass Triplebyte process, you know that you should consider the candidate, but if they fail is fine because you would have passed them anyways
- throwaway889900 4y agoJust delete your account this time.
- zug_zug 4y agoThat's what I did last time :D
- z9znz 4y agoWhether they are malicious or not, I cannot say. But anecdotally, are they a time-waster? Absolutely. I took their generalist test and scored perfect. It was actually not so hard, but it tested some language things (a couple/few languages), some Unix things, SQL, etc. It was right up my alley. After completing the 30? min test, I got an email saying they were enthusiastic about me and would like to continue the process. I think the process was to become an interviewer; I forget now. Time passed... weeks, and then months. I emailed them and got nothing back. Then I checked Glassdoor (YMMV). There were a lot of negative stories about internal politics, gender issues, leadership problems, "insane" bad manager stories, etc. I don't know how Glassdoor works, but perhaps it was all lies; or perhaps it was very true; perhaps it has been erased (pay to play). Nonetheless, I parked them in the corner of my mind behind Toptal.
- pcthrowaway 4y ago> Then I checked Glassdoor (YMMV). There were a lot of negative stories about internal politics, gender issues, leadership problems, "insane" bad manager stories, etc. I don't know how Glassdoor works, but perhaps it was all lies; or perhaps it was very true; perhaps it has been erased (pay to play). Are we looking at the same Triplebyte? Their reviews on Glassdoor are pretty good edit: There are some nasty ones further back, the latest being Feb 2020
- scarmig 4y agoGlassdoor isn't really trustworthy: companies can pay it to nuke bad reviews.
- z9znz 4y agoAnother thing we can do, especially on HN (but also for those of you who may be in Cali where you actually meet a lot of humans in this space) is to ask, "Have I ever met a happy Toptal consultant?" Has anyone here on HN?
- pcthrowaway 4y agoI'm not really sure where Toptal fits into this. Triplebyte is not a consultant agency
- greatjack613 4y agoTriplebyte had a great model in the beginning which was focused on getting people who had skills without formal certifications jobs. That did not make enough money so the founders pivoted like 5 times to try other things and each time they made Triplebyte more and more anti candidate. Keep on going Ammon, we all know where these companies end.
- econnors 4y agoFWIW, my profile is still set to non-visible, so it's not a universal change.
- teraflop 4y agoGood to know. Giving them the benefit of the doubt, I can believe that at some point they fixed it so that setting your profile to invisible took effect permanently, but they never went back and retroactively applied that change to people who had previously opted out (or never opted in). Or if they did, they must have somehow skipped my account. I responded to them with a link to this thread in case they wanted to publicly comment or correct anything, but I'm not holding my breath.
- rachofsunshine 4y agoWe intended to make that change retroactive. I'm looking into it with our engineering team as we speak. EDIT: I can confirm that that fix was in fact retroactive. We'll have a response to OP momentarily. (EDIT2: Ammon, our CEO, has a top-level reply to OP.)
- swayvil 4y agoTickling the fear of the day is a great way to get media attention. The obvious way is wagging your fist at all those bad guys doing bad stuff. But doing bad stuff is actually a pretty good way too. If you can manage the backlash. Works great. I mean, it worked here. Right? The last time I thought about triplebyte was the last time they did something bad. Kids do it all the time to their parents. Very hard to ignore. Something to think about.
- quickthrower2 4y agoGood point. A lot of candidates wont care. Like all the crazy stuff Uber did probably didn’t bother most drivers or riders. And each bad publicity is still publicity.
- muh_gradle 4y agoOk, I"m deleting my profile. Thank you for the heads up. Well done Ammon Bartram. Great company practices.
- throwaway81523 4y agoOh man, not again. My initial experience with triplebyte was quite good, when they did a high touch testing and interview process. It worked pretty well (at least for me) but I guess it was too expensive for them to keep doing. Later there was a glitch where they hosed me rather badly, but I could treat that as a one-off. What is it with this repeatedly opening up profiles though? I thought the saying was that it was ok to make mistakes, but.... make new ones.
- MrWiffles 4y agoThanks op for the news. Can anyone recommend alternatives for the future? It's clear they're untrustworthy so I'm hesitant to even consider them again even though I passed years ago (2019 I think).
- clpm4j 4y agoI've come to a personal conclusion that hiring is an unsolvable "problem". When the problem and the product essentially distill to people - many individuals - it unravels. People are unique. There is never a broad, one-size-fits-all solution. Companies are just collections of people. There are way too many variables to ever reach the level of consistency that a product/solution needs to provide in order to retain customers and grow into a large, sustainable business.
- rachofsunshine 4y agoHi everyone - I'm the head of product here at Triplebyte. We did not make any intentional change to how profile visibility functions and (to the best of my knowledge) the issue referred to in OP's support response (and mentioned in the second half of OP's post) was fixed last year. (See my comment at the top of OP's link [4] for more from then.) We'll have a more complete answer shortly. EDIT: This does not appear to be a widespread issue. Continuing to investigate. EDIT2: Full response from Ammon, our CEO, at https://news.ycombinator.com/item?id=31771836 https://news.ycombinator.com/item?id=31771836
- Hellion 4y agoEdit: it looks like I was wrong about some things. The team at Triplebyte has also answered my questions. In the interest of fairness, if you read this post, I encourage you to read their responses as well. ————- At this point, if you (Triplebyte) haven’t set private the profiles of everyone who didn’t explicitly consent, then you are irredeemable. You’ve had, what, two years to work this out? I would love to understand what the goals and numbers here are, and what the revenue implications of public profiles are? It seems to me that you’re trying to build a social network of some sort with verified-skill capability. I went to your site, and your about me page, to see what your business model was. What you stated, the mission and the copy, does not align with a public profile and social network style feature. If you truly are trying to make hiring better, how does public profiles achieve that? If you truly are trying to make hiring better, people on all sides of process should be benefiting. And there should be nothing to be afraid of in terms of mission. Your /manifesto document falls short. What, exactly, is your business model? You should have no shame in it. Unless you think it’s shameful, in which case, please stop. Like your manifesto claims, transparency is good!
- ammon 4y agoAs of 2 years ago, every profile on Triplebyte is not visible to recruiters unless an engineer explicitly makes it visible.
- rachofsunshine 4y agoSo, first off: our support response was incorrect. OP had in fact enabled visibility manually some time ago. But to reply to your questions: ------ > I would love to understand what the goals and numbers here are Well, zero, since nothing was broken in this case. The issue last year had affected a couple hundred people (out of a total pool in the hundreds of thousands) before it was caught and reverted; the worst-affected person was erroneously visible (to Triplebyte companies only) for about a week and a half (and was hidden again within hours of us knowing about it). > It seems to me that you’re trying to build a social network of some sort with verified-skill capability. More or less. Not a social network, necessarily, but a platform of engineers with skill data from our assessments. In brief, our goal is to make the job search process lower-grind, higher-signal, and more fair for candidates by exposing more information about companies, targeting messages more intelligently, and relying on skills over resumes. And on the company side, our goal is to provide them better and more reliable information than they can get when trying to hire elsewhere. Everyone hates the status quo of a thousand applicants or a thousand outbound messages per conversation started, it's just a hard status quo to disrupt as an individual candidate or recruiter. > If you truly are trying to make hiring better, how does public profiles achieve that? To be clear, we do *not* have public profiles in the sense of "visible to the internet as a whole". We have profiles that are or aren't visible to our (company-side) subscribers, according to each engineers' settings; a "visible" profile is visible to those subscribers and an invisible one is not. The only way a profile can currently be exposed to the world at large is if an engineer on Triplebyte explicitly enables a public link and posts it elsewhere. (Even then, I don't think they're indexable? I'm not 100% sure about that bit; this is an old feature I haven't touched during my tenure.) > What, exactly, is your business model? "Be a place where the best engineers want to look for jobs, because it's a better and fairer experience, and charge companies for access to those job seekers and for the tools we give them to surface the best matches for the role they're hiring for." In a literal financial sense, we charge a subscription fee to employers for access to our candidate database ("visible" profiles in the previous section's sense only).
- rykuno 4y agoI wish this company succeeded with its mission, but it turned into a variant of Hackerrank I feel. I hate leetcode/hackerrank type interviews. On the hiring side of things where the company I work for screens candidates this way; it sucks. I would have loved to see a test of more practical programming experience. Candidates spend their time on stupid coding questions all day instead of actually coding something useful or that they can learn from. I have a relative doing exactly this. No idea how to build a simple RESTful API, yet spends all his time on Hackerrank posting on linkedIn how he's in the top 'X' percent. When they get hired and put on a "real world" project they are absolutely lost :(. I also tried Triplebyte after seeing ads on Reddit. Passed a few tests and nothing really ever came of it other than an email.
- itsdrewmiller 4y agoTo me a big part of the appeal to Triplebyte is that their variant is one that does reflect real world programming. Their general coding quiz shows you written code and asks you to find the bug or fill in the blank - things very similar to day to day activities when working on an existing application. AFAIK there isn't anything about tricky algorithms, either.
- VirusNewbie 4y agoI really like the idea of Triplebyte but it did not seem to be worth the effort. If it could get you past multiple tech screens at big companies it would be great. I don't really care that it saves me an hour of doing an easy coding challenge at some no name company...
- TheMagicHorsey 4y agoWhat are some other alternatives to Triplebyte for employers? I mean skills-based filtration systems. I often post on different forums and ask people if they want jobs, but no matter how esoteric and nuanced the forum I post to, I always seem to get a couple dozen candidates that have very rudimentary skills and end up wasting my time on zoom interviews. I'd like to be able to access a pool of candidates that I know have a certain level of expertise ... even if they have no formal training or poor academic scores.
- ammon 4y agoI’m the CEO of Triplebyte. I just looked into this, and we are not automatically making anyone's profile public without their consent. OP, it looks like you had set your profile to be visible some time ago (I can provide details via email but won’t here for privacy purposes), and just hadn’t gotten a message until now. The support response you received was incorrect; you weren’t affected by any recent changes to the site. Since there wasn’t anything broken on our end, there shouldn’t be anyone else impacted by this. But as part of making sure that OP wasn’t visible by mistake, I had my team double-checked to make sure our previous fix from last year was properly retroactive. It was. More generally, I don't think that tricking anyone is a viable way for us to run a business. We’re trying to create a marketplace that can open opportunities for engineers who wouldn’t otherwise have them, and we need the trust of engineers in order to do that.
- mettamage 4y ago> We’re trying to create a marketplace that can open opportunities for engineers who wouldn’t otherwise have them Provided they're in the US. My experience as a European has been: more or less everything I apply to ignores my application. I haven't checked recently, is it changing? I'm not implying you're wrong since you used the word trying to create. Moreover, you didn't specifically specify which group of engineers you're trying to create opportunities for. I don't even want to go in a right or wrong type of frame, because it doesn't matter, but my lack of eloquence might give that impression. What I am implying is that the statement is a bit broad. On a more emotional (perhaps even non-rational) note: I feel spoken to yet left out, for years now.
- ammon 4y agoMost employers on Triplebyte (90%) are hiring in the US currently. However, we're working on something that us going to change that (announcement coming soon).
- pcthrowaway 4y agoAs a Canadian, it seemed like at least 30% of remote employers were open to hiring from Canada (although it was often marked incorrectly in your system). At the very least, a couple of U.S. companies with remote positions that claimed to be U.S. only (or "work authorization required?"), reached out to me.
- egberts1 4y agoso glad that i used a pseudonym on Triplebyte. I knew better.
- aasasd 4y agoI mean, having the hidden expiration time for the ‘non-public’ status should've been more than enough to illustrate the total lack of respect for the users.
- raxxorraxor 4y agoI am pretty sure Google leeched my contacts from my phone in a similar way once. There need to be hard penalties here since the company cannot undo the damage. It might just have been a bug on their end, but it is fairly possible implement data sharing in a way that errs on caution. Especially for a company that allegedly values private information.