4 ms·

We don't need a general identity service though. We need to know whether someone is authorized to work for a US employer, right? How can a DPRK worker have the

by mcny 1y ago

We don't need a general identity service though. We need to know whether someone is authorized to work for a US employer, right? How can a DPRK worker have the necessary authorization? If they use someone else's identity, isn't that something e verify should catch? If these are US citizens/nationals/residents working out of DPRK, who cares?

jfengel 1y ago
They can buy, steal, or hire yours. If it were a general identity service, yours would get tracked. But if it's just a matter of authorization, with no authentication, they'd just use it indefinitely.
Mountain_Skies 1y ago
I suspect some of the fake job postings are schemes to harvest that type of data. If I live in Atlanta and someone uses my identity to get a job in Seattle, how long will it take for me to learn about the company in Seattle that thinks it hired me, especially if they don't use my home address.
- mcny 1y ago
  One of the many reasons I don't like to give references, social security number, date of birth, and so on to anyone except the end client hiring manager. I don't really care if the talent manager software has a required field to put last four of social security number. I simply don't trust random job postings to keep my information secure. Would it help if I could query some IRS service to check what paychecks have been sent to me? Does this have a delay of a quarter year or more? How do these people avoid getting the people they impersonated and or scammed in trouble with the IRS?
klausa 1y ago
You would also exclude everyone that is not a US resident; which might or might not be what you want. I would guess many (most?) of the places with this problem are actually fine with people that aren't living in the US; just not in North Korea.
antonvs 1y ago
> We need to know whether someone is authorized to work for a US employer, right? E-verify is only for US residents, and depends on the employer interacting in person with the prospective employee. Its primary goal is to check that someone is a legal resident, so it has no bearing on hiring remote foreign workers.

by mcny 1y ago

jfengel 1y ago

They can buy, steal, or hire yours. If it were a general identity service, yours would get tracked. But if it's just a matter of authorization, with no authentication, they'd just use it indefinitely.

Mountain_Skies 1y ago

I suspect some of the fake job postings are schemes to harvest that type of data. If I live in Atlanta and someone uses my identity to get a job in Seattle, how long will it take for me to learn about the company in Seattle that thinks it hired me, especially if they don't use my home address.

mcny 1y ago
One of the many reasons I don't like to give references, social security number, date of birth, and so on to anyone except the end client hiring manager. I don't really care if the talent manager software has a required field to put last four of social security number. I simply don't trust random job postings to keep my information secure. Would it help if I could query some IRS service to check what paychecks have been sent to me? Does this have a delay of a quarter year or more? How do these people avoid getting the people they impersonated and or scammed in trouble with the IRS?

klausa 1y ago

You would also exclude everyone that is not a US resident; which might or might not be what you want. I would guess many (most?) of the places with this problem are actually fine with people that aren't living in the US; just not in North Korea.

antonvs 1y ago

> We need to know whether someone is authorized to work for a US employer, right? E-verify is only for US residents, and depends on the employer interacting in person with the prospective employee. Its primary goal is to check that someone is a legal resident, so it has no bearing on hiring remote foreign workers.