Michael Corey's Database Virtualization/Database Administration as a Service® Blog

Current Articles | RSS Feed RSS Feed

Employers Use Social Networks In Hiring Process

Posted on Sun, Sep 14, 2008 @ 09:22 PM
  
  
  
  

I just saw this article posted on the computworlds site..

 

One in five employers uses social networks in hiring process

It was written by heater Haverstein. Here is an excert from the article... 

Of the hiring managers who use social networks, one-third said they found information on such sites that caused them to toss the candidate out of consideration for a job, the survey said.

The study found that the number of hiring managers that are turning to social networks like MySpace and Facebook to delve into candidates' online behavior is increasing quickly: Some 22% of employers said they already peruse social networks to screen candidates, while an additional 9% said they are planning to do so. Only 11% of managers used the technology in 2006.

The top areas of concern found on social networking sites include:

  • Information about alcohol or drug use (41% of managers said this was a top concern)
  • Inappropriate photos or information posted on a candidate's page (40%)
  • Poor communication skills (29%)
  • Bad-mouthing of former employers or fellow employees (28%)
  • Inaccurate qualifications (27%)
  • Unprofessional screen names (22%)
  • Notes showing links to criminal behavior (21%)
  • Confidential information about past employers (19%)


To read the entire article.....

One in five employers uses social networks in hiring process

When you think about this, it makes complete sense. before I meet with a company, I check out the website and search the Internet to see what I can learn. Why do we not think that potential employers wont do the same. 

 

Posted by Michael Corey

www.ntirety.com

 

0 Comments Click here to read/write comments

SpeedDate Hijacks Facebook Users Accounts

Posted on Sat, Sep 13, 2008 @ 03:55 PM
  
  
  
  

I just saw this article on Techcrunch.com I want to share with everyone. The Article is

SpeedDate, the online dating site that throws singles in a series of rapid dating sessions, has hijacked over 500,000 users from at least three Facebook applications. Users are logging on to Facebook to find that the applications they’ve had installed for months have been replaced with SpeedDate without being asked to opt-in.

As far as we can tell, all three modified applications were developed by HappyAppy, so it’s likely that SpeedDate either acquired the company with the $6 million it raised last month or the two companies share the same development team. Users are being sent brief messages notifying them that their applications have been renamed and “improved”, but only after the switch has been made without their consent.

The three affected applications are:

  • Have You Ever??? (353,217 monthly active users)
  • Would You Rather (158,291)
  • Romantic Gifts (28,164)

In effect each of these applications has acted as a Trojan Horse, getting install permissions under false pretenses only to pull the bait-and-switch later on. Dozens of users have exhibited outrage over the swap in the review section of each application. It’s likely that such dishonest tactics are against Facebook’s Terms of Service, but after at least ten days of complaints Facebook has yet to act.

Here is a picture of the founders of speeddate....


On August 9, 2008, I posted an article titled Face Book and Hi5 Security Advice.

What is clear there are always companies and people trying to exploit information. I am disapointed in facebook response to what Speeddate has done. Facebook should be a better custodian of peoples information. Having said that there is no excuse for what Speeddate did.

 

 

How many people out there use the same password for many of their accounts ? What if this trojan application that was planted, was stealing credit card information. This just highlights how important it is to protect yourself on the Internet. 

Posted by Michael Corey

www.ntirety.com

 

0 Comments Click here to read/write comments

Face Book and Hi5 Security Advice

Posted on Sat, Aug 09, 2008 @ 02:35 PM
  
  
  
  

I saw an article recently about Facebook that caught my attention. It was on Tech Crunch and written by Nik Cubrilovic.  Given how many people use applications like www.facebook.com or www.hi5.com . For those of you who never heard of HI5 it’s a lot like Facebook only with a very strong Non-US presence. In fact I think it’s a lot easier to use. If I were face book, I think I would buy Hi5, or HI5 should buy face book.

If you don’t realize it yet, there is a very high likely hood your kids if they are teenagers or above are using faceboo. For the non-USA readers insert HI5 for facebook.

I recently created a facebook account and was able to connect very quickly with a number of old friends of mine from High School. I graduated from High School in 1979.  Yes even my State Senator has a Facebook account. So when I saw article about security concerns on face book, my ears perked up. Yes this advice applies to all such sites, Even if its not useful for you this might be very useful to talk to your kids about if they are teenagers. 

The article is titled “Facebook Security Advice: Never Ever Enter Your Passwords On Another Site, Unless We Ask You To by Nik Cubrilovic.

After the recent outbreak of a worm that hacked user Facebook accounts and disseminated through users contacts, Facebook responded with a post with advice to users on general tips about web security. Facebook head of security Max Kelly, a former FBI computer forensics examiner, wrote a blog post with advice to Facebook users including:

    As a Facebook user you can help us protect you by doing the following things:

    * Report any spam message or posting you see. The more reports we get, the easier it is for us to respond decisively.


    * Never share your Facebook password with anyone. Never. No Facebook employee will ever ask for it, and no one else should know it. If you are ever prompted to log in to Facebook, make sure it’s from a legitimate Facebook web address. If something looks or feels off, go directly to www.facebook.com to log in.


Never entering your credentials on a non-Facebook site is very good advice, which most users should know by now and should adhere to. The problem is that Facebook do not seem to support these same principals when it comes to a users credentials from other sites, such as a users Google username and password, which Facebook requests when a user imports their contacts. The screenshot below is from Facebook, its the feature where a user can login to their Google, Hotmail or Yahoo account, from within the Facebook site, to retrieve their contacts.


This very feature directly contravenes what Facebook has stated in its own good security advice. While the message below the box does state that they do not store passwords, the point is more that the practice of users directly entering credentials from another site is a very poor design decision and generally very poor practice. Each one of the sites that Facebook integrates with supports oauth or a similar authentication protocol that does not require the user to enter both their username and password. Better yet, most of those services also provide an API where the user can grant permission to Facebook to only access their address book, and not their whole email and certainly not every other service tied into it.

The Facebook security team have stated what is good practice on their blog, perhaps its time for them to direct their energies internally and evangelize support for oAuth and other open data formats as both a more secure and conveniant mechanism for data exchange.

To go to to the original article click here…

TechCrunch Article

 

Posted by Michael Corey

www.ntirety.com

 

1 Comments Click here to read/write comments

All Posts