Thread Options
|
#1428083 - 08/12/10 03:11 PM
Re: Craigslist
Christy Williams
|
Diamond Poster
Joined: Jul 2007
Posts: 1,022
Pac NW
|
Yes you can post jo openings on Craigslist. I've been doing it for years.
willicabankerlad's concerns are important, but it's no different than posting a help wanted ad in the paper, on Monster, or anywhere else.
|
Return to Top
|
|
|
|
#1428087 - 08/12/10 03:14 PM
Re: Craigslist
Christy Williams
|
Gold Star
Joined: Nov 2004
Posts: 349
Cheeseland
|
Ditto; News advertising can be very expensive however there are numerous ways you can reduce your cost. Why a free online site? What are you trying to achieve?
|
Return to Top
|
|
|
|
#1428373 - 08/12/10 07:35 PM
Re: Craigslist
Midwest Banker
|
Diamond Poster
Joined: Jul 2007
Posts: 1,022
Pac NW
|
craigslist is not free for job postings. That's one of the ways they generate revenue.
|
Return to Top
|
|
|
|
#1428383 - 08/12/10 07:50 PM
Re: Craigslist
Midwest Banker
|
New Poster
Joined: May 2009
Posts: 23
Southern Girl at Heart
|
Here is a snipit of information in the article from SNOsoft and the web address to read the entire article: http://snosoft.blogspot.com/2010/04/hacking-your-bank.htmlIn addition to FaceBook, we focused on websites like Monster, Dice, Hot Jobs, LinkedIn, etc. We identified a few interesting IT related job openings that disclosed interesting and useful technical information about the bank. That information included but was not limited to what Intrusion Detection technologies had been deployed, what their primary Operating Systems were for Desktops and Servers, and that they were a Cisco shop. Naturally, we thought that it was also a good idea to apply for the job to see what else we could learn. To do that, we created a fake resume that was designed to be the “perfect fit” for a “Sr. IT Security Position” (one of the opportunities available). Within one day of submission of our fake resume, we had a telephone screening call scheduled. We started the screening call with the standard meet and greet, and an explanation of why we were interested in the opportunity. Once we felt that the conversation was flowing smoothly, we began to dig in a bit and start asking various technology questions. In doing so, we learned what Anti-Virus technologies were in use and we also learned what the policies were for controlling outbound network traffic. That’s all that we needed… Upon completion of our screening call, we had sufficient information to attempt stealth penetration with a high probability of success.
|
Return to Top
|
|
|
|
#1428535 - 08/12/10 10:07 PM
Re: Craigslist
Christy Williams
|
Diamond Poster
Joined: Jul 2007
Posts: 1,022
Pac NW
|
Here is a snipit of information in the article from SNOsoft and the web address to read the entire article: http://snosoft.blogspot.com/2010/04/hacking-your-bank.htmlIn addition to FaceBook, we focused on websites like Monster, Dice, Hot Jobs, LinkedIn, etc. We identified a few interesting IT related job openings that disclosed interesting and useful technical information about the bank. That information included but was not limited to what Intrusion Detection technologies had been deployed, what their primary Operating Systems were for Desktops and Servers, and that they were a Cisco shop. Naturally, we thought that it was also a good idea to apply for the job to see what else we could learn. To do that, we created a fake resume that was designed to be the “perfect fit” for a “Sr. IT Security Position” (one of the opportunities available). Within one day of submission of our fake resume, we had a telephone screening call scheduled. We started the screening call with the standard meet and greet, and an explanation of why we were interested in the opportunity. Once we felt that the conversation was flowing smoothly, we began to dig in a bit and start asking various technology questions. In doing so, we learned what Anti-Virus technologies were in use and we also learned what the policies were for controlling outbound network traffic. That’s all that we needed… Upon completion of our screening call, we had sufficient information to attempt stealth penetration with a high probability of success. I've read that article. It was a great look at intrusion processes.
|
Return to Top
|
|
|
|
#1428670 - 08/13/10 01:56 PM
Re: Craigslist
fmissle
|
Platinum Poster
Joined: Feb 2010
Posts: 960
Illinois
|
I don't understand the fear of an online ad. The risks mentioned above are due to the content of the ad, not where it is placed. If you're looking for a part time teller, do you really think they're going to see your ad in a newspaper? Does anyone read newspapers anymore, except online?
_________________________
I thought getting old would take longer.
|
Return to Top
|
|
|
|
|
|