Hacker News new | past | comments | ask | show | jobs | submit login
North Koreans stole American identities and took remote tech jobs at Fortune 500 (fortune.com)
21 points by nradov 29 days ago | hide | past | favorite | 10 comments



We need better international KYC methods which provide privacy protection to the extend needed for the application. We have NFC passports; the North Koreans don’t have access to those while stealing identities and for instance the iPhone can scan them. It is an extra hurdle, making it very hard to do this at any scale (like 1000s) and then it’s not really worth it anymore.

Note though that this is a problem on sites like upwork too; many ‘western’ people turn out to be Chinese, North Korean, Middle Eastern or Indian. They have AI or stolen ‘white male’ pictures and names; they have excuses why they don’t want to call with you or the call is rather bad quality (AI with bad quality faking filters?). Upwork doesn’t care, but I hear a growing amount of companies falling for it. Mind you; most of these are not a problem in technical sense, however if you think you hired someone with a solid grip of the english language, cultural connections, chances to meet up irl etc, and of course the lying from the outside, makes it a problem.


I’m going to comment about requiring ID for voting because to me this just shows those who are against requiring Identification, look at how your need for tolerance and openness gets weaponized.

If you can pretend you’re an American and get a job from a country that wants to harm our country, surely that says a lot about how easy it is to flub a mail in ballot that gets delivered to your door regardless if you want it and doesn’t require any form of proof of person to submit.

I wish upholding national security wasn’t a political issue but here we are.


One problem with mail in ballot discussions is it varies so much by state but much discussion is around particular things certain states do combined in a single scenario. E.g. "to flub a mail in ballot that gets delivered to your door regardless if you want it and doesn’t require any form of proof of person to submit" makes 3 of these assumptions in the discussion:

- It is one of the ~20% of states that sent an automatic ballot.

- But not one of the states that requires voter registration containing a comparison signature on file to receive a mail in ballot with a matching signature (which is actually none of the above states).

- And also not one of the states to use barcodes to uniquely identify the ballots related to the voter or have flagging policies when multiple ballots for the same barcode arrive (including poll site voting). Alternatively: the fraudulent ballots only ever come in for people that don't vote with an extremely high accuracy.

With the final argument that an ID would be the be all end all to the original concern (faked overseas civilian ballots). That's not to say I'm necessarily against IDs for voting and that we have to wait for things to actually be a problem to do something but it does muddy the waters a bit on what to do. I'd honestly like to see something like SSN/state ID/passport/voter id functions all collapsed into one which would make registration more or less mandatory and not a separate step. A lot of things could be done with that to both tighten up things while simultaneously making things less hassle. Realistically we've got this weird political and administrative history of separating national/voting/state/private identities as a fundamental concept against big central government combined with the previous election year issue polarizing things and it's not any simpler to solve by saying it's simply about upholding national security and nothing else.


It’s the same trade off in all secure systems. Reducing false positives in exchange for false negatives. Implementing new secure standards would have disproportionate effect on preventing legitimate voters from voting, for very small gain in preventing bad actors. Research from some years ago had the ratio being a few orders of magnitude difference. Stopping 300 legitimate votes from being cast to prevent 1 fraudulent vote makes no sense. In any case, these shenanigans can get you a felony and we’ve repeatedly seen very low rates of this kind of fraud.

That is to say, you can swing more votes in more effective and legal ways than flubbing mail in ballots.

On the other hand, being able to land such a job with no substantial checks who you are is pretty crazy. You would think a six figure employee would warrant at least that amount of attention!


How long until this is used as an excuse for strict RTO policies?


Why not conduct an on-site interview for remote workers instead? If a person interviewed over zoom and never physically visited office it makes fraud easier but I don’t see a big difference between bringing in the office 5 days a week and a few times (including interviews and ID check).


It limits your hiring pool to people within driving distance of a physical location.

Remote work has downsides, but one of the big advantages is the ability to hire from a much larger pool. Trading that for identity verification probably isn’t worth it.


Flying people in for an interview wasn't uncommon before the pandemic. In person for a couple special meetings shouldn't be an issue.


Flying in is a significant hassle though.


You're not the target demographic for strict RTO policies. It's clear at this point that most manages and execs above line managers are fulfilled by the sight of workers scurrying, logic, economics and humanity be damned.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: