News for hackers. Stuff that matters.

A comment on Ask HN: Have you experienced “hiring fraud?”. Parent comment

Re:Ask HN: Have you experienced “hiring fraud?” by KolmogorovComp on Tuesday September 27, 2022 @12:54PM (#32997936)
> If someone has logged in from one IP or region for the first 4 weeks and then suddenly you're seeing new logins from a different city or country, investigate. I don't care if people travel, but we need to firmly understand the security situation.

Couldn’t they just say they use a VPN?

[ Parent | on HN ]
Re:Ask HN: Have you experienced “hiring fraud?” by stevewatson301 on Tuesday September 27, 2022 @01:25PM (#32998341)
A login from a data center IP would stick out like a sore thumb.
[ Parent | on HN ]
Re:Ask HN: Have you experienced “hiring fraud?” by nradov on Tuesday September 27, 2022 @01:42PM (#32998564)
Employees should only even use a company supplied computer with a corporate VPN to access internal company resources. That's just a basic security practice.
[ Parent | on HN ]
Re:Ask HN: Have you experienced “hiring fraud?” by ghaff on Tuesday September 27, 2022 @01:49PM (#32998672)
There are plenty of ways of securing access from BYO devices. There are certainly circumstances where your statement is true but it’s very far from universal.
[ Parent | on HN ]