Totally tangential to the issue discussed, but years ago I was doing interviews of college kids for dev jobs in a unix env. The recent graduates had had some unix in school, but not much. When asked some questions about it, one candidate let slip that he wanted to see what other people were doing so he started looking in their home dirs.

We hired him. He was absolutely fantastic.

Well now I could just say I was running tar and saw "resume" fly across the screen.

Or maybe because she had a problem I was in her directory and saw a suspicious file.

More than likely I was doing recon - I'm curious, so anything is possible.