Still, I appreciate the write-up. It is a great example of a clever attack, and I'm going to watch out more for such things having read this post.
Just like nigerian prince scams are always full of typos and grammar issues. Because only those not recognizing that as obvious scams click the link and thereby this is a filter to increase signal to noise for the scammers.
What this is a strong filter for people likely to have crypto wallets on their dev machines.
/jk, who would fall for that lol? /jk/jk Source: I work in blockchain, you can easily dox me in a single google search
Smarts have little to do with this. You can be smart and still not see that it's BS. Or you are smart, see it's BS and still think it's a good way to make money (by essentially ripping off those who don't see that it's BS). Or you just don't care and it's just a job. Fine too, everybody draws a line for themselves with what's acceptable. Some don't work in weapons, some not in nuclear, some not in crypto.
> What this is a strong filter for people likely to have crypto wallets on their dev machines.
A dev that keeps a live wallet with anything but toy money on their dev machine may have other problems. Bringing me back to my original point from above that this is a filter.
That said, this attack could be retargeted to other kinds of engineers just by changing the linkedin and website text. I will be more paranoid in the future just knowing about it.
Agreed. That would have forced me to abort the proceedings immediately.
Great point, thanks for sharing!
I've noticed that I'm commenting a lot lately on the naivety of the average HN poster/reader.