But what I must criticize is running any interview or coding challenge download on your system, that there is no understanding for. It should only be done in a virtual machine that is deleted after the test is over. There is no excuse for this because it takes minutes of passive work to clone the machine.
This is the best summary. An employee who has access to keys that may lead to damage if compromised should never use that device for ANY OTHER THING than what it was destined for. You get employees who download and run things on that computer, you get very unnecessary risks! I would not even do that on a Virtual Machine, I would do it on a completely separate computer.
The only situation I would MAYBE consider using a Virtual Machine was if I was running Qubes on that laptop. Then I would create a new qube and purge it after the interview.
Please don't misunderstand me now because I don't want to provide excuses for them, but another perspective on this. You are definitely correct that it should only be used like this, and that would help a lot. I would even be afraid to download any kind of test from an employer this way and it seems to be very common these days and an effective way to hack others. The one way to deal with this is that employees are only able to work from a corporate issued or chosen device with complete lock-down and MDM, continuous monitoring and things like that. And this sounds great from a security perspective, but then think how employees or potential future employees respond to this. When reports came up of employers monitoring work for work from home employees... some with keystrokes, or even the whole screen, or more on a technical level of monitoring, most people online were revolting and slammed this as bad. Sure it was not done for the right reasonsm probably more for micromanagement than security reasons but I doubt that if the same things were done for the security reasons that people would just simply accept them or embrace them. And I think Binance and companies like that face even greater challenge with this, because it is much easier to control employee devices if they are all working from the same office.
So it is very hard to balance this, because it seems to be a direct trade off. People want security, but they don't want to accept the changes that must be done to have this kind of security. Or maybe many don't want that kind of security at all, and we are in the minority.. it is one thing to truly want something, and it is another to pretend to do so because it is currently a common talking topic. A person that really wants something actively tries to do something to get it or achieve it..
I am curious how many Billionaires there currently are out of Cryptocurrency scams? There are only about three thousand Billionaires in the World. If the number rises up to 30 'Billionaire scammers' then they would make a total of 1 percent, and I believe we are soon going to be a quarter there already!
Interesting thought, depends on what you consider a scam and what threshold you define. I mean some were convicted and it was clear, but many who are scammers were not convinced of anything or only faced some fines. I don't think that if it were to reach 1% it would be that bad. Consider how many normal people in crypto are scammers or were scammers, the situation is pretty sad on this topic. Punishments and fines for both rich and poor scammers are very weak.
