The Register® — Biting the hand that feeds IT

Feeds

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

Hunting imposters

It's fun playing hide-and-seek with my four-year-old niece. She will shout from behind the curtains, "I'm over here!" Unfortunately, most online imposters will not tell you where they are hiding, or even when they are going to start. You have to find them and you must constantly be looking. If you maintain a low profile online - never posting to forums and not maintaining a public image - then you might only need to look around once every few months. However, if you are more widely known, then consider looking more often, such as weekly or even every few days.

The first step in the search process is to perform an ego-search. Start with search engines such as Google, Alta Vista, and Yahoo!. Perform searches for yourself. Look for your name, company, anything that you are well-known for, and anything you recently did publicly that may have been noteworthy. Use a variety of different search engines since different tools return different results (While Google may have the largest index, other search engines find things that Google misses.)

Strictly searching for web pages will only return web pages. However, impersonators may use a variety of forums. Consider tools such as Google Groups to search newsgroups and MARC to scan technical mailing lists.

Technorati is an excellent place for searching blogs - particularly since Google does not index MySpace pages.

There are two main things to look for during your ego-search. First, look for things posted by you. Make sure they are things that you actually posted. Second, look for things attributed to you. Even if you don't initially find an impersonator, you will probably find references to an impersonator.

Rather than doing the searches yourself, companies such as Reputation Defender and Naymz have been established to help manage your online profile. For a fee, these companies will identify potentially damaging online information about you - whether it was created by you or by an imposter (however, I have no direct experience with either of these services).

Hopefully you won't find an impersonator. However, if you do then the next step is to mitigate damage. The mitigation process depends on the type and degree of impersonation.

You have mail?

Configuring a mailer to send email as someone else is beyond trivial. When you configure your Microsoft Outlook mailer (or Gnome Evolution or Firefox Thunderbird or Eudora, etc.), you simply need to enter in a fake email address. While laws such as the US CAN-SPAM act makes email impersonation illegal, who is going to catch you? Fortunately, uni-directional emails can usually be identified as forgeries fairly quickly. Any kind of return correspondence will not reach the imposter.

Unfortunately, free mail and web service, such as Yahoo! Mail and Google's Gmail, make it trivial to create "similar enough" addresses that can fool many people. As a recipient, you should check the sender's email address to make sure it really is from the person you expected. Do not assume that the sender is using a new email address unless they told you about it ahead of time.

Agentless Backup is Not a Myth

Next page: Refuting email

Latest Comments

What about the "upside"?

Has anyone considered the up-side to this? Now you can confidently go into that next interview with your resume packed full of made-up stuff, and it will be easily validated when the employer does a google to check. All you need do is simply create lots of MySpace etc. etc. web pages by people who don't exist, fill them with rubbish about how brilliant you are and all the great things you've done, and you have instant validation. So while someone with a grudge can make you look bad, you can also make yourself look very good. Google is not a source of "trusted" information!

If an employer is serious about checking references etc, they should just try picking up the phone and calling the companies you claim to have worked for!

0
0

So What???

Who cares? People have been overly aggressive in marketing themselves since the beginning of time. If you're good at the job you got with your false credentials, it's obvious that the experience wasn't necessary anyway. It only matters if you can't pull the job off.

0
0

Well, d'uh!

"Recently, a 15-year-old impersonated Australia's ABC Television and sent a DMCA counter-notice to YouTube. YouTube responded by sending infringement notices to users and many video clips were removed. (This begs the question, why couldn't Viacom get this kind of response?)"

Gee... could it be because said 15-yo sent a politely-worded legal notice of infringement while Viacom slapped a lawsuit on YouTube?

Could politeness be more effective than bullying?

Naaahhh!

0
0

More from The Register

 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?
 breaking news
'BadNews is malware' says outfit that found it
Google says code harmless but Lookout says code base is evolving
Panda-peddlers cuffed for chess gambling gambit
More porridge on the menu for Chinese coders after second offence
 breaking news
Yes, maybe we should keep hackers in the clink for YEARS, mulls EU
Watch out black hats, they just might throw away the key
Microsoft borks botnet takedown in Citadel snafu
Stupid Redmond kicked over our honeypots, wail white hats