[Dial Tone]

Check the robots.txt

It's less common now to find individual blocks, most sites just disallow everything to avoid this. But some still do. (Ironically NSA.gov makes this list)

I've seen some really juicy stuff listed in there that was fully viewable if you manually typed in the URL (site redesign betas, internal company email lists, passwords, etc)

[mubix]

Before this thread even got started a guy at work talked about how he used google, tag, and rss searches to find out about possible employees. So it is already being done. "How well do you google" might be a future spot on resumes.

[theboss]

been there done that.. you must be capable to emulate as different personalities and people on email and phone. Be fluent in speaking different accents, vocabularies and styles. If you have a diverse social network with suppliers you can point towards them as potential "sales target" and they will infiltrate their office with a clever sale man. Then it takes a lunch meeting with this sale man boss to scrounge all information. Trust me you cant survive a business without being good at dirty tricks. My honest advice is to take a trip to India, Pakistan or China and you will be surprised to see how "social engineering smart" the IT sector people needs to be in order to make survival. Some of their tricks would be outright unethical in developed countries.

[doomtroll]

Thanks for the great read!!

[xyzzy]

Irongeek, on Jul 5 2007, 02:05 PM, said:

As tehbizz mentions, employers may cyberstalk you before employment. That kind of worries me because I hate the idea of employers messing in peoples personal lives.

I would never hire a security guy without cyberstalking them first. Nor do I know anyone who would. It's just par for the course.

It's very important in the industry to make sure your name comes up clean with google searches.


On cyberstalking your employers, the best thing to do is use linkedin. Then you can google the names of everyone who works at that company.

LinkedIn is really cool. It's somewhat of a lame concept "myspace for IT guys", but everyone in the industry who's worth a damn uses it.

[Zapperlink]

xyzzy, on Sep 18 2007, 02:44 PM, said:

Irongeek, on Jul 5 2007, 02:05 PM, said:

As tehbizz mentions, employers may cyberstalk you before employment. That kind of worries me because I hate the idea of employers messing in peoples personal lives.

I would never hire a security guy without cyberstalking them first. Nor do I know anyone who would. It's just par for the course.

It's very important in the industry to make sure your name comes up clean with google searches.


On cyberstalking your employers, the best thing to do is use linkedin. Then you can google the names of everyone who works at that company.

LinkedIn is really cool. It's somewhat of a lame concept "myspace for IT guys", but everyone in the industry who's worth a damn uses it.

Woohoo im worth a damn!!!

[xyzzy]

I didn't say everyone who uses it is worth a damn :)

[Thespis]

xyzzy, on Sep 18 2007, 03:46 PM, said:

I didn't say everyone who uses it is worth a damn :)

Right, xyzzy uses it. 9-)

[chown]

Irongeek, on Jul 6 2007, 05:05 AM, said:

It's been up one day, and it's number one in Google for "How to cyberstalk":
http://www.google.com/search?hl=en&q=h...G=Google+Search

Number two now. The first being "How to avoid being cyberstalked". lol

This post has been edited by chown: 20 September 2007 - 01:43 AM

[chown]

Edit: delete-me (double post)

This post has been edited by chown: 20 September 2007 - 01:44 AM