Slashdot Mirror
200 Million Chinese Resumes Leak In Huge Database Breach (thenextweb.com)
According to a report from HackenProof, a database containing resumes of over 200 million job seekers in China was exposed last month. "The leaked info included not just the name and working experience of people, but also their mobile phone number, email, marriage status, children, politics, height, weight, driver license, and literacy level as well," reports The Next Web. From the report: Bob Diachenko, Director of Cyber Risk Research at Hacken.io and bug bounty platform HackenProof, found an unprotected instance of MongoDB containing these resumes on December 28. Diachenko found the resumes in the open database search engines Shodan and BinaryEdge. The 854GB database didn't have any password protection and was open to anyone to read.
Diachenko wasn't able to identify who generated the database or who owned it, but a now-defunct GitHub code repository featured a code that used an identical data structure to the leaked database. The database contained scraped data from multiple Chinese classified websites like bj.58.com. However, in a blog post, the website's spokesperson denied the leak. Interestingly, the database was taken down as soon as Diachenko posted about the database on Twitter. Sadly, the MongoDB log showed at least a dozen IP addresses that read the instance before it went off the grid.
Diachenko wasn't able to identify who generated the database or who owned it, but a now-defunct GitHub code repository featured a code that used an identical data structure to the leaked database. The database contained scraped data from multiple Chinese classified websites like bj.58.com. However, in a blog post, the website's spokesperson denied the leak. Interestingly, the database was taken down as soon as Diachenko posted about the database on Twitter. Sadly, the MongoDB log showed at least a dozen IP addresses that read the instance before it went off the grid.
Absolutely not here to comment on what you think of as the curious nature of ShanghaiBill's postings (or not), but as an American who's now in Germany, it was (and constantly is) quite a bit of a surprise as to exactly what is common & expected (nevermind allowed) when it comes to things like resume's, job interviews, and even housing/apartments... some of this crap is (or was) even required by law.
Pictures are 100% common & expected on resume's here & not some informal cell-phone photo - that would probably disqualify you from most skilled jobs. You need a decent, polished, professional type shot on there. I don't think age is *required* anymore, but your birthdate should be not to far below your full name on your resume (including maiden name, if applicable). Even if you wanted to leave it off, they will know right away based on the diplomas, cirtifications & other supporting material you need to attach. Martial Status & number of kids goes next (seriously), though it is optional. If you are just getting your carrier started & without a significant job history, you might also list what your parents did for a living. During the interview, I doubt there is much that would be considered an "illegal" question.
On the housing side, be prepared to be subjected to the whims of whoever is renting (or selling) to you. Ads that *specify* a specific age bracket are not at all uncommon. I don't think I see "no kids", but I definitely see things that effectively say "unsuitable for children". If you are a 20 or 30-something couple (with or without children), I wouldn't even bother inquiring about those places as well. You also meet & interview with the owner of the property in most cases (this is after the property manager or real-estate agent already filters you out).
America's anti-discrimination laws are a good thing, unfortunately they have not yet been adopted everywhere.