ForHacSec

Picture it: you are at a job interview, and the interviewer requests that you log into your Facebook account so they can shoulder surf as you lay bare your profile in its entirety.

Worse, what if they ask you to hand over your Facebook username and password?

You might laugh and say I would never do that, but what if you really, really need a job? Many of us are desperate for work at the moment, so it is no surprise that some feel they must comply to avoid being stricken from the candidates’ list.

In the US, this tactic has been used with people applying for police officer or 911 dispatcher roles, according to an AP article. But the report says that it is happening elsewhere too.

The reason that an increasing number of employers want full access to a Facebook account is perhaps due to more of us hiding information from people we aren’t connected with.

Rob MacLeod was shortlisted for a police job in Baltimore when he was asked for his Facebook password. The Spec reports that:

The question startled MacLeod, now a bylaw enforcement officer in Peel Region. He had a personal policy of not sharing his password, no matter the circumstances. So when the request came, MacLeod offered to log in to his Facebook account and then leave the room so the interviewer could browse his page.

But he says the interviewer remained firm — he wanted the password. After a few minutes, MacLeod gave it to him.

MacLeod says he “felt like I was being pressured into doing it. It felt like if I didn’t do it, he would call the recruiter and say, ‘This guy’s not interested in the job'”, he told The Spec.

It is not surprising that this interview technique is riling a number of individuals and groups, including American Civil Liberties Union (ACLU) attorney Catherine Crump, who states:

It’s an invasion of privacy for private employers to insist on looking at people’s private Facebook pages as a condition of employment or consideration in an application process. People are entitled to their private lives. You’d be appalled if your employer insisted on opening up your postal mail to see if there was anything of interest inside. It’s equally out of bounds for an employer to go on a fishing expedition through a person’s private social media account.

And Orin Kerr, Professor of Law at George Washington University, told AP “It’s akin to requiring someone’s house keys… [It’s] an egregious privacy violation.”

One can understand that companies want to do everything they can to ensure that candidates will be a good fit and won’t jeopardize the company, but asking for the keys to their personal Facebook account seems many, many steps too far.

So, if you are out looking for a job, here are some tips to consider:

1. Sanitise your account before you start applying for any jobs. Look for compromising messages, pictures, messages on walls, and remove or hide anything that you wouldn’t want a prospective employer to see
2. You can quote Facebook’s legal terms, which clearly state that
   

   You will not share your password, let anyone else access your account, or do anything else that might jeopardize the security of your account.

   Explain that you are a law-abiding citizen, and you can in no way break this binding contract with Facebook.

3. Hacker Factor author Neal Krawetz provides some advice, including exposing the company by anonymously posting online that they made this request during the interview. He also suggests that you consider suing them if you do not get the job.
4. Tell them you don’t use Facebook. Review your settings on your How You Connect page under Facebook’s ‘Privacy settings’, you can tweak these, as shown below.This means that an employer won’t find you during a search. Even friends of friends won’t see you listed. The problem here of course is that you are lying, but my view is that human rights to privacy are a little more important than a white lie.