133: I'm the Real Connor

Episode Summary

Executive Summary: Darknet Diaries tells how Connor Tumbleson discovered criminals had built fake identities using his GitHub, resume, and photos to apply for jobs on Upwork, then tried to recruit someone else to impersonate him in interviews. The story reveals a broader ecosystem of identity theft, fake freelance profiles, and remote-work fraud tied to labor arbitrage and deception.

Main Topics: Identity theft for job applications (Priority: 5/5): Connor receives a fake resume and learns his real online footprint was copied into a fabricated profile used to apply for jobs in his name. The attempted impersonation interview (Priority: 5/5): An interviewer reveals that someone was supposed to pretend to be Connor; Connor joins the call, confronts the fake applicant, and watches them flee when challenged. Andrew as the ethical whistleblower (Priority: 4/5): A junior developer, Andrew, was recruited to impersonate Connor but backed out, then provided screenshots and messages that exposed the scheme. Fabricated freelance and company infrastructure (Priority: 5/5): The investigation uncovers fake Upwork accounts, Slack channels, and a network of websites under PND Design, all suggesting coordinated deception and outsourcing. Why Connor was targeted (Priority: 4/5): Connor’s long-standing GitHub history and credible technical profile made him valuable as a believable identity, harder to fake than a newly generated persona. Broader remote-work and employment fraud (Priority: 4/5): The episode connects the case to overemployment, outsourced labor, fake LinkedIn profiles, and other modern hiring scams that exploit remote work.

Key Arguments: A credible online reputation, especially a long GitHub history, can be stolen and repurposed into a convincing job-seeking identity. The fake hiring operation relied on layers of impersonation: fake resume, fake Upwork profile, fake emails, and possibly fake company identities. Andrew’s refusal suggests some participants were pressured but not all were willing to continue once they understood the ethical breach. Remote and freelance hiring systems make identity verification harder, creating room for people to misrepresent who is doing the work. The operation may have been designed to market a front-facing English-speaking American identity while a hidden team did the actual work behind it. This is part of a larger trend of employment fraud, including overemployment and possibly state-sponsored or organized scams.

Data Points: GitHub commits: 51,000 - Connor had posted code 51,000 times over 12 years, making his profile especially valuable and credible. Years of GitHub activity: 12 years - The long commit history was cited as a key reason his identity looked authentic. Interview turnaround time: About 4 to 4:30 p.m. the same day - Connor received the email around noon and the interview was scheduled only a few hours later. Blog traffic spike: 20,000 hits - Connor’s server fell over after the post hit Hacker News and traffic surged. Fake profiles estimate: 100,000–200,000 - Referenced in Brian Krebs’ reporting on fake LinkedIn profiles. Top overemployment income claim: $1.2 million a year - Mentioned from a subreddit post about someone holding five jobs.

Pivotal Quotes: "If you saw me stealing in the casino, would you turn me in?" — Narrator/Jack Resider: Opening anecdote introducing the theme of loyalty versus corruption and impossible ethics tests. "Sorry, but you have a great GitHub and you look cute." — Fake Connor: The reply Connor received when he emailed the impersonator, capturing the bizarre tone of the scam. "The casino is who I work for, not you." — Connor Tumbleson: Connor’s attempted correction during the interview after realizing his first answer had been the wrong one.

Implications: Hiring is now an identity-verification problem, not just a skills test. Employers should independently verify applicants, while workers should guard public footprints. Remote/freelance platforms are increasingly vulnerable to layered impersonation schemes.