Monday, 11 March 2013

Daves at it again.....Universal Job Farce

Today I went to sign on!!!

Upon arriving expecting to see "Dave" I was asked to go to another Adviser as Dave wasn't able to see me.
@14:34pm 11/3/13

Now the reason for this was "Dave" was sanctioning a claimant for not using Universal Job Match.
Now I hear you Dave... "its compulsory" Dave loves that term as do many other liars in the Job Center.

What was the reason for the claimant not using this Great Service "I don't know how to use email or computers" was his answer. And very justifiable too.

Now I was sitting right next to the fella and without a doubt he had learning difficulties. Now, not once did
Dave explain the use of the IAD upstairs or the fact that he could get help with the registration process
as the claimant wasn't refusing to register but didn't know how to.

 (another company being setup for this purpose)

Off to the decision maker it goes... poor bloke. I will be reporting Dave's poor communication skills and advice or lack of it to DWP.

All the while this was going on My own adviser a lovely lady who will remain nameless advised me that I have to use the universal Job Match service, after I pointed out that I have registered independently of JCP / DWP with a disposable email address and wish not to upload my CV due to security and privacy issues, I was also not handing over my ID (12 digit code)
I also pointed out the following:

"Universal Jobmatch Toolkit 5.3.13
Reviewing job search activity - claimant not using Universal Jobmatch
89. In cases where a claimant is not using Universal Jobmatch, they will show
the steps they can be reasonably expected to take to actively seek work
that can give them the best prospects of employment, through other
90. In these cases, you will review a claimant’s jobsearch activity using the
evidence they provide as described in paragraph 83

After speaking with her Boss/Supervisor all was dandy and she accepted my findings.

Out of 10 jobs applied for on UJM I was redirected to the likes of:

  • CV-Library
  • Job site 
      amongst others, It seems like DWP are using UJM as a man in the middle attack.
Claimant----------------->UJM--------->Real Job Site.

Request search            SNOOP             Forward Original Search

Why cant I just go to CV_Library direct? I know why, Do you?

Wednesday, 27 February 2013

Social Engineering of Universal Job Match

by: anonymous 27.2.13

Well this paper is on the use of universal job match and its fail against most basic security for thousands of jobseekers forced to use this service although to date 27.2.13 is not Mandatory and no mandate has been set to make this compulsory.

The JCP staff are stating this is compulsory. (Lies) as a test I challenged this.

26.2.13 a guy by the name of Dave (JCP) was my target. After stating that my job search was not up to standard

(on purpose of course) I stated that JCP staff are not allowed to state to a jobseeker how he conducts his/her job search, I was challenged as I'm seen as a scummy dimwit who can't find a job and told we set the rules. Errr! Within the Law Dave?.

[“The UJ Jobmatch toolkit chapter 3, paragraph 50, states: “You cannot issue a Jobseeker’s Direction to either require a claimant to create a profile and CV in Universal Jobmatch or to mandate a claimant to give us access to their account – this is their decision not ours.” Paragraph 52 also states that “We cannot specify to a JSA claimant how they provide us with records of their jobsearch activity and Universal Jobmatch will not change this.”

"Oh ok" States Dave... "well it will be compulsory in March".. Yeah well Dave its fucking Febuary and as of now it's not. (Lies)

On that note he wanted rid of me... come on Dave so soon in our relationship, I felt a bro-mance on the horizon...

I also stated to Dave that the universal job match was plagued with identity fraudsters (more on that later on) spamming and fake job postings as well as cookie privacy issues. Dave said "is that all I can help you with"... Erm Dave you did fuck all to help me. With that I set about proving this is a joke and an identity fraudsters heaven. How? read on....

I set about proving this by posting a fake job posting as an ID fraudster would and see the CVs and personal info flying in.

After a few 503 errors (typical for this mob) I managed to post a job using a company not registered at companies house

with an address plucked out of thin air but with matching postcode (so it passed the checks lol) and well at first it told me the address wasn't a valid uk address, but it I tried another and boom job done. Pictures of the process below.

Note: one of the security questions that could be obtained from social networking sites, online searches or indeed my CV.

 Account Created as an Employer

Now the job details are input

Job Description Details

Job Details Cont.

Live Job Vacancy now online on Universal Job  Match.

Email Confirmation from UJM

I posted my CV to apply and the company received it . I proved my point Dave....

This was a job description purposely detailed to look fake, imagine how legit fraudsters could make the posting look!

There are lots more lies, too many for this paper but have been noted and recorded for next time.

That's it for part one of this debacle. 

Disclaimer: This job posting is/was in no way used for the purpose of harvesting personal information from any third party and is not to be used for any other purpose than for proof of concept that the Universal Job Matching Site is flawed and needs revision.