Want a city job? Fork over your usernames, passwords

By Paul McNamara, Network World |  Security, job search, privacy Add a new comment

Readers with neck problems are advised to skip this post because it is sure to have your head shaking.

Officials who run the city of Bozeman, Montana -- perhaps setting a new standard for privacy invasion in the name of public safety -- are insisting that job applicants cough up their usernames and passwords for any social networking sites or online forums in which they participate. Reason: background checks.

From a report on Montana's News Station:

"The requirement is included on a waiver statement applicants must sign, giving the City permission to conduct an investigation into the person's 'background, references, character, past employment, education, credit history, criminal or police records.'

"'Please list any and all, current personal or business websites, web pages or memberships on any Internet-based chat rooms, social clubs or forums, to include, but not limited to: Facebook, Google, Yahoo, YouTube.com, MySpace, etc.,' the City form states. There are then three lines where applicants can list the Web sites, their user names and log-in information and their passwords."

Beyond the pale, you say? Not according to Bozeman city attorney Greg Sullivan, who defended the policy after assuring the television station that "the city takes privacy rights very seriously." (Understanding them is another matter.)

"'So, we have positions ranging from fire and police, which require people of high integrity for those positions, all the way down to the lifeguards and the folks that work in city hall here. So we do those types of investigations to make sure the people that we hire have the highest moral character and are a good fit for the City,' Sullivan said."

The good citizens of Montana apparently do not share Sullivan's point of view. An online poll taken by the television station showed 98% of respondents -- 98%! -- believe the policy to be an invasion of privacy, although there is no indication of how many people expressed a view and we all know that online polls are pretty much useless. Nevertheless, you don't see 98% on one of them every day.

Privacy isn't the only issue. As this blog entry on NewWest.net notes, providing your username and password to another person violates the terms of services of some sites. For example, Facebook's ToS reads: "You will not share your password, let anyone else access your account, or do anything else that might jeopardize the security of your account."

And a comment posted at Boing-Boing raises more legal questions:

"In an interview, they couldn't ask me about my religion, my marital status, my politics, and various other prohibited categories. That's black-letter federal law that every employer knows, especially employers with in-house government-paid lawyers.

"My Facebook page alone has all that information and more, most of it conveniently gathered together in a little box.

"I know the bar for discrimination lawsuits is pretty high, but wouldn't any rejected applicant have a real leg up given that there's no way the city could claim it didn't know it was demanding information it wasn't entitled to know?"

Of course, perhaps there's a simple explanation for what otherwise appears to be an inexplicable case bureaucratic overreaching: Maybe the request for usernames and passwords is simply a pre-employment test? If you're dumb enough to comply, you're not qualified for the job.

    Add a comment

    Post a comment using one of these accounts
    Or join now
    At least 6 characters

    Note: Comment will appear soon after you have activated your account.
    Obscene/spam comments will be removed and accounts suspended.
    The information you submit is subject to our Privacy Policy and Terms of Service.

    ITworld LIVE

    SecurityWhite Papers & Webcasts

    White Paper

    Overcome Top 7 Admin Challenges of Active Directory

    As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

    White Paper

    Insiders Can Ruin Your Company. Take Action.

    Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

    White Paper

    Top Solutions and Tools to Prevent Devastating Malware

    Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.

    White Paper

    Streamline Compliance and Increase ROI

    Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

    White Paper

    X-Ray of the PCI Process-4 Proactive Steps

    This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

    See more White Papers | Webcasts

    Ask a question

    Ask a Question