Warning: I was asked to screen-record a coding test and then sent into a live GitHub login / 2FA flow

**I want to warn people about a hiring assessment flow I just withdrew from.** I was applying for a role with Speechify and was sent to a coding assessment. The assessment required full-screen recording, supposedly to prevent cheating. After that, the process sent me into a live GitHub invite / login flow. That meant I was being pushed toward GitHub authentication and 2FA while the screen recording was active. ***That is completely unacceptable.*** It should be a hard rule that no company ever requires screen recording during any potential login flow. Not for GitHub, not for Google, not for anything. This is not just a “privacy concern.” It normalizes exactly the kind of behavior that phishing relies on: * keep recording * keep clicking * keep logging in * keep entering 2FA * assume it must be safe because it is part of an interview That is backwards. Users should be trained to stop immediately when a recorded workflow moves into authentication. It doesn't matter if this was malicious, incompetent or reckless. Always treat recorded logins as malicious because you can NEVER KNOW when its ok. If you are job hunting and a company asks you to: 1. enable full-screen recording 2. then sign into GitHub or another sensitive account 3. then complete 2FA while recording is still active **stop.** ***No legitimate hiring process should ever put candidates in that position.*** *I have reported it to GitHub because this kind of process creates obvious account-security risk at scale.* https://preview.redd.it/jl1o6pi7fcrg1.png?width=667&format=png&auto=webp&s=198439bd0d7fd632632621b9a9a1295a0df111aa https://preview.redd.it/3cz49xd6fcrg1.png?width=1106&format=png&auto=webp&s=a7d180898ff6faa2248cdfc32d475903e8730c9a https://preview.redd.it/x078u8vhfcrg1.png?width=1112&format=png&auto=webp&s=07c90c6cdcaa1bbf968e7da9968cdbd6b608e7b5