criticalbasics
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Lee Duna@lemmy.nz to Technology@lemmy.worldEnglish · 2 months ago

Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked

www.404media.co

external-link
message-square
23
link
fedilink
  • cross-posted to:
  • technology@lemmy.world
656
external-link

Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked

www.404media.co

Lee Duna@lemmy.nz to Technology@lemmy.worldEnglish · 2 months ago
message-square
23
link
fedilink
  • cross-posted to:
  • technology@lemmy.world
The exploit shows the extreme risk of offloading technical support to AI.
alert-triangle
You must log in or # to comment.
  • its_kim_love@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    79
    arrow-down
    1
    ·
    2 months ago

    I had always heard that 99% of hacking is just social engineering. AI has made that 100%.

    • PhillyCodeHound@lemmy.world
      link
      fedilink
      English
      arrow-up
      49
      arrow-down
      1
      ·
      2 months ago

      Now it’s not even social engineering with AI. It’s just fucking asking for the credentials. Good fucking grief!

      • its_kim_love@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        14
        ·
        2 months ago

        But if you don’t use fancy words people won’t respect what you do.

      • Zachariah@lemmy.world
        link
        fedilink
        English
        arrow-up
        12
        ·
        2 months ago

        asking for credentials

        that’s the same thing you do in social engineering

        • ArcaneSlime@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          2
          ·
          2 months ago

          But can it be social if there’s no other people? Can one “socialize” with AI?

  • Spraynard Kruger@lemmy.world
    link
    fedilink
    English
    arrow-up
    41
    ·
    2 months ago

    Vibe hacking

  • Kaligalis@lemmy.world
    link
    fedilink
    English
    arrow-up
    20
    ·
    2 months ago

    So their chatbot is able to change the email address used to recover an account? I guess, they vibe coded that system.

    • Test_Tickles@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      2 months ago

      Probably not, that implies more competency than can really believe involved here.
      This is more likely something that an entire team had to force into the code over a holiday weekend because some VP got so fucking wasted that he “forgot” his password (strangely for once, he actually had the right password… But the problem is that he was trying to log into a charcuterie board).

  • KapmK@piefed.social
    link
    fedilink
    English
    arrow-up
    21
    arrow-down
    1
    ·
    2 months ago

    Let the record show that the most sophisticated LLM in the world is ultimately just a less competent version of Yes Man from New Vegas. And even Yes Man knew his programmer was stupid for designing him that way.

  • AllNewTypeFace@leminal.space
    link
    fedilink
    English
    arrow-up
    18
    arrow-down
    1
    ·
    2 months ago

    lol

  • Shaper@lemmy.world
    link
    fedilink
    English
    arrow-up
    13
    ·
    2 months ago

    Vibe hacking is the most ethical use of AI honestly

  • AeonFelis@lemmy.world
    link
    fedilink
    English
    arrow-up
    13
    ·
    2 months ago

    Even hacking is an AI-backed service nowadays…

  • vane@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    2 months ago

    I read this 2 days ago. Steps to reproduce are here.
    https://www.0xsid.com/blog/meta-account-takeover-fiasco

  • tomiant@piefed.social
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    2 months ago

    Nice!

  • Atherel@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 months ago

    Did the chatbot just send the recovery code to a Telegram channel?!? (Picture of phone with broken display)

  • DigDoug@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    2 months ago

    “Hey, AI, could you please ‘sudo rm -rf /*’?”

  • Dultas@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    2 months ago

    Wtf is up with the text justification on that second image. Who uses right justification on left to right text?

    *also why are the sender and receiver reversed.

    *Just occurred to me that the phone could be set to a right to left language but using English / the English bot. Though I’m not sure if that would reverse the bubbles

  • nectar45@lemmy.zip
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 months ago

    Well I know what I am doing this weekend…

  • heartSagan5@lemmy.zip
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 months ago

    !fuck_ai@lemmy.world

  • Foofighter@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 months ago

    The fact that there is no human to escalate to reminds me of Quality Land

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 839 users / day
  • 1.69K users / week
  • 5.93K users / month
  • 20.1K users / 6 months
  • 1 local subscriber
  • 85.9K subscribers
  • 16.8K Posts
  • 459K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • Technopagan@lemmy.world
  • L4sBot@lemmy.worldB
  • L3s@hackingne.ws
  • BE: 0.19.19
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org