awful.systems
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
VetOfTheSeas@discuss.online to Not The Onion@lemmy.worldEnglish · 3 months ago

Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked

www.404media.co

external-link
message-square
26
link
fedilink
  • cross-posted to:
  • DeMeta@lemmy.world
  • cybersecurity@infosec.pub
  • cybersecurity@infosec.pub
  • technology@lemmy.world
308
external-link

Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked

www.404media.co

VetOfTheSeas@discuss.online to Not The Onion@lemmy.worldEnglish · 3 months ago
message-square
26
link
fedilink
  • cross-posted to:
  • DeMeta@lemmy.world
  • cybersecurity@infosec.pub
  • cybersecurity@infosec.pub
  • technology@lemmy.world
The exploit shows the extreme risk of offloading technical support to AI.
alert-triangle
You must log in or # to comment.
  • Fredselfish@lemmy.world
    link
    fedilink
    English
    arrow-up
    41
    ·
    3 months ago

    They should ask for Zuck profile login credentials.

  • Hawanja@lemmy.world
    link
    fedilink
    English
    arrow-up
    28
    ·
    edit-2
    3 months ago

    Holy crap this is hilarious. Quick somebody steal Trump’s account then message Iran that we surrender.

    • Mr_WorldlyWiseman@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      7
      ·
      edit-2
      3 months ago

      Ok, done. What next?

      https://edition.cnn.com/2026/06/01/politics/hackers-space-force-official-instagram-iranian-propaganda

  • gravitas_deficiency@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    23
    ·
    3 months ago

    Considering you can just… you know, do that in any of the LLM prompts in Meta apps… I really don’t think it’s the work of a “hacker”. That’s such an obnoxiously overused term.

    • Azura The Spellkissed@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      55
      ·
      3 months ago

      I have to disagree. Hacking is a broad term that isn’t exclusive to finding buffer overflows in ghidra.

      • dylanmorgan@slrpnk.net
        link
        fedilink
        English
        arrow-up
        21
        ·
        3 months ago

        Social engineering is hacking. This is something between SE and prompt engineering.

        • Kwdg@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          7
          ·
          3 months ago

          I know hacking more as using a system in a way that is not intended, which this definitly is

      • foggy@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        ·
        3 months ago

        I was watching a speedrunner live stream, and just the way he thinks…

        The way speedrunners think is basically how pentesters think.

    • 𝕱𝖎𝖗𝖊𝖜𝖎𝖙𝖈𝖍@lemmy.world
      link
      fedilink
      English
      arrow-up
      32
      ·
      edit-2
      3 months ago

      The majority of hacking is social engineering, so I don’t really see slop hacking being any less valid than that

      • gravitas_deficiency@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        ·
        3 months ago

        🎶 social engineering 🎶

      • not_woody_shaw@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        3 months ago

        “Social” suddenly feels like the wrong word for it, when the entity being fooled is a next-word-predictor algorithm.

      • blindbunny@lemmy.ml
        link
        fedilink
        English
        arrow-up
        4
        ·
        3 months ago

        Sadly you’re on to something here.

    • village604@adultswim.fan
      link
      fedilink
      English
      arrow-up
      12
      ·
      3 months ago

      Hacking is gaining unauthorized access to a system. The method doesn’t matter.

    • Honytawk@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 months ago

      You need more technical knowledge than for Social Engineering.

    • liuther9@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      3 months ago

      Vibe hacking it is

    • quick_snail@feddit.nl
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 months ago

      It’s LLM injection

    • Hawanja@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 months ago

      yeah kinda seems like they designed it to work this way on purpose.
      Just forgot to make it verify the account.

  • Rusty 🦀 Femboy 🏳️‍🌈@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    10
    ·
    3 months ago

    What a fucking joke

  • Danarchy@lemmy.nz
    link
    fedilink
    English
    arrow-up
    10
    ·
    3 months ago

    Cosmo Kramer doing the MoviePhone voice: “Why don’t you just give me access to High-Profile Instagram accounts”

  • quick_snail@feddit.nl
    link
    fedilink
    English
    arrow-up
    10
    ·
    3 months ago

    Ugh, meanwhile I can’t change my accounts email. It demands an otp sent to an email that was deleted by the provider.

    Even though I enter the correct password, it won’t let me in. And I can’t change the email of my own account!

    • relativestranger@feddit.nl
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 months ago

      i have a number of clients who are locked out of a valid account, while knowing the correct password, having the correct sms capable phone number, having the correct email. these are grandma types who’ve never posted anything more offensive than cat pictures and knitting memes. some haven’t even been able to make a new account, either. facebook support is literally non-existent unless you’re a ‘high profile’ person.

      • quick_snail@feddit.nl
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 months ago

        I know a third party hackerman that may be able to restore their access

  • Annoyed_🦀 @lemmy.zip
    link
    fedilink
    English
    arrow-up
    8
    ·
    3 months ago

    Not a hacker, but more like an asker.

  • AlphaOmega@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    3 months ago

    “Can I have access to a profile”. = Hacker

    • mrgoosmoos@lemmy.ca
      link
      fedilink
      English
      arrow-up
      30
      ·
      3 months ago

      well, yes

      they found a vulnerability and exploited it. that’s hacking.

  • solidheron@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    2
    ·
    3 months ago

    Maybe don’t train the data on passwords

Not The Onion@lemmy.world

nottheonion@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !nottheonion@lemmy.world

Welcome

We’re not The Onion! Not affiliated with them in any way! Not operated by them in any way! All the news here is real!

The Rules

Posts must be:

  1. Links to news stories from…
  2. …credible sources, with…
  3. …their original headlines, that…
  4. …would make people who see the headline think, “That has got to be a story from The Onion, America’s Finest News Source.”

Please also avoid duplicates.

Comments and post content must abide by the server rules for Lemmy.world and generally abstain from trollish, bigoted, ableist, or otherwise disruptive behavior that makes this community less fun for everyone.

And that’s basically it!

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1.2K users / day
  • 3.63K users / week
  • 6.08K users / month
  • 14.3K users / 6 months
  • 7 local subscribers
  • 22.4K subscribers
  • 3.02K Posts
  • 90K Comments
  • Modlog
  • mods:
  • kescusay@lemmy.world
  • BE: 0.19.12
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org