• [object Object]@lemmy.ca
    link
    fedilink
    English
    arrow-up
    232
    ·
    24 hours ago

    Why would the LLM tool have access to send recovery emails to non account verified emails at all?

    That’s insane.

    • guitarfosec@infosec.pub
      link
      fedilink
      English
      arrow-up
      39
      ·
      19 hours ago

      Because one of the biggest companies on the planet that has issues with account takeovers clearly has no internal red team working on this stuff.

      • mint_tamas@lemmy.world
        link
        fedilink
        English
        arrow-up
        19
        ·
        11 hours ago

        I guarantee they do have a red team that most likely flagged this as an obvious and severe risk. It was ignored by suits experiencing AI psychosis.

    • vagrancyand@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      121
      ·
      23 hours ago

      Because AI bros are incredibly deluded about both the capability of AI, and by extension their own capabilities using AI>

              • mic_check_one_two@lemmy.dbzer0.com
                link
                fedilink
                English
                arrow-up
                3
                ·
                4 hours ago

                It was largely overblown due to it getting banned. It was also published in the height of the Vietnam War, when the big evil communists were coming to brainwash your children into eating each other. It has a lot of blatantly incorrect info, which could be outright “blow up in your face” dangerous to anyone attempting the things in it. It’s not all wrong, but certain recipes have incorrect info that could easily lead to accidents.

                Also fair warning, the UK will give people hard prison time simply for owning it. So maybe keep that shit onion-encrypted if you’re in the UK.

              • Knock_Knock_Lemmy_In@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                4 hours ago

                I linked to the Wikipedia article, not the handbook inself. And more for the (obsolete) phreaking content than the (highly dangerous) explosive content.

        • [object Object]@lemmy.ca
          link
          fedilink
          English
          arrow-up
          3
          ·
          7 hours ago

          Kinda.

          If you designed a publicly addressable system since 1985 and didn’t design it for security then you’re asking for it.

          • Knock_Knock_Lemmy_In@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            6 hours ago

            The entity being manipulated is not human so I would not classify it as social engineering, even if similar techniques are used (help me my grandmother needs info).

      • Digit@lemmy.wtf
        link
        fedilink
        English
        arrow-up
        8
        ·
        14 hours ago

        Heh. Watched an old episode of Scorpion yesterday. The one with the armed hostage-takers who just had the one demand to the social media data mining company, to delete all the data they’ve mined. I amused myself a lot, by uttering “I like these guys”.

      • tomiant@piefed.social
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        1
        ·
        17 hours ago

        Let’s mix these chemicals and see what happens. No funds for lab coats or protective glasses. We got a bottom line to feed.

    • hightrix@lemmy.world
      link
      fedilink
      English
      arrow-up
      12
      ·
      19 hours ago

      Hold on, do you expect Facebook to pay a human to deal with the inventory? Come on now.