this post was submitted on 01 Jun 2026
929 points (99.7% liked)
Technology
85060 readers
4477 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Why would the LLM tool have access to send recovery emails to non account verified emails at all?
That’s insane.
Who else is going to have access to it when you keep laying off all the people?
Because one of the biggest companies on the planet that has issues with account takeovers clearly has no internal red team working on this stuff.
I guarantee they do have a red team that most likely flagged this as an obvious and severe risk. It was ignored by suits experiencing AI psychosis.
"one of"
Because AI bros are incredibly deluded about both the capability of AI, and by extension their own capabilities using AI>
should’ve asked it to delete the database instead, why else would it have that level of permissions.
Heh. Watched an old episode of Scorpion yesterday. The one with the armed hostage-takers who just had the one demand to the social media data mining company, to delete all the data they've mined. I amused myself a lot, by uttering "I like these guys".
Little Tommy Drop Tables.
Oh, man, I hope someone tries this.
This isn't even a hack, it's just poorly written endpoints.
Would you consider phreaking equivalent to hacking? This is AI phreaking.
TIL about phreaking
Then this is also probably new to you
The Anarchist Cookbook
I need to set aside some time to read that although I'm not an anarchist myself.
It was largely overblown due to it getting banned. It was also published in the height of the Vietnam War, when the big evil communists were coming to brainwash your children into eating each other. It has a lot of blatantly incorrect info, which could be outright “blow up in your face” dangerous to anyone attempting the things in it. It’s not all wrong, but certain recipes have incorrect info that could easily lead to accidents.
Also fair warning, the UK will give people hard prison time simply for owning it. So maybe keep that shit onion-encrypted if you’re in the UK.
I linked to the Wikipedia article, not the handbook inself. And more for the (obsolete) phreaking content than the (highly dangerous) explosive content.
It's not phreaking. Social engineering.
The entity being manipulated is not human so I would not classify it as social engineering, even if similar techniques are used (help me my grandmother needs info).
Kinda.
If you designed a publicly addressable system since 1985 and didn’t design it for security then you’re asking for it.
Hold on, do you expect Facebook to pay a human to deal with the inventory? Come on now.
Its because they move fast and break things. They think that makes them cool.
Let's mix these chemicals and see what happens. No funds for lab coats or protective glasses. We got a bottom line to feed.
I tried this and couldn't get it to work. Disappointed.
It's not insane. It's advanced!