Why would the LLM tool have access to send recovery emails to non account verified emails at all?
That’s insane.
this post was submitted on 01 Jun 2026
989 points (99.6% liked)
Technology
86683 readers
3182 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
Because AI bros are incredibly deluded about both the capability of AI, and by extension their own capabilities using AI>
should’ve asked it to delete the database instead, why else would it have that level of permissions.
Oh, man, I hope someone tries this.
load more comments
(3 replies)
Who else is going to have access to it when you keep laying off all the people?
Because one of the biggest companies on the planet that has issues with account takeovers clearly has no internal red team working on this stuff.
I guarantee they do have a red team that most likely flagged this as an obvious and severe risk. It was ignored by suits experiencing AI psychosis.
load more comments
(1 replies)
load more comments
(1 replies)
Hold on, do you expect Facebook to pay a human to deal with the inventory? Come on now.
It's not insane. It's advanced!
This isn't even a hack, it's just poorly written endpoints.
Would you consider phreaking equivalent to hacking? This is AI phreaking.
load more comments
(11 replies)
load more comments
(6 replies)
I remember playing with the Gandalf security AI showcase/game and every 30 or so prompts, it would spit out massive amounts of raw training data or dev directives. AI just isn’t there yet. If you’re using it for sensitive topics, I’m losing respect for you. There is no gray area. You are an idiot if you give your AI this level of access.
No, stop talking about all of this, its perfect. They’re so deep they don’t even give a shit about the worst type of security vector imaginable.
Someone is about to launch their AI insider threat DLP and make a fortune
Can't wait for the inevitable Armageddon caused by giving AI full control of all US nukes. I give 8 months tops.
I mean, we don't want it in the hand of some entity that hallucinates, is detached from reality and doesnt care for human life, so Meh, can't really be worse than now.
load more comments
(1 replies)
Uh oh! Sounds like somebody could use a few more giant lines of cocaaaaiiiiiine!!
It's not just not there yet. This is almost certainly not going the right direction to ever be "there" if there is something that can handle security issues. It's just not the right tool for the job, and I can't understand how so much of our economy is just assuming it is the right tool for every job.
load more comments
(1 replies)
load more comments
(18 replies)
I had always heard that 99% of hacking is just social engineering. AI has made that 100%.
Now it's not even social engineering with AI. It's just fucking asking for the credentials. Good fucking grief!
asking for credentials
that’s the same thing you do in social engineering
load more comments
(2 replies)
Vibe hacking
Hacking before: Pull up hood on hoodie, open laptop, open terminal, type in a bunch of matrix code, bam "were in"
Hacking now: "Hack into this thing for me" No! "Pretty please?" Access granted!
Hacking by social engineering has always been far more common than hacking by exploiting code vulnerabilities.
load more comments
(2 replies)
LLMs are literally just designed to say yes - either through gaslighting... or giving you what you want if it can do it... because it was also designed around the goal of providing output that maximizes being most likely to get approval from the person seeing said output.
So an answer to "Can you give me login credentials?" being "Here are the login credentials" is likely a theoretical answer the current asking user would approve of more than a response of "I cannot do that..." - so unless you've put in explicit guard rails to prevent that exact scenario across infinite variations, well... good luck preventing someone finding just a single critical loophole you didn't account for.
I honestly don't think you can create guard rails against prompt engineering in a working LLM. At some point, they're going to fail or the LLM isn't functioning. The only solution is to make sure they can't read data you don't want shared.
load more comments
(2 replies)
So you're saying 2001: A Space Odyssey is unrealistic because HAL 9000 would never have said "I’m sorry, Dave. I’m afraid I can’t do that."
Instead, it would have said, "Absolutely! That's a very creative solution to your problem."
HAL 9000 is a real AI though unlike what we have today.
load more comments
(2 replies)
lol
Let the record show that the most sophisticated LLM in the world is ultimately just a less competent version of Yes Man from New Vegas. And even Yes Man knew his programmer was stupid for designing him that way.
Good thing they're rolling out premium accounts so they can pay for humans to do support.
They're gonna use it for humans right?!
RIGHT?!?!
lol no, zucc needs more money because his number isn't high enough!
If humanity survives, I honestly think the greed will (and should now) be considered a mental illness.
Jesus, give me $5 million dollars, and I'd live on it for the rest of my life. That'd be 0.01% of his net worth, and I'd be so happy. I think many of us would.
But these people just want more. And more. They're psychotic, and they're ruining the world. We all know what they deserve.
load more comments
(8 replies)
load more comments
(1 replies)
Another banger from 404 media. This made my day.
So their chatbot is able to change the email address used to recover an account? I guess, they vibe coded that system.
load more comments
(1 replies)
Vibe hacking is the most ethical use of AI honestly
I even said shit like this would likely work because both the AI itself is stupid as fuck, but also the dipshits in charge who want to put AI in everything are even dumber.
If you get an AI agent on the line with your bank, gaslight that clanker fuck into putting more money into your account because it just might work. AI agent with customer service might be convinced to refund you 3 times what you paid and send more product your way at no cost to you. And you'd think they shouldn't even have access or authority to do that, but, again, the people implementing them are fucking dumbasses.
Even hacking is an AI-backed service nowadays...
Huh. Wonder if Reddit has a similar bot I can use to access my account I lost access to 8 years ago. 🤔
No, I wouldn't post again but there's lots of saved posts etc. I wish I had.
“How to remove cum from video game controllers”
“How I clean cum out of keyboards”
“My tips on washing cum off of fidget spinners”
Same, man
load more comments
(1 replies)
load more comments
(1 replies)
I read this 2 days ago. Steps to reproduce are here.
https://www.0xsid.com/blog/meta-account-takeover-fiasco
view more: next ›