Inventor of the 1st Smartphone Video Stabilizer (StayblCam), Entrepreneur, Mentor, Brand Developer, Digital Marketing Veteran of 20 years, and Guitar Player.
After a long and pretty intense day, this cover of the keyboard solo from "Octavarium" was the drug I needed... 🫠🤤 In an of its own, @dreamtheaternet Dream Theater's original whole song is already an audible adrenaline rush of an epic musical masterpiece. But this dude frikkin' NAILS @Jcrudess 's astonishingly (pun intended) beautiful keyboard solo. I am now determined to want to learn this! But I have to teach myself piano first. 😎😁 https://t.co/psdZPN4TBF
I said a few years ago that it's only a matter of time before someone starts using fake selfies as "proof of identity", such as for account verification. And sure enough - here we are..
Today Instagram had this massive exploit where hackers were just stealing rare handles left and right. Hundreds of accounts gone.
People losing handles they’ve owned since 2010, some worth hundreds of thousands.
I own a few rare ones so I was actually stressed watching this happen in real time, which I haven’t been in years.
Obama White House account got hit.
These aren’t some random new accounts, these are verified, locked down accounts and they still got compromised.
The thing is the exploit is so simple it’s almost funny. Attacker goes to Forgot Password, says their account is hacked, turns on a VPN to match the target’s location (which now you can find on the about section of the page).
Instagram’s AI support flow asks them to verify with a selfie.
They grab a photo from the target’s profile, run it through an AI video generator to make an animation of the person’s face moving around, upload that to Meta’s AI as proof.
And Meta’s AI just accepts it because it can’t tell the difference between a real selfie and an AI-generated video of someone’s face
.
Once verified they change the email to theirs. Password reset link goes to their email. They own it now. 2FA gets bypassed somehow in the process but honestly I don’t know exactly how, just that it did.
Point is even locked down accounts went down.
Then you try to recover your account and you’re talking to a chatbot that has zero ability to help.
You can’t escalate to a human. You’re just stuck. Your asset is gone and there’s no one to call.
The whole thing just highlighted how stupid it is to automate account security without any human in the loop.
One AI fooling another AI while there’s literally no person anywhere to catch it.
Meta took hours to even acknowledge it while accounts were getting stolen every minute.
Now thankfully it’s patched but I don’t think it will be the last one. Stay safe!
Oh man... Memories! I played that a ton too, on my trusty old Commodore 128D. 😁 The good ol' days of getting floppy disk copies of games like that, and "Appz" (programs). Apps back then was a term for pirated software, so to me it was funny when smartphones came around way later and everybody wanted "apps", lol. But anyway - yeah Paperboy was fun as hell. I still have my Amiga 500 computer.