221–230 of 262 posts
Earlier quoted context omitted.
Fortunately, that's not something the current company Meta would allow to happen. That sounds like something that only Facebook would let fall through the cracks.
I can't tell if you are joking but I desperately hope you are.
This happened to my wife too and her IG profile was used to create a deepfake on onlyfans
How does these scammers get their hands on the money? Doesn't Onlyfans require photo ID and personal banking details?
Also, chances are that if you can convincingly create deepfakes in general you can (deep)fake a picture of an id to a degree it will be accepted by OnlyFans and other services, especially if these ids are from places the staff might not be entirely familiar with. Do you know for example what a Columbian or Polish or Turkish or Cambodian id should look like and what security features that you could see on a mere picture of it should be present, if there are even such features?
I've seen such id fakes done in practice, though that wasn't related to OnlyFans. That's why when I was in a position where I sometimes had to verify identities, I would not accept pictures of ids, I would ask for a "proof-of-life"/"timestamp" style pictures you see commonly used on pseudonymous sites like reddit or 4chan to establish authenticity of a poster. Those are not impossible to fake, but a lot harder, especially if you limit the time in which the other party can respond.
I don't know if OnlyFans adopted such a method of verification by now, but I know they used to accept just ids.
I also online-know a guy who says he used to run an OnlyFans scam where he would seek out underrated accounts, steal their content and republish it under his own accounts. That obviously required he create a lot of verified accounts with valid ways to pay out, of course. He never went into details on that. He could be lying about the thing, but when it came to other things he claimed over the years, a lot of it was verifiable true, so I don't know.
You can also buy verified OnlyFans accounts on the black market (hacked usually) or compromise accounts yourself. A lot of OnlyFans accounts are completely inactive, abandoned by the original owners, so they will probably not even notice if it gets taken. From there you can replace all the account content as you please, and I believe in the case of OnlyFans even change the user name and probably update the payout method and information as well.
As for banking information... that's harder, but there are probably some ways left. The question is if the OnlyFans account in this case was even made for financial gain, or just to cause humiliation, in which case subscriptions might have been free or the money might have never been collected by whoever created the account.
Earlier quoted context omitted.
If you are using a random password generator, don't be doing 12 character lol. Do 20+
Yeah, true. I do 64 on default, except the service doesn't allow it, then I'll do the max allowed characters.
Apparently the password had a character limit that wasn't mentioned when signing up and was silently truncated server-side. A bit of investigation showed the had maxlength="20" which is only enforced when typing characters. When using Javascript to fill a form will just ignore this attribute. https://codepen.io/jspash/pen/XWerVzY
Earlier quoted context omitted.
Yeah, true. I do 64 on default, except the service doesn't allow it, then I'll do the max allowed characters.
Be care with that! I've created accounts in the past with a 40+ random character password and everything went swimmingly. Until I tried to log in. Bzzzt! Couldn't get in. Apparently the password had a character limit that wasn't mentioned when signing up and was silently truncated server-side. A bit of investigation showed the had maxlength="20" which is only enforced when typing characters. When using Javascript to…
Example from a news story. After seeing the video, I must admit I’m not sure if I believe the guy or not, which is scary. Edit: Better link from deadmutex below - https://www.youtube.com/watch?v=vqr0oER03SE https://www.wfla.com/8-on-your-side/better-call-behnken/inst...
Can anyone guess what exactly the hackers want with a particular person's IG? Why don't they just auto/synthetically generate a fake face if they just want to sell or scam something? Is it to exploit the person's friend network?
This news report had a musician guy's IG taken over and deep fake videos of him and his voice telling people to get bitcoins: https://www.youtube.com/watch?v=vqr0oER03SE
Earlier quoted context omitted.
Probably inside job at IG tbh. Multiple reports over the years of desirable IG usernames being taken from legit users and handed to the friends of IG employees
I remember Facebook used to let any dev access the whole production DB as an effort to "remove red tape" and allow quick solutions to problems. That lack of red tape resulted in multiple stories of employees using that privilege to stalk people in real life.
Earlier quoted context omitted.
I work really closely on deep fake tech [1] and I'd say I'm relatively current with the state of the art in the literature. This was not deepfaked. The person recorded it themselves and is lying. The video quality is too good. The lighting and movements lack mistakes. It can't be first order model, wav2lip, or any of the relatively new audio to video models. The audio doesn't suffer from spectral noise, and it matche…
I agree. I think the most telling sign is the hand gesture for the number 3 when he says "just invested 300 bucks". Don't think Deepfake models can understand intent yet.
Earlier quoted context omitted.
Exactly. If private keys were that much better for the average, shouldn't some common services use them now?
Private keys are used to upload code to github. It's not about what's "better" but about what users are willing to tolerate. The average user has a very high tolerance for login bullshit, repeated captchas, etc. -- if the site has a monopoly on the social network you need to access.
Private keys, as appealing as they are in theory, don't really work from a user perspective. The closest thing that seems to be popular is 2FA keys like YubiKeys.