My friends Instagram was hacked and deep-fake videos posted in less than 6 hours • Hacker News Board

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#241

Post by nikanj » Sun, Nov 28, 2021, 8:15 PM UTC

neatze wrote: post #219

nikanj wrote: post #189

Earlier quoted context omitted.

Because you can keep dialing customer service with various stories. ”A shark ate my phone”. ”It’s my husbands account. A shark ate him and I want to post a funeral invitation on his page”. Just keep dialing, and you’ll find a compassionate and helpful person at some point

This assuming you know my SMS 2FA number, it not not that expensive to have second phone number and second sim on a phone.

Just start the phone tour from the Instagram support line. ”My son was abducted by sharks, and I need to dial my wife. Which of her phones did she use for her Instagram?”

Again, the kindness, compassion and flexibility of humans is the weak link in security.

I bet that’s why Google has all but eliminated the support staff!

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#242

Post by hansolosays » Sun, Nov 28, 2021, 8:24 PM UTC

bredren wrote: post #114

hansolosays wrote: post #74

Earlier quoted context omitted.

Account was deleted and user name handed over

Was the account active?

Yes. I was using it when it was taken away. I was literally kicked out while logged in.

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#243

Post by harperlee » Sun, Nov 28, 2021, 11:05 PM UTC

jhardy54 wrote: post #231

PeterisP wrote: post #217

Earlier quoted context omitted.

Exactly, so the point is that any relevant gestures must be coming from the timing used in an existing video, the current deepfake tech can manipulate lips and facial expressions, but it can't have the video lift three fingers at the proper time when "300" is being said. So this is either an indication of a very elaborate deepfake which managed to surface an amazingly coincidental source video (which should be possib…

Or: it’s a deepfake where the attacker made a video and attached the victims face in post-processing.

Or: the base video is well chosen among the victim’s, the message is crafted as to not deviate a lot from the base, and the deep fake is used to have him say other things.

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#244

Post by hansolosays » Sun, Nov 28, 2021, 11:46 PM UTC

echelon wrote: post #144

hansolosays wrote: post #24

I was doxxed and harassed for my Insta account. Eventually one day it was just taken even though I had 2 factor auth on Insta and email. There is basically no recourse. Oh and it was given to one of mr beasts (from YouTube) helpers…

What was your account? Can you prove it?

Instagram.com/chucky

I have old password reset emails and probably some screen shots somewhere

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#245

Post by kingcharles » Mon, Nov 29, 2021, 3:21 AM UTC

jspash wrote: post #223

wohfab wrote: post #215

Earlier quoted context omitted.

Yeah, true. I do 64 on default, except the service doesn't allow it, then I'll do the max allowed characters.

Be care with that! I've created accounts in the past with a 40+ random character password and everything went swimmingly. Until I tried to log in. Bzzzt! Couldn't get in. Apparently the password had a character limit that wasn't mentioned when signing up and was silently truncated server-side. A bit of investigation showed the had maxlength="20" which is only enforced when typing characters. When using Javascript to…

God damn that was an annoying bug. Server-side validation not matching client-side. Hopefully you managed to log in eventually.

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#246

Post by kingcharles » Mon, Nov 29, 2021, 3:24 AM UTC

jhugo wrote: post #209

almostdigital wrote: post #97

Instagram is a dumpster fire. I have a 3 letter instagram name and the amount of spam and attacks I get is insane... I get hundreds of password reset emails from instagram daily and constant DMs and follow requests from scammer and bot accounts. I've tried contacting instagram about it several times but they never respond. Had to blackhole emails from security@mail.instagram.com to prevent my mail server filling up.

I had a 3 letter as well. I was getting daily password resets for years and then one day it was stolen despite 2FA and a random 32-char password. No idea how they did it. I wasn't a heavy user and Instagram doesn't seem to offer any support so I just created another account and moved on.

Some sort of social engineering I guess :(

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#247

Post by kingcharles » Mon, Nov 29, 2021, 3:28 AM UTC

systemvoltage wrote: post #39

Wiseacre wrote: post #20

Facebook doesn't seem to care about deepfakes on Instagram since they promote "engagement". I can't say I have too much advice other than to always use strong passwords, don't share passwords across sites, use VPNs on public routers, and stay away from posting videos of yourself on cancerous engagement metric-driven social media.

Can we also lump Twitter and Tiktok with it? Is it me or there is a double-standard on HN where FB gets all the heat, but others don't.

LOL TikTok is worse. It lets you login with just a phone number and no password. I can actually log into the TikTok account of the previous owner of my phone number.

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#248

Post by rdl » Mon, Nov 29, 2021, 8:18 AM UTC

almostdigital wrote: post #97

Instagram is a dumpster fire. I have a 3 letter instagram name and the amount of spam and attacks I get is insane... I get hundreds of password reset emails from instagram daily and constant DMs and follow requests from scammer and bot accounts. I've tried contacting instagram about it several times but they never respond. Had to blackhole emails from security@mail.instagram.com to prevent my mail server filling up.

Same. Eventually (after 30-40?) they give you a link to turn off password resets attempts (or notifications of?) from devices you haven't logged on from in the past 90 days (I think?).

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#249

Post by ryanlol » Mon, Nov 29, 2021, 12:42 PM UTC

path411 wrote: post #207

quickthrower2 wrote: post #98

Earlier quoted context omitted.

How does this mafia operate inside IG? Is there an honour code “don’t steal an account that a superior has stolen already”

Probably just doesn't conflict with each other often

100% does, especially with common names. They can see in the logs if the current holder was forcefully renamed, and presumably won’t touch those.

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#250

Post by JanDietch » Mon, Nov 29, 2021, 3:29 PM UTC

Get in touch with coinwalletrecoup . com to help you recover all your scammed funds. I got in touch with them when i was scammed by Tradestation to be precise, having deposited over $175,000 but still couldn’t withdraw any funds. They kept on telling me to deposit more to reach a certain amount but still couldn’t withdraw then it dawned on me that these people were playing games with my money. Within a week of contact, Coinwalletrecoup . com did the impossible, they recovered everything and also my ROI for the agreed duration of investment. Dont hesitate to contact them if you need any help. They’re the Best out there.