11–20 of 528 posts
Support requests have always been the weakest link in the security chain for big corps. I've had accounts of mine turned over with 2FA disabled by humans before. I guess we shouldn't be surprised that the LLMs are doing the same thing. The simple fact that 2FA can be removed by low level support staff drives me mad. It defeats the whole purpose of the process.
The implications of this are quite unsettling. Meta gave an agent privileged read AND write access to user accounts with no human in the loop?
With no basic validation either apparently. Insane.
wow thats extremely embarassing for meta
It might even do that preemptively if it thinks they're going to shut it down.
wow thats extremely embarassing for meta
Thankfully, IG gave me the option of restoring my username when I logged back into my account today.
Support requests have always been the weakest link in the security chain for big corps. I've had accounts of mine turned over with 2FA disabled by humans before. I guess we shouldn't be surprised that the LLMs are doing the same thing. The simple fact that 2FA can be removed by low level support staff drives me mad. It defeats the whole purpose of the process.
recovery is always the weakest link in any authentication system