Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

this.weekinsecurity.com

Post reply on HN
Print view View original

211–220 of 287 posts

Re: Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

#211

Post by methyl »

vb-8448 wrote: post #30
Cyan488 wrote: post #3

> "The tool itself worked properly and functioned as intended; however due to a bug in a separate code path, the system did not properly verify that the email address provided by the individual requesting a password reset matched the email address associated with that user’s Instagram account," said Meta in its breach notice. I'm not sure "worked properly" and "as intended" accurately describe this situation.

In italian we say "l'operazione è riuscita perfettamente, ma il paziente è morto" -> "the surgery was a complete success, but the patient died"

Maybe it was euthanasia?

Re: Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

#212

Post by ShinyLeftPad »

Gigachad wrote: post #133
simpaticoder wrote: post #131

Earlier quoted context omitted.

No fan of Meta, but I think "staggering" is properly determined by the percent of users affected rather than the absolute number. It's staggering to an SMB with 100k customers; it's bad, but not "staggering" to an internet juggernaught with 3B MAU.

Twenty _thousand_ people had their personal data stolen, many of them relied on these accounts to run their business, many put at risk of hackers impersonating them. Meta in a fair world should be forced to financially compensate these people. They built a world where many people basically have to use their products for their jobs and then failed to look after the data because they wanted to replace customer support…

It's not staggering. I fully expect thousands of people to lose their IG accounts per day to other hacks before this bug. That's like 0.000001 percent of active users. It's a big platform with many people.

But totally Meta should pay. There's not many people to pay. They should sue.

Re: Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

#213

Post by sandcat_ »

simpaticoder wrote: post #131
johnyzee wrote: post #81

"Meta notified at least 20,225 people that their accounts had been compromised. [...] The compromises allowed the hackers to take over the person's entire Instagram and any linked accounts, including obtaining contact information, dates of birth, and profile information, as well as the ability to access the person's posts, direct messages, and account activity [...] the hacks began around April 17 and lasted until th…

No fan of Meta, but I think "staggering" is properly determined by the percent of users affected rather than the absolute number. It's staggering to an SMB with 100k customers; it's bad, but not "staggering" to an internet juggernaught with 3B MAU.

Worth noting that Meta has a track record of revising breach numbers upwards. We may find out it’s a lot higher than this in the coming weeks.

Re: Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

#214

Post by reassess_blind »

n0on3 wrote: post #206
reaperducer wrote: post #176

Earlier quoted context omitted.

way higher than other countries You must live in Monaco. Wikipedia has the United States #80. https://en.wikipedia.org/wiki/List_of_countries_by_traffic-r...

Sure, but #80 out of 190, still not great ain’t it?

It's about average.

Re: Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

#215

Post by smcin »

AlienRobot wrote: post #147
lou1306 wrote: post #88

Earlier quoted context omitted.

You joke but this is almost literally what Chain-of-Thought does, at least in the early days. They basically just added "Wait," to the model's output and fed it back to the model iirc

This can't be a trillion dollar industry...

"Really?"

Re: Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

#216

Post by zelphirkalt »

hn773746483 wrote: post #164
Gigachad wrote: post #135

Earlier quoted context omitted.

After the GDPR every website added an option to export your personal data and to delete your account. Something most were missing at the time. It was an immediate and massive win.

Right, but nothing stops companies from refusing SARs on baloney grounds. Complain to a DPA? They tell you to go through ADR or outright ignore you. Complain to Ombudsman? They'll tell you the same. (In my experience, the Dutch do this) Company ignores ADR? Sure, now you can go through the legal route and spend copious amounts of money all because a multi billion dollar company knows the game and how to navigate the…

Yep, this is how they do it. The domain registrar netcup did something like this to me.I went through their parent company (?) too, without success. They will put forth any reason to not have to delete your data. I suspect, that they either are trying to reduce work for themselves, or their platform is so crap internally, that they would have to get someone coding to delete the data.

Re: Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

#218

Post by kgwgk »

n0on3 wrote: post #206
reaperducer wrote: post #176

Earlier quoted context omitted.

way higher than other countries You must live in Monaco. Wikipedia has the United States #80. https://en.wikipedia.org/wiki/List_of_countries_by_traffic-r...

Sure, but #80 out of 190, still not great ain’t it?

Not great, not exactly what “completely insane and way higher than other countries” evokes either.

Re: Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

#219

Post by frm88 »

reaperducer wrote: post #176
Gigachad wrote: post #144

Earlier quoted context omitted.

The US car deaths stat is also completely insane and way higher than other countries. I can recognize that at scale, securing every account is a very difficult task, but with scale comes responsibility. Meta plays fast and loose rushing in unsupervised vibeslop agents to save a penny. They should be significantly penalized for such a massive failure, particularly for how long this exploit was live and for how the vic…

way higher than other countries You must live in Monaco. Wikipedia has the United States #80. https://en.wikipedia.org/wiki/List_of_countries_by_traffic-r...

Wikipedia has the United States #80.

Where do you see that? With 14.2/100K the US comes in at 111/190

Re: Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

#220

Post by blitzar »

webbdev wrote: post #29

Meanwhile an account I created for a new product was permanently disabled by an automated system with no path for me to appeal to a human. (If anyone at Meta/Instagram sees this I wrote a brief blog post with the details. Please help! https://addisonwebb.com/blog/2026-06-05-Can%20Someone%20at%2... )

Standard path is to have sex with a few employees at meta to get it unlocked.

https://popcrush.com/onlyfans-star-slept-meta-employees-inst...

Post reply on HN