{"generator":"GNU social 2.0.2-dev","title":"Conversation","totalItems":9,"items":[{"actor":{"id":"https:\/\/mastodon.social\/users\/benroyce","displayName":"\u23e9\ufe0eVOTE\u23ea\ufe0e \u1d9c\u02b8\u207f\u2071\u1d9c\u2071\u02e2\u1d50\u207c\u1d43\u1d9c\u1d9c\u1d49\u1d56\u1d57\u1d43\u207f\u1d9c\u1d49 (Ben Royce)","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/241161-original-tmp20240208075527.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/241161-96-20240208075528.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/241161-48-20240208075528.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/241161-24-20240208075528.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"241161"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/241161-96-20240208075528.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"\ud835\udd65\ud835\udd59\ud835\udd56 \ud835\udd65\ud835\udd6a\ud835\udd58\ud835\udd56\ud835\udd63\ud835\udd64 \ud835\udd60\ud835\udd57 \ud835\udd68\ud835\udd63\ud835\udd52\ud835\udd65\ud835\udd59 \ud835\udd52\ud835\udd63\ud835\udd56 \ud835\udd68\ud835\udd5a\ud835\udd64\ud835\udd56\ud835\udd63 \ud835\udd65\ud835\udd59\ud835\udd52\ud835\udd5f \ud835\udd65\ud835\udd59\ud835\udd56 \ud835\udd59\ud835\udd60\ud835\udd63\ud835\udd64\ud835\udd56\ud835\udd64 \ud835\udd60\ud835\udd57 \ud835\udd5a\ud835\udd5f\ud835\udd64\ud835\udd65\ud835\udd63\ud835\udd66\ud835\udd54\ud835\udd65\ud835\udd5a\ud835\udd60\ud835\udd5f\u00b7\u00b7\u00b7\u1d57\u02b0\u2071\u02e2 \u2071\u02e2 \u1d57\u02b0\u1d49 \u1d52\u207f\u02e1\u02b8 \u02e2\u1d52\u1d9c\u2071\u1d43\u02e1 \u1d50\u1d49\u1d48\u2071\u1d43 \u1d43\u1d9c\u1d9c\u1d52\u1d58\u207f\u1d57 \u2071 \u02b0\u1d43\u1d5b\u1d49\u1d43\u207f\u02b8 \u1d52\u1d57\u02b0\u1d49\u02b3 "\u1d2e\u1d49\u207f \u1d3f\u1d52\u02b8\u1d9c\u1d49" \u02b8\u1d52\u1d58 \u02e2\u1d49\u1d49 \u1d52\u1d58\u1d57 \u1d57\u02b0\u1d49\u02b3\u1d49 \u1d52\u207f \u1d57\u02b0\u1d49 \u1da0\u1d49\u1d48\u2071\u1d5b\u1d49\u02b3\u02e2\u1d49 \u1d52\u02b3 \u1d52\u207f \u1d43\u207f\u02b8 \u1d52\u1d57\u02b0\u1d49\u02b3 \u1d56\u02e1\u1d43\u1d57\u1da0\u1d52\u02b3\u1d50 \u2071\u02e2 \u207f\u1d52\u1d57 \u1d50\u1d49\u00b7\u00b7\u00b7i live near #RochesterNY #Rochester #NewYork #NY #FingerLakes #WesternNY #Ganondagan","url":"https:\/\/mastodon.social\/@benroyce","portablecontacts_net":{"preferredUsername":"benroyce","displayName":"\u23e9\ufe0eVOTE\u23ea\ufe0e \u1d9c\u02b8\u207f\u2071\u1d9c\u2071\u02e2\u1d50\u207c\u1d43\u1d9c\u1d9c\u1d49\u1d56\u1d57\u1d43\u207f\u1d9c\u1d49 (Ben Royce)","note":"\ud835\udd65\ud835\udd59\ud835\udd56 \ud835\udd65\ud835\udd6a\ud835\udd58\ud835\udd56\ud835\udd63\ud835\udd64 \ud835\udd60\ud835\udd57 \ud835\udd68\ud835\udd63\ud835\udd52\ud835\udd65\ud835\udd59 \ud835\udd52\ud835\udd63\ud835\udd56 \ud835\udd68\ud835\udd5a\ud835\udd64\ud835\udd56\ud835\udd63 \ud835\udd65\ud835\udd59\ud835\udd52\ud835\udd5f \ud835\udd65\ud835\udd59\ud835\udd56 \ud835\udd59\ud835\udd60\ud835\udd63\ud835\udd64\ud835\udd56\ud835\udd64 \ud835\udd60\ud835\udd57 \ud835\udd5a\ud835\udd5f\ud835\udd64\ud835\udd65\ud835\udd63\ud835\udd66\ud835\udd54\ud835\udd65\ud835\udd5a\ud835\udd60\ud835\udd5f\u00b7\u00b7\u00b7\u1d57\u02b0\u2071\u02e2 \u2071\u02e2 \u1d57\u02b0\u1d49 \u1d52\u207f\u02e1\u02b8 \u02e2\u1d52\u1d9c\u2071\u1d43\u02e1 \u1d50\u1d49\u1d48\u2071\u1d43 \u1d43\u1d9c\u1d9c\u1d52\u1d58\u207f\u1d57 \u2071 \u02b0\u1d43\u1d5b\u1d49\u1d43\u207f\u02b8 \u1d52\u1d57\u02b0\u1d49\u02b3 "\u1d2e\u1d49\u207f \u1d3f\u1d52\u02b8\u1d9c\u1d49" \u02b8\u1d52\u1d58 \u02e2\u1d49\u1d49 \u1d52\u1d58\u1d57 \u1d57\u02b0\u1d49\u02b3\u1d49 \u1d52\u207f \u1d57\u02b0\u1d49 \u1da0\u1d49\u1d48\u2071\u1d5b\u1d49\u02b3\u02e2\u1d49 \u1d52\u02b3 \u1d52\u207f \u1d43\u207f\u02b8 \u1d52\u1d57\u02b0\u1d49\u02b3 \u1d56\u02e1\u1d43\u1d57\u1da0\u1d52\u02b3\u1d50 \u2071\u02e2 \u207f\u1d52\u1d57 \u1d50\u1d49\u00b7\u00b7\u00b7i live near #RochesterNY #Rochester #NewYork #NY #FingerLakes #WesternNY #Ganondagan"}},"content":"

@aubreyclark<\/a> @zackwhittaker<\/a> <\/p>

it's really, really stupid<\/p>

it's based on \"AI is magic, yay! just turn it on, no problems, yay!\":<\/p>

\"hackers abused a flaw in Meta's chatbot that allowed anyone to reset the password of any account that did not have two-factor authentication switched on. The bug tricked the chatbot into sending a verification code to an email address controlled by the hacker, rather than the account holder's email address on file, simply by asking it. The chatbot complied anyway\"<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.social\/users\/benroyce\/statuses\/116704215357619976","object":{"id":"https:\/\/mastodon.social\/users\/benroyce\/statuses\/116704215357619976","objectType":"note","content":"

@aubreyclark<\/a> @zackwhittaker<\/a> <\/p>

it's really, really stupid<\/p>

it's based on \"AI is magic, yay! just turn it on, no problems, yay!\":<\/p>

\"hackers abused a flaw in Meta's chatbot that allowed anyone to reset the password of any account that did not have two-factor authentication switched on. The bug tricked the chatbot into sending a verification code to an email address controlled by the hacker, rather than the account holder's email address on file, simply by asking it. The chatbot complied anyway\"<\/p>","url":"https:\/\/mastodon.social\/@benroyce\/116704215357619976","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mastodon.social\/users\/aubreyclark\/statuses\/116703778443912907","url":"https:\/\/mastodon.social\/@aubreyclark\/116703778443912907"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.social\/users\/zackwhittaker"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.social\/users\/aubreyclark"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-06:objectType=thread:nonce=b230bdf557b82cb8","notice_info":{"local_id":"12719165","source":"ActivityPub"}},"published":"2026-06-08T15:14:08+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.social\/@benroyce\/116704215357619976"},{"actor":{"id":"https:\/\/ursal.zone\/users\/Bruiserzinha","displayName":"\u00d3dio e Apatia :Ryyca:","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/21825-original-tmp20260512192602.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/21825-96-20260512193747.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/21825-48-20260512193747.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/21825-24-20260512193747.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"21825"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/21825-96-20260512193747.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"15% Ind\u00edgena23% PretaO resto \u00e9 coloniza\u00e7\u00e3o, genoc\u00eddio e estupro de minhas antepassadasDesisti de relacionamentos, n\u00e3o insista! Pertencente a Confraria do Desperd\u00edcio (proj. @RockyPobre)Considere contribuir para o meu trabalho aqui!Pix: miss.souza@gmail.com","url":"https:\/\/ursal.zone\/@Bruiserzinha","portablecontacts_net":{"preferredUsername":"Bruiserzinha","displayName":"\u00d3dio e Apatia :Ryyca:","note":"15% Ind\u00edgena23% PretaO resto \u00e9 coloniza\u00e7\u00e3o, genoc\u00eddio e estupro de minhas antepassadasDesisti de relacionamentos, n\u00e3o insista! Pertencente a Confraria do Desperd\u00edcio (proj. @RockyPobre)Considere contribuir para o meu trabalho aqui!Pix: miss.souza@gmail.com"}},"content":"RT @Bruiserzinha @aubreyclark @zackwhittaker In this case, "the AI being able to be tricked into doing things it wasn't supposed to" isn't the problem. The problem is that it was given permission the same wrong permissions that human support staff were wrongly given, to bypass access controls on user accounts.If this kind of access exists at all, it should require escalation to approval by multiple parties, long mandatory waiting periods for the account owner to see it's happening if they still have access, and something to impose financial and\/or legal risk on the party requesting access if it turns out to be fraudulent. Not something human or slopbot support agent can do unilaterally.","generator":{"id":"tag:gnusocial.jp,2026-10-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/ursal.zone\/users\/Bruiserzinha\/statuses\/116715134241636739\/activity","object":{"id":"https:\/\/mastodon.social\/users\/aubreyclark\/statuses\/116703778443912907","objectType":"note","content":"

@zackwhittaker<\/a> This reminds me of a friend who tests AI systems for a living. Her job is basically to see whether an AI can be tricked into doing things it wasn't supposed to do.<\/p>

Is this the same general idea, or is it a completely different kind of vulnerability? \ud83d\ude32<\/p>","url":"https:\/\/mastodon.social\/@aubreyclark\/116703778443912907","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-06:objectType=thread:nonce=b230bdf557b82cb8","notice_info":{"local_id":"12719162","source":"ActivityPub","repeat_of":"12711197"}},"published":"2026-06-08T15:13:42+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"title":"Bruiserzinha repeated a notice by aubreyclark","verb":"share","url":"https:\/\/ursal.zone\/users\/Bruiserzinha\/statuses\/116715134241636739\/activity"},{"actor":{"id":"https:\/\/mastodon.social\/users\/aubreyclark","displayName":"Aubrey Clark","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/398413-original-tmp20260606183500.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/398413-96-20260606183500.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/398413-48-20260606183500.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/398413-24-20260606183500.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"398413"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/398413-96-20260606183500.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Fiction writer focused on stories that matter.Here to write, learn, and share honestly.","url":"https:\/\/mastodon.social\/@aubreyclark","portablecontacts_net":{"preferredUsername":"aubreyclark","displayName":"Aubrey Clark","note":"Fiction writer focused on stories that matter.Here to write, learn, and share honestly."}},"content":"

@zackwhittaker<\/a> This reminds me of a friend who tests AI systems for a living. Her job is basically to see whether an AI can be tricked into doing things it wasn't supposed to do.<\/p>

Is this the same general idea, or is it a completely different kind of vulnerability? \ud83d\ude32<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.social\/users\/aubreyclark\/statuses\/116703778443912907","object":{"id":"https:\/\/mastodon.social\/users\/aubreyclark\/statuses\/116703778443912907","objectType":"note","content":"

@zackwhittaker<\/a> This reminds me of a friend who tests AI systems for a living. Her job is basically to see whether an AI can be tricked into doing things it wasn't supposed to do.<\/p>

Is this the same general idea, or is it a completely different kind of vulnerability? \ud83d\ude32<\/p>","url":"https:\/\/mastodon.social\/@aubreyclark\/116703778443912907","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mastodon.social\/users\/zackwhittaker\/statuses\/116703018430127671","url":"https:\/\/mastodon.social\/@zackwhittaker\/116703018430127671"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.social\/users\/zackwhittaker"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-06:objectType=thread:nonce=b230bdf557b82cb8","notice_info":{"local_id":"12711197","source":"ActivityPub"}},"published":"2026-06-06T18:35:00+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.social\/@aubreyclark\/116703778443912907"},{"actor":{"id":"https:\/\/hachyderm.io\/users\/dalias","displayName":"Rich Felker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/40873-original-tmp20221202140938.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-48-20221207231635.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-24-20221207231635.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"40873"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa","url":"https:\/\/hachyderm.io\/@dalias","portablecontacts_net":{"preferredUsername":"dalias","displayName":"Rich Felker","note":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa"}},"content":"

@aubreyclark<\/a> @zackwhittaker<\/a> In this case, \"the AI being able to be tricked into doing things it wasn't supposed to\" isn't the problem. The problem is that it was given permission the same wrong permissions that human support staff were wrongly given, to bypass access controls on user accounts.<\/p>

If this kind of access exists at all, it should require escalation to approval by multiple parties, long mandatory waiting periods for the account owner to see it's happening if they still have access, and something to impose financial and\/or legal risk on the party requesting access if it turns out to be fraudulent. Not something human or slopbot support agent can do unilaterally.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116704599920293105","object":{"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116704599920293105","objectType":"note","content":"

@aubreyclark<\/a> @zackwhittaker<\/a> In this case, \"the AI being able to be tricked into doing things it wasn't supposed to\" isn't the problem. The problem is that it was given permission the same wrong permissions that human support staff were wrongly given, to bypass access controls on user accounts.<\/p>

If this kind of access exists at all, it should require escalation to approval by multiple parties, long mandatory waiting periods for the account owner to see it's happening if they still have access, and something to impose financial and\/or legal risk on the party requesting access if it turns out to be fraudulent. Not something human or slopbot support agent can do unilaterally.<\/p>","url":"https:\/\/hachyderm.io\/@dalias\/116704599920293105","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mastodon.social\/users\/aubreyclark\/statuses\/116703778443912907","url":"https:\/\/mastodon.social\/@aubreyclark\/116703778443912907"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.social\/users\/zackwhittaker"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.social\/users\/aubreyclark"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-06:objectType=thread:nonce=b230bdf557b82cb8","notice_info":{"local_id":"12711198","source":"ActivityPub"}},"published":"2026-06-06T18:34:58+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/hachyderm.io\/@dalias\/116704599920293105"},{"actor":{"id":"https:\/\/hachyderm.io\/users\/dalias","displayName":"Rich Felker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/40873-original-tmp20221202140938.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-48-20221207231635.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-24-20221207231635.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"40873"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa","url":"https:\/\/hachyderm.io\/@dalias","portablecontacts_net":{"preferredUsername":"dalias","displayName":"Rich Felker","note":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa"}},"content":"RT @dalias Meta literally claims that "The tool itself worked properly and functioned as intended". Incredible. If your tool allows for people to hack your users by simply asking politely for it, reasonable people might argue that this tool is not, in fact, "working as intended".
@jwcph @zackwhittaker","generator":{"id":"tag:gnusocial.jp,2026-10-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116704575653985207\/activity","object":{"id":"https:\/\/helvede.net\/users\/jwcph\/statuses\/116703419971201137","objectType":"note","content":"

@zackwhittaker<\/a> Correction: It's not a bug & the AI wasn't \"tricked\". It worked exactly like it was supposed to - Meta just didn't care to consider that anyone could ask it to do so. <\/p>

It's a tech bug in the same sense that a person plowing a pickup truck through a kindergarten is the car's fault. <\/p>

- which also means the \"bug\" is \"fixed\" until somebody stumbles upon the next vulnerability, because the underlying issue, as the book said, is carelessness.<\/p>","url":"https:\/\/helvede.net\/@jwcph\/116703419971201137","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-06:objectType=thread:nonce=b230bdf557b82cb8","notice_info":{"local_id":"12711156","source":"ActivityPub","repeat_of":"12711153"}},"published":"2026-06-06T18:28:26+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"title":"dalias repeated a notice by jwcph","verb":"share","url":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116704575653985207\/activity"},{"actor":{"id":"https:\/\/hostux.social\/users\/sab","displayName":"Stian","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/143673-original-tmp20230704002018.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/143673-96-20240919081219.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/143673-48-20240919081219.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/143673-24-20240919081219.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"143673"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/143673-96-20240919081219.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Somewhat plain Norwegian guy in his 30s.","url":"https:\/\/hostux.social\/@sab","portablecontacts_net":{"preferredUsername":"sab","displayName":"Stian","note":"Somewhat plain Norwegian guy in his 30s."}},"content":"

Meta literally claims that \"The tool itself worked properly and functioned as intended\". Incredible. <\/p>

If your tool allows for people to hack your users by simply asking politely for it, reasonable people might argue that this tool is not, in fact, \"working as intended\".
@jwcph<\/a> @zackwhittaker<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hostux.social\/users\/sab\/statuses\/116704172889240945","object":{"id":"https:\/\/hostux.social\/users\/sab\/statuses\/116704172889240945","objectType":"note","content":"

Meta literally claims that \"The tool itself worked properly and functioned as intended\". Incredible. <\/p>

If your tool allows for people to hack your users by simply asking politely for it, reasonable people might argue that this tool is not, in fact, \"working as intended\".
@jwcph<\/a> @zackwhittaker<\/a><\/p>","url":"https:\/\/hostux.social\/@sab\/116704172889240945","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/helvede.net\/users\/jwcph\/statuses\/116703419971201137","url":"https:\/\/helvede.net\/@jwcph\/116703419971201137"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.social\/users\/zackwhittaker"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/helvede.net\/users\/jwcph"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-06:objectType=thread:nonce=b230bdf557b82cb8","notice_info":{"local_id":"12711155","source":"ActivityPub"}},"published":"2026-06-06T18:28:25+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/hostux.social\/@sab\/116704172889240945"},{"actor":{"id":"https:\/\/hachyderm.io\/users\/dalias","displayName":"Rich Felker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/40873-original-tmp20221202140938.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-48-20221207231635.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-24-20221207231635.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"40873"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa","url":"https:\/\/hachyderm.io\/@dalias","portablecontacts_net":{"preferredUsername":"dalias","displayName":"Rich Felker","note":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa"}},"content":"RT @dalias @zackwhittaker Correction: It's not a bug & the AI wasn't "tricked". It worked exactly like it was supposed to - Meta just didn't care to consider that anyone could ask it to do so. It's a tech bug in the same sense that a person plowing a pickup truck through a kindergarten is the car's fault. - which also means the "bug" is "fixed" until somebody stumbles upon the next vulnerability, because the underlying issue, as the book said, is carelessness.","generator":{"id":"tag:gnusocial.jp,2026-10-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116704575303078664\/activity","object":{"id":"https:\/\/mastodon.social\/users\/zackwhittaker\/statuses\/116703018430127671","objectType":"note","content":"

New, by me: Meta has filed a data breach notice confirming that *thousands* of people had their Instagram accounts hacked as part of a months-long campaign abusing its Meta AI chatbot.<\/p>

Meta's breach notice shows the hacks were far more widespread than first thought.<\/p>

More: https:\/\/this.weekinsecurity.com\/meta-confirms-thousands-of-instagram-accounts-were-hacked-by-abusing-its-ai-chatbot\/<\/a><\/p>

Sign up\/RSS for my free weekly newsletter: https:\/\/this.weekinsecurity.com\/<\/a><\/p>","url":"https:\/\/mastodon.social\/@zackwhittaker\/116703018430127671","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-06:objectType=thread:nonce=b230bdf557b82cb8","notice_info":{"local_id":"12711154","source":"ActivityPub","repeat_of":"12710228"}},"published":"2026-06-06T18:28:21+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"title":"dalias repeated a notice by zackwhittaker","verb":"share","url":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116704575303078664\/activity"},{"actor":{"id":"https:\/\/helvede.net\/users\/jwcph","displayName":"JWcph, Radicalized By Decency","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/260466-original-tmp20251211090307.webp","rel":"avatar","type":"image\/webp","width":300,"height":300},{"url":"https:\/\/gnusocial.jp\/avatar\/260466-96-20251211090613.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/260466-48-20251211090613.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/260466-24-20251211090613.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"260466"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/260466-96-20251211090613.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"End capitalism \ud83d\udc4aHe\/Him, Northbridge Boi #WeAreNorrebro Who I want to be when I grow up: Dolly Parton. The Doctor. Any of the Mythbusters. A guitar player.Who I am now: Bad guitar player. Believer in the idea that society is a thing built by the powerless to keep the powerful in check & that #politics & policy failing to reflect this are incomplete at best.Politically outspoken, overanalyzing #PopCulture, building weird, practical and\/or funny sh*t #maker #3Dprinting #nobots","url":"https:\/\/helvede.net\/@jwcph","portablecontacts_net":{"preferredUsername":"jwcph","displayName":"JWcph, Radicalized By Decency","note":"End capitalism \ud83d\udc4aHe\/Him, Northbridge Boi #WeAreNorrebro Who I want to be when I grow up: Dolly Parton. The Doctor. Any of the Mythbusters. A guitar player.Who I am now: Bad guitar player. Believer in the idea that society is a thing built by the powerless to keep the powerful in check & that #politics & policy failing to reflect this are incomplete at best.Politically outspoken, overanalyzing #PopCulture, building weird, practical and\/or funny sh*t #maker #3Dprinting #nobots"}},"content":"

@zackwhittaker<\/a> Correction: It's not a bug & the AI wasn't \"tricked\". It worked exactly like it was supposed to - Meta just didn't care to consider that anyone could ask it to do so. <\/p>

It's a tech bug in the same sense that a person plowing a pickup truck through a kindergarten is the car's fault. <\/p>

- which also means the \"bug\" is \"fixed\" until somebody stumbles upon the next vulnerability, because the underlying issue, as the book said, is carelessness.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/helvede.net\/users\/jwcph\/statuses\/116703419971201137","object":{"id":"https:\/\/helvede.net\/users\/jwcph\/statuses\/116703419971201137","objectType":"note","content":"

@zackwhittaker<\/a> Correction: It's not a bug & the AI wasn't \"tricked\". It worked exactly like it was supposed to - Meta just didn't care to consider that anyone could ask it to do so. <\/p>

It's a tech bug in the same sense that a person plowing a pickup truck through a kindergarten is the car's fault. <\/p>

- which also means the \"bug\" is \"fixed\" until somebody stumbles upon the next vulnerability, because the underlying issue, as the book said, is carelessness.<\/p>","url":"https:\/\/helvede.net\/@jwcph\/116703419971201137","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mastodon.social\/users\/zackwhittaker\/statuses\/116703018430127671","url":"https:\/\/mastodon.social\/@zackwhittaker\/116703018430127671"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.social\/users\/zackwhittaker"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-06:objectType=thread:nonce=b230bdf557b82cb8","notice_info":{"local_id":"12711153","source":"ActivityPub"}},"published":"2026-06-06T18:28:20+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/helvede.net\/@jwcph\/116703419971201137"},{"actor":{"id":"https:\/\/mastodon.social\/users\/zackwhittaker","displayName":"Zack Whittaker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/101728-original-tmp20241104190145.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/101728-96-20241104190238.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/101728-48-20241104190238.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/101728-24-20241104190238.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"101728"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/101728-96-20241104190238.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Security editor, TechCrunchEmail: zack.whittaker@techcrunch.comSignal: zackwhittaker.1337New York, NY","url":"https:\/\/mastodon.social\/@zackwhittaker","portablecontacts_net":{"preferredUsername":"zackwhittaker","displayName":"Zack Whittaker","note":"Security editor, TechCrunchEmail: zack.whittaker@techcrunch.comSignal: zackwhittaker.1337New York, NY"}},"content":"

New, by me: Meta has filed a data breach notice confirming that *thousands* of people had their Instagram accounts hacked as part of a months-long campaign abusing its Meta AI chatbot.<\/p>

Meta's breach notice shows the hacks were far more widespread than first thought.<\/p>

More: https:\/\/this.weekinsecurity.com\/meta-confirms-thousands-of-instagram-accounts-were-hacked-by-abusing-its-ai-chatbot\/<\/a><\/p>

Sign up\/RSS for my free weekly newsletter: https:\/\/this.weekinsecurity.com\/<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-10-21:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.social\/users\/zackwhittaker\/statuses\/116703018430127671","object":{"id":"https:\/\/mastodon.social\/users\/zackwhittaker\/statuses\/116703018430127671","objectType":"note","content":"

New, by me: Meta has filed a data breach notice confirming that *thousands* of people had their Instagram accounts hacked as part of a months-long campaign abusing its Meta AI chatbot.<\/p>

Meta's breach notice shows the hacks were far more widespread than first thought.<\/p>

More: https:\/\/this.weekinsecurity.com\/meta-confirms-thousands-of-instagram-accounts-were-hacked-by-abusing-its-ai-chatbot\/<\/a><\/p>

Sign up\/RSS for my free weekly newsletter: https:\/\/this.weekinsecurity.com\/<\/a><\/p>","url":"https:\/\/mastodon.social\/@zackwhittaker\/116703018430127671","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-06-06:objectType=thread:nonce=b230bdf557b82cb8","notice_info":{"local_id":"12710228","source":"ActivityPub"}},"published":"2026-06-06T13:45:55+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.social\/@zackwhittaker\/116703018430127671"}],"links":[{"url":"https:\/\/gnusocial.jp\/conversation\/6456353","rel":"alternate","type":"text\/html"}]}