alt Hacker NewsThe AI part does seem relevant because it enabled incredibly low-effort “social” engineering.
For what it’s worth I don’t think you can call this social engineering since there was no human on the other end, even though it appears similar.
The question is, if there were actual human support agents, would they have built additional safeguards to prevent social engineering in this manner?
Replies
Vrondi • today at 7:07 PM
There's no social engineering here, since all they have to do is copy and paste. This is a complete process design fail.
Why did the account recovery system need AI. Surely just an email would do? What added value would AI add?