6 ms·
Ferrari exec foils deepfake attempt by asking a question only CEO could answer
- chii 2y agosooner or later, everyone's gonna have to have some sort of passphrase that you authenticate with before acknowledging it's the real person.
- TheBozzCL 2y agoWhatever it is we do, I predict that trust of internet communications will go down significantly. Maybe we will pivot back to in-person meetings for important transactions.
- rwmj 2y agoYou learned nothing from Crowdstrike? Some large company will claim to invent a product that solves the problem. It will fail some of the time, but that doesn't matter as customers of the product will have someone to blame. No one will ever be actually held accountable for failures as some combination of lawsuits and "you're holding it wrong" will be sufficient to deflect liability from the large company. And anyway there's no real choice as all the other large companies who also have solutions in this area are equally as bad.
- HPsquared 2y agoAnd that company will have a huge library of deepfake models stored on a poorly-secured server, which will leak.
- kreetx 2y agoHow we already authenticate is cryptography, we just need to use it more.
- moooo99 2y agoThe problem is that crypto is hard. When something is hard, people tend to pay someone else to do it. It only takes that one party to commit a private key to a public GitHub for the whole house of cards to come crashing down.
- intended 2y agoAh. There’s the sentence I was looking for! There’s many hopes riding on decentralized options. But verification is hard. Which is why all information networks tend to concentrate in some form or the other - to reduce the effort needed to authenticate
- Muromec 2y agoHTTPS is not hard, it's not even expensive anymore. Nothing stops us from using the same X509 rails backed by the same government that issued your id or driving license (or corporate access card) to do the client certs too. We even have hardware keys that are capable of that in most big corp techworkers pockets already.
- chii 2y agothe problem is that these are all trusted side channels (or regular channels that have been vetted). When an "emergency" happens, and the caller claims they're not able to use the regular channels of communication, how do you authenticate them?
- kreetx 2y agoWhen I say cryptography, I mean some means of end-to-end encryption (i.e, something which can't be faked or MITMed). What is hard is getting this implemented in consumer apps in a way that user doesn't need to know nor fully understand it, but only understand it to a degree to differenciate unsafe channels from safe.
- masklinn 2y agoThat has a long history in spycraft (and milint): sign/countersign, challenge/response, recognition signals, paroles…
- euroderf 2y agoI predict that when the person being challenged forgets the passphrase for the current time period, "Yo Mama" will often work.
- trte9343r4 2y agoPGP solved this problem decades ago!
- moooo99 2y agoUnfortunately PGP still has to solve to problem of how to use it properly without requiring a PhD
- MaxBarraclough 2y agoAll major VOIP solutions are already cryptographically secured. In this case the attacker was not able to pull off anything akin to a caller ID impersonation, they made the call from an unknown number and tried to explain it away: > The Vigna deepfaker began explaining that he was calling from a different mobile phone number because he needed to discuss something confidential
- JumpCrisscross 2y ago> they made the call from an unknown number and tried to explain it away Also, phones get stolen and people lose their phones. This is fundamentally a social problem. Technology can help but not solve it.
- fragmede 2y agoChatGPT's read the manual for you and you can ask it for the correct incantation to use.
- Am4TIfIsER0ppos 2y agoChapgpt doesn't read shit, doesn't remember shit, and can't tell you shit. It will repeat a common string of words which would probably be "pgp is too hard to use".
- fragmede 2y agohttps://chatgpt.com/share/d1f05726-8d41-4c3e-9c82-56a02aaea465 https://chatgpt.com/share/d1f05726-8d41-4c3e-9c82-56a02aaea4...
- dredmorbius 2y agoShibboleth: <https://en.wikipedia.org/wiki/Shibboleth https://en.wikipedia.org/wiki/Shibboleth>
- NFVLCP 2y agoWe'll all need Inception-style totems soon.
- chippiewill 2y agoReminds me of the questions they'd use in Harry Potter to identify themselves "What creature sat in the corner the first time that Harry Potter visited my office at Hogwarts?"
- Refusing23 2y agoif thats the only question, it wont work for long
- johnnyanmac 2y agoI assume the actual questions will relate to conversations had in private in reality. Anywhere from "where did we go on [date]" to "I asked you X question back then, what was your reponse?"
- sigmoid10 2y agoFor a universe where everyone can turn into everyone, it seems this is way underutilized. Like, every single secret gathering or non-public meeting would need to start with everyone verifying their identity. Especially when parties are persecuted.
- csunbird 2y agoTo be fair, when you are meeting under a place that is protected by magic (Fidelius Charm?) to make sure that only people who know about the secret place can attend the meeting (and this information can only be shared by a single person, the secret keeper), it automatically validates that the people joining the meetings are authentic.
- wizzwizz4 2y agoExcept that time it didn't, which every character in those secret meetings should be aware of. (There's no point trying to defend the plot holes in Harry Potter: it's an entertaining story and important to many people, but well-written it is not.)
- stonethrowaway 2y agoThis has got to be one of the more elaborate book placements I’ve seen. Props to them for priming the sell by having a likeable story.
- stavros 2y agohttps://archive.is/REF7T https://archive.is/REF7T
- tjmc 2y agoWhat's wrong with Wolfie?
- fasteo 2y agoYour parents are dead
- dredmorbius 2y agoFor the culturally deprived, a Terminator 2 reference: <https://bw.vern.cc/terminator/wiki/Max https://bw.vern.cc/terminator/wiki/Max> <https://yewtu.be/watch?v=uaWw5wuBPs4 https://yewtu.be/watch?v=uaWw5wuBPs4>
- pchangr 2y agoI prefer the term “culturally challenged”.
- dredmorbius 2y agoOr in this specific instance: unterminated.
- deleted 2y ago[deleted]
- shiroiushi 2y agoHopefully the scammers will try this again with Crowdstrike and Xitter and succeed this time.
- baq 2y agodial a 2fa code on every call and have the other side do the same. easier for video calls - present a 2fa qr code to the camera. everyone's a spy now.
- masklinn 2y agoEveryone was a spy before. We’ve graduated to everyone being a scammer / impersonator / saboteur.
- baq 2y agoI disagree. It's so much worse than that because there are way more scammers than there's everyone: robots have that job now.
- INTPenis 2y ago2fa and signing. I think PKI will see an explosion soon. Everything will be signed, even streaming audio and video.
- Lockal 2y agoThen you can literally be the man-in-the-middle, just organize 2 parallel calls.
- vasco 2y agoI mean it's a funny anecdote but it's a bit disheartening when the article is just an ad for a book.
- netsharc 2y agoI don't think that's the case, but geez whatever "AI" (ironically) they used to translate the book title botched it and made a fucking weird title... Google Translate changed it to "Decalogue of complexity. Act, learn and adapt in the incessant evolution of the world". Evolution is a much better word than "Becoming", but "Acting, Learning and Adapting" from their translation is better.
- dredmorbius 2y agoThe thought had occurred to me about seven years ago that improvements in communications technologies ultimately undermine trust. I'd posted to my (now redditstrike'd, due to repeated trust violations by Reddit's leadership, irony noted) subreddit at the time. Archived copy: <https://web.archive.org/web/20230603101919/https://old.reddit.com/r/dredmorbius/comments/6jqakv/communications_advances_undermine_trust/ https://web.archive.org/web/20230603101919/https://old.reddi...> It turns out that the inconvenience and costs of face-to-face and even physical written communications are both their bad and good characteristics. Yes, you incur costs, yes, they're inconvenient, but you can far more readily verify that someone is who they say they are, and increase any possible attackers' costs phenomenally. The thought occurs that very limited communications / interactions channels may be an increasingly valuable trust feature in future, though the current pitfall of such approaches is that you're very often interacting with someone who's using the same (or very similar) insecure systems as you'd be using yourself directly. The other possibility is that new protocols and institutions will emerge to help deal with the problem. One interpretation of the Axial Age[1] is that the emergence of writing and sprawling empires co-evolved social-alignment mechanisms, a combination of moral philosophy and religion, which enabled at least four cultures to deal with the emerging complexities and trust challenges, in persia, India, China, the Greco-Roman world, and the Levant. The religious and philosophical institutions which emerged emphasized trust, obedience, loyalty, and respect, and probably had much to do with the success of those societies. Keep in mind that the level of reliability needn't match what we generally expect today in high-trust cultures, only that there be a relative advantage to the contemporary immediate neighbours those empires engaged with. It's also true that comms can interact positively to trust, or at least to validation and enforcement, though audits, registers, double-entry bookkeeping, monitoring, and surveillance. Though to my mind those replace social trust values with technological trust mechanisms. Which somewhat underlines my initial point. _______________________ Notes: 1. See: <https://en.wikipedia.org/wiki/Axial_Age https://en.wikipedia.org/wiki/Axial_Age>
- scandox 2y ago> What was the title of the book Vigna had just recommended to him a few days earlier (it was Decalogue of Complexity: Acting, Learning and Adapting in the Incessant Becoming of the World by Alberto Felice De Toni)? You couldn't make it up.
- troelsSteegin 2y agoThe book is the develpoment of a lecture by De Toni: https://www.youtube.com/watch?v=bnTjgI14K4c https://www.youtube.com/watch?v=bnTjgI14K4c via auto translate, the 10 points are: Complexity has always existed. Complexity always increases. There is a light side and a dark side of complexity. The signature of complexity is the power law. Complexity manifests itself according to models that can be reconstructed ex post. There is the dilemma of complexity. The complexity of the social world is the highest. Complexity, paradoxes and metamorphoses: the hidden plot. Autonomy and cooperation: the mix for navigating complexity. Complex thought and simple action.