Hacker News new | ask | show | jobs
by talldayo 719 days ago
> in such cases where someone made you lets say give a OTP/password and got your money transferred out.

An easy prevention against this is to remind everyone to never, ever disclose personal details over the phone. Especially when someone else, even a loved one, solicits you for them. This was a problem pre-AI, it will get worse post-AI, but the general mistake is still avoidable. Teach people what to avoid and they will avoid it accordingly.

1 comments

Recently someone I know got a call where they mimicked their child's voice using AI and asked them to send immediate money otherwise child will be in danger. This has got me into thinking - my parents would also do the same for me/ and everyone's would-- add deepfake into it -- how the fuck we are support to assume people won't give emotional response? forget about personal details, people who care about you can might directly do a transfer.
> my parents would also do the same for me/ and everyone's would

Mine wouldn't? That's an obvious phone scam, they would call me directly before wiring $500 to some unproven weirdo over the phone.

> how the fuck we are support to assume people won't give emotional response?

For the same reason you assume people won't immediately become greedy when a Nigerian Prince emails them about an excellent opportunity to earn a few million dollars. Common sense has to play a part or else you're going to be manipulated with or without AI.

The same attack used to get SMS 2fa tokens can be used to capture incoming calls from your parents or grand parents. How is calling "you" going to protect you?
So my grandparents call me, get their call intercepted by a malicious MITM. The worst-case scenario! My AI counterpart is screaming over the line, saying that my legs are only moments away from being sawed off by the mysterious phone-operator that would only identify himself as "the Butcher".

They ask me what my middle name is, and my AI counterpart stops. 10-15 seconds go by, with the halloween chain-rattling CD spinning away in the background. The AI answers correctly in stunted breath, and my grandparents hang up so they can move on with their day. They've been getting calls like this for the past 30 years trying to convince them a family member desperately needs their Social Security number over the landline. If they fall for an AI-generated voice from an unknown caller I'd be genuinely surprised. These are decades-old social engineering scripts, people.