Hacker News new | ask | show | jobs
by ma2kx 7 days ago
Meta allowed an LLM to change users email address for a password reset.

Funny times are ahead...
1 comments
nneonneo 7 days ago
No, you don't understand! Meta told us the LLM itself "worked properly and functioned as intended" and it was only due to a bug in a "separate code path" that made this attack possible. Don't go around blaming innocent LLMs!

(/s)

link