Brutkey

AA
@AAKL@infosec.exchange

"Fake accounts often use profile photos that seem too good to be true. Whether it’s flawless lighting, professional-looking headshots, or model-tier appearances."

Bitdefender (sales pitch included): How to Spot a Fake Social Media Profile https://www.bitdefender.com/en-us/blog/hotforsecurity/how-to-spot-a-fake-social-media-profile #cybersecurity #Infosec

Walker
@Walker@infosec.exchange

@AAKL@infosec.exchange So to counter the polished fake AI social media headshots, everyone must now post their drivers license photo to their profile.

Once scammers pivot to fake drivers license photos for profile pictures, people will be forced to post a selfie from when they get out of bed in the morning, or the morning after Defcon is over.

And the cycle continues.

AA
@AAKL@infosec.exchange

@Walker@infosec.exchange Of course, the headshot is just the first clue, but what you say is troubling because there's a race now to force people to use digital IDs to navigate some websites. If I were a cybercriminal, I'd jump on those.

Walker
@Walker@infosec.exchange

@AAKL@infosec.exchange the possible requirement of digital IDs was not lost on my after I made the post.

The issue is that digital IDs are not the panacea as advertised. As reported at Defcon last week, the North Koreans are masters of creating fake passports, national ID cards, often tied to real identities; or using stolen IDs.

If we are all required to enter our real IDs to access these platforms the attackers would enter fake IDs, and we would be back at the starting gate again.

AA
@AAKL@infosec.exchange

@Walker@infosec.exchange Well, this doesn't help. It's like a hamster stuck on the wheel. Not to mention that the only people who think digital IDs are the answer are the ones pushing them for data collection and surveillance. It's almost sinister - like The Matrix.