Today Instagram had this massive exploit where hackers were just stealing rare handles left and right. Hundreds of accounts gone. People losing handles they’ve owned since 2010, some worth hundreds of thousands. I own a few rare ones so I was actually stressed watching this happen in real time, which I haven’t been in years. Obama White House account got hit. These aren’t some random new accounts, these are verified, locked down accounts and they still got compromised. The thing is the exploit is so simple it’s almost funny. Attacker goes to Forgot Password, says their account is hacked, turns on a VPN to match the target’s location (which now you can find on the about section of the page). Instagram’s AI support flow asks them to verify with a selfie. They grab a photo from the target’s profile, run it through an AI video generator to make an animation of the person’s face moving around, upload that to Meta’s AI as proof. And Meta’s AI just accepts it because it can’t tell the difference between a real selfie and an AI-generated video of someone’s face . Once verified they change the email to theirs. Password reset link goes to their email. They own it now. 2FA gets bypassed somehow in the process but honestly I don’t know exactly how, just that it did. Point is even locked down accounts went down. Then you try to recover your account and you’re talking to a chatbot that has zero ability to help. You can’t escalate to a human. You’re just stuck. Your asset is gone and there’s no one to call. The whole thing just highlighted how stupid it is to automate account security without any human in the loop. One AI fooling another AI while there’s literally no person anywhere to catch it. Meta took hours to even acknowledge it while accounts were getting stolen every minute. Now thankfully it’s patched but I don’t think it will be the last one. Stay safe!

Disney CEO Josh D’Amaro is reportedly exploring a “super app” that would combine Disney with park, cruise and retail apps to allow users purchase tickets, shop, play and stream all in a single app, according to Bloomberg. Story: bloomberg.com/news/articles/…

🚨 FREE Access to Retail Keyword Stats 🚨 We just launched one of the most valuable things we've ever built, and we're giving it away completely for free, no registration required! It's an API endpoint that lets you search a keyword, and it gives you stats on how that keyword performs in Retail sales when it is the exact SLD, at the start, at the end, and somewhere in the middle. For each keyword position it will tell you the number of sales, total dollar volume, average price, highest price, and standard deviation. You can also download the entire list of more than 100k unique keywords, including all placements and stats. This not only helps you identify valuable keywords, it also helps you understand programmatically which position is better for each one. For example, look at the attached screenshot of a search on "agent". You can instantly see that it has a higher sales velocity at the end rather than at the start. But you can also quickly see that being at the start results in a 33% higher average sale price than at the end. This information is extremely valuable for domain spinners, appraisers, and AI agents, to better understand keyword values in Retail sales. Please note: unlike the Placement search on our homepage, these placements are mutually exclusive. On our site, searching "shop" could return shop․net if you search Exact, At the Start, At the End, or In the Middle. We generally err on the side of showing you something that might potentially be of interest. But in this tool a sale of Shop․net would only contribute to the "Exact" stats, favoring precision over all else. Enjoy! Link is in the comments 👇

Introducing Dasher Tasks Dashers can now get paid to do general tasks. We think this will be huge for building the frontier of physical intelligence. Look forward to seeing where this goes!