Comment by konovalov-nk

3 days ago

> what will the future look like, with sophisticated AI agents smart enough to hack into corporate systems?

"Ignorance is bliss" (c) Matrix

Oh, sweet-sweet ignorance.

About 4 weeks ago I've found SSRF and possible RCE on a very real website with a lot of web history the other day. And I traced it to `aws-solutions` org on GitHub that sits very close to real `aws` org. What do you think is happening?

And this website I spotted SSRF on, it seems to be used to manufacture fake news and inject them into "the past".

Why?

So if you see a company you never heard about, and you google it, google will index page and it will show you backdated article as if it was actually released long time ago.

But if you try to look at Web Archive of that article, it doesn't exist... I've been doing this OSINT research for 45 days on different fake recruiters that were spamming me on LinkedIn, and most of those websites with fake news are running Wordpress, classic.

My point is... while this story reeks of marketing, the actual criminals are out there doing whatever they want, and I've been fighting for my life trying to find a job and getting into increasingly large amount of fake recruiters and companies that have zero intent of hiring you.

I wasted 7 weeks on this...