josephcox

@josephcox@infosec.exchange

co-founder of 404 Media (404media.co). Former VICE's Motherboard Signal: +44 20 8133 5190. Wickr: josephcox. Email: joseph@404media.co. Twitter: https://twitter.com/josephfcox

This profile is from a federated server and may be incomplete. Browse more on the original instance.

josephcox, to random

New from 404 Media: applying to a host of jobs—including FedEx, McDonald's, CVS—now requires a bizarre personality quiz with blue aliens run by a company called Paradox.ai. We tested it out by applying for job at Olive Garden.

https://www.404media.co/low-paying-jobs-require-bizarre-personality-evaluation-from-ai-company/

josephcox, to random

New: the Taliban took control of the domain "queer.af" (af being the TLD of Afghanistan). With the Taliban now controlling the country, it is taking back domains. This had the effect of killing the queer.af Mastodon instance https://www.404media.co/taliban-shuts-down-queer-af-domain-breaking-mastodon-instance/

josephcox, to random

New from 404 Media: Microsoft's Copilot, its AI chat bot increasingly built into its products, will start typing answers to your questions then delete them in front of your eyes. Seems to be mostly for sexual topics. An unusual moderation strategy https://www.404media.co/microsofts-ai-will-delete-its-own-answer-before-your-eyes/

josephcox, to random

New from 404 Media: a woman is bringing a class action lawsuit against massive sex toy company Adam and Eve for sharing information about her sex toy searches with Google, including what she added to her cart (“Pink Jelly Slim Dildo”) https://www.404media.co/woman-sues-sex-toy-retailer-adam-and-eve-claiming-it-shared-data-about-her-dildos/

josephcox, to random

This week's Behind the Blog is out!

josephcox, to random

New: an Apple executive lobbied against a strong right-to-repair bill, which is the first time the company has had an employee actively outline its stance on right to repair at an open hearing. Shows still intends to control its own repair ecosystem https://www.404media.co/apple-is-lobbying-against-right-to-repair-again/

josephcox, to random

Here's just how easy it was to generate a realistic photo of a fake ID in minutes using "neural networks," that I then used to bypass the identity verification check on a cryptocurrency exchange.

Listen to the full episode here: https://www.404media.co/404-media-podcast-inside-a-fraud-factory-onlyfake/

video/mp4

josephcox, to random

New from 404 Media: This Guy Has Built an Open Source Search Engine as an Alternative to Google in His Spare Time

"I found it very weird that there essentially is no way to browse the web in an open manner. So that's what I am trying to build." https://www.404media.co/this-guy-is-building-an-open-source-search-engine-in-real-time/

josephcox, to random

The viral story about a botnet of toothbrushes leading to a DDoS attack is almost certainly not real. We got a statement from Fortinet saying their story about it was hypothetical. You all really gotta get a grip sometimes 🤡 https://www.404media.co/the-viral-toothbrush-ddos-botnet-story-almost-certainly-isnt-real/

josephcox, to random

The 404 Media Podcast is up!

  • Me on the site that creates fake IDs in minutes
  • Emanuel on AI GILFs
  • Sam on 4chan 'DignifAI'
  • Subscibers-only: how Emanuel followed the Instagram to investment scam pipeline

Spotify/Apple etc: https://www.404media.co/404-media-podcast-inside-a-fraud-factory-onlyfake/

josephcox, to random

New from 404 Media: two men allegedly scammed Apple out of $2.5 million by hacking a company that had access to Apple's backend. But there's more: one is a security researcher that has reported vulns to Apple. Apple even thanked him after he was arrested https://www.404media.co/security-researcher-allegedly-hacked-apples-backend-scammed-2-5-million/

josephcox, to random

I went on @PopularFront_ to talk about encrypted phones, Iran hiring Hells Angels for a hit on US soil, and 404 Media more broadly. Independent media talking independent media. As a paid subscriber to Popular Front, encourage you to check it out https://podcasts.apple.com/us/podcast/popular-front/id1364539980?i=1000644326740

josephcox, to random

New impact from 404 Media: OnlyFake, the underground website we showed allowed anyone to make highly convincing photos of fake IDs in minutes, has gone dark. Comes after our investigation showing it could be used to bypass ID verification

"Website down?"
https://www.404media.co/onlyfake-neural-network-fake-id-site-goes-dark-after-404-media-investigation/

josephcox, to random

New (and obviously NSFW): AI generated grandma porn is flooding the internet, getting millions of views. Also to verify accounts, people have to upload a verification video. There are obviously AI generated ones on some sites, unclear if worked https://www.404media.co/ai-generated-grandma-porn-is-flooding-the-internet/

josephcox, to random

New from 404 Media: Patternz, a global phone spy tool which is built on advertising data, was specifically marketed as a "riot detection" tool, with maps pointing to New York City. Shows the aspirations of what companies selling this tech envision it for

https://www.404media.co/patternz-phone-spy-tool-pitched-for-riot-detection-in-nyc/

josephcox, to random

New from 404 Media: 4chan is now using AI to put clothes back on women they deem "undignified." It's a bizarre, and equally sexist, flip side to the nude generating deepfake apps
https://www.404media.co/dignifai-4chan-is-editing-pictures-to-clothe-women/

josephcox, to random

New from 404 Media: people are distraught that current VR porn does not work on the $3,500 Apple Vision Pro https://www.404media.co/a-3-500-chastity-belt-early-apple-vision-pro-adopters-alarmed-to-learn-vr-porn-doesnt-work/

josephcox, to random

New from 404 Media: inside the underground site where "neural networks" churn out fake IDs

  • I tested the service, called OnlyFake, made two IDs in minutes
  • I then used one to successfully bypass the identity verification check on a cryptocurrency exchange
  • Massive implications for crime, cybersecurity. What does it mean for us when fake IDs are a mouse click away?

https://www.404media.co/inside-the-underground-site-where-ai-neural-networks-churns-out-fake-ids-onlyfake/

josephcox,

Here is how I used it to bypass identity verification on the cryptocurrency service OKX:

  • asks for passport
  • take photo of this one I made on OnlyFake
  • site reviews it
  • success

https://www.404media.co/inside-the-underground-site-where-ai-neural-networks-churns-out-fake-ids-onlyfake/

image/jpeg
image/jpeg
image/jpeg

josephcox,

Update: @RonWyden comments on our investigation into neural networks + fake IDs. Says it shows the need for secure, authenticated IDs https://www.404media.co/inside-the-underground-site-where-ai-neural-networks-churns-out-fake-ids-onlyfake/

josephcox, to random

This week's Behind the Blog is out!

  • me on the tech CEO hearing
  • Emanuel on social media companies being in their IDGAF era with ads
  • Sam on her recent moves

https://www.404media.co/behind-the-blog-social-media-arkstorm/

josephcox, to random

New from 404 Media: the Instagram ad to investment scam pipeline.

Ads impersonating famous rich people (Bill Ackman, Cramer, Cathie Wood etc) funnel people to WhatsApp groups. Scammers then text you over SMS, encourage to send them money over Cash App https://www.404media.co/fake-bill-ackman-and-jim-cramer-instagram-ads-are-trying-to-take-my-money/

josephcox, to random

The 404 Media podcast is up!

josephcox, to random

New: impassioned, highly convincing piece from the two reporters who have followed deepfakes closer than anyone. Say nothing will really change until something even bigger than the viral Swift images happens—some sort of "incident" with collateral damage

https://www.404media.co/taylor-swift-deepfakes-ai-generated-porn/

josephcox, to random

New from 404 Media: Binance code & internal passwords exposed on GitHub for months. Includes code for how Binance implements 2FA, much more

Legal demand says GitHub user is “hosting [..] leaks of internal code which poses significant risk to BINANCE.”

https://www.404media.co/binance-internal-code-and-passwords-exposed-on-github-for-months/

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • thenastyranch
  • magazineikmin
  • InstantRegret
  • GTA5RPClips
  • ethstaker
  • Youngstown
  • everett
  • slotface
  • osvaldo12
  • rosin
  • mdbf
  • kavyap
  • DreamBathrooms
  • provamag3
  • ngwrru68w68
  • Durango
  • modclub
  • cubers
  • khanakhh
  • Leos
  • tacticalgear
  • cisconetworking
  • vwfavf
  • tester
  • anitta
  • normalnudes
  • JUstTest
  • All magazines