Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Two-Tier Encryption in the UK – Identical Apple Devices, Different Protection(macanorak.com)
    59comments
  2. Nokia Design Archive (2025)(aalto.fi)
    72comments
  3. Linux support is coming to Snapdragon X2 Series(qualcomm.com)
    212comments
  4. Owners mourn spoiled food after firmware update bricks Samsung smart fridges(arstechnica.com)
    75comments
  5. Ideas on modernizing the open-source desktop(lwn.net)
    294comments
  6. Claude discovers a novel enzyme system with CRISPR-like repeats(anthropic.com)
    724comments
  7. Enjoy Every Sandwich(bradmontague.substack.com)
    2comments
  8. RAM: the forgotten history (2024)(coredump.cx)
    2comments
  9. OpenAI agent hacked Australian government website, PM says(bbc.com)
    114comments
  10. The newest ESP32 can run Linux and it's getting close to a Raspberry Pi(xda-developers.com)
    32comments
  11. Meta takes down a critical video about meta AI Glasses after filming at Meta(reddit.com)
    242comments
  12. ArXiv receives multiyear commitments to support it as an independent nonprofit(arxiv.org)
    30comments
  13. When the Debugger Lies(danielmangum.com)
    10comments
  14. VSCode's SSH Agent Is Bananas (2025)(fly.io)
    166comments
  15. Early rogue AI agent activity and attempts to hack found on urlquery.net(transluce.org)
    160comments
  16. Contrastive Language Models(contrastive-lm.notion.site)
    29comments
  17. The "Windows XP Box" (2003)(mini-itx.com)
    37comments
  18. Virtio-nvgpu: Near-native Nvidia GPU access inside a KVM guest(github.com/nestrilabs)
    54comments
  19. Hackers influence ChatGPT and Gemini to direct users to scam centers(medium.com/arielsimon)
    15comments
  20. Oracle Cites 'Force Majeure' to Shield Itself on Controversial Data Center(bloomberg.com)
    5comments
  21. Fixing the Portobello Police Station Clock(pointinthecloud.com)
    110comments
  22. The Year of Internal Tools(geocod.io)
    8comments
  23. Why 'What's Opera, Doc?' looks like that(animationobsessive.substack.com)
    19comments
  24. Automated optimization of a molecular simulation program(shishir-iyer.medium.com)
    2comments
  25. Mercury 2.5 LLM hits 770 tokens per second(artificialanalysis.ai)
    79comments
  26. Women Who Sold Books Door to Door(jstor.org)
    6comments
  27. Making Tailscale Faster(tailscale.com)
    79comments
  28. Making portable my unportable transputer C compiler(nanochess.org)
    8comments
  29. Meta VR Glasses(meta.com)
    409comments
  30. The mystery animal on an ancient god's head(signoregalilei.com)
    37comments

Hackers influence ChatGPT and Gemini to direct users to scam centers

49 pointsby 2h agomedium.com
15 comments
2h agoHN ↗

ChatGPT, Gemini, and Google AI Overview are being poisoned by a massive AI disinformation attack. When users look up everyday info of hundreds of major companies, AI is delivering phishing traps disguised as trusted answers.

Attackers are flooding the web with carefully optimized posts, PDFs, reviews, and fake support pages, to trick AI into presenting fraudulent phone numbers, email addresses, and login pages.

The targets included Delta, Lufthansa, Qatar Airways, Chase, Bank of America, Airbnb, TripAdvisor, and hundreds more.

1h agoHN ↗

What’s the specific example and how does it work

1h agoHN ↗

That's happening across the board when it comes to models that feed off online information. Create a website with a false claim, have AI slurp it up and spit it back out when a user asks a question.

Happy elections.

1h agoHN ↗

That's very troubling. The scariest part is how easy it is, one Instagram post and you may change the customer phone number of Airbnb, or who is leading the election poles.

57m agoHN ↗

Oh no, my uncritical ingestion of data, based on the assumption that all data is of equal quality, and that more is better, has failed. How could this happen!

You've always needed to be critical of your sources, your teacher tried to explain that when you ripped of that Wikipedia article or clicked the first link in a Google search. How the fuck did the AI companies think they could avoid reading and rating the content they've been hovering up?

52m agoHN ↗

I don't think they did. Or those who did have been "encouraged" to leave a long ago.

10m agoHN ↗

Because their leaderships have defunded / fired all ethics researchers looking into their ongoing crimes and failures in favor of a bs "AI safety" narrative based around a creepypasta about an AI monster time traveling backwards to torture their staff for not maximizing shareholder value.

16m agoHN ↗

But how do you get AI to slurp up the site? It's quite hard for a random to get a site indexed these days.

1h agoHN ↗

It’s not just hackers - since legitimate sites block AI crawlers, the AI are just grabbing whatever will let them read anything - killing legit sites and feeding slop farms and feeding misinformation! The future is so bright!

1h agoHN ↗

Did takedowns for a brand's fake support numbers and the hard part was never finding them, it was that killing one PDF just moved it to a new Medium post by morning.

1h agoHN ↗

There's an age-old SEO / spamming thing happening here, but it's made worse by the LLMs just being unbelievably credulous. They'll wrap anything up in a veneer of authenticity, and Google's search AI box only adds to that.

I run into this all the time when I'm doing product work. I'll dump a call transcript from a feedback call into Claude, and it'll believe every word. "The user said they'd use this feature, you should build it!" No they won't! The whole point of doing this analysis is trying to separate the genuine information from the conversational niceties, and god the LLMs are terrible at that.

1h agoHN ↗

It's happening at the startup sphere too. There are companies now creating fake company pages to recommend and advertise products so that the LLMs can consume them.

28m agoHN ↗

...carried out by malicious actors, through automated campaigns...

Back at benevolence or malevolence.

17m agoHN ↗

I think whoever solves this problem, especially for seniors etc. would make a lot of money from the insurance companies.

14m agoHN ↗

I've been seeing the back-side of this as a mod at the Julia Discourse. Pagerank/SEO spam is ridiculously obvious and trivial to detect/block — links are all that matter. Many GEO spam posts are similarly obvious: someone posting about a cryptocurrency customer support hotline on a programming language forum is definitely spam. But recently spammers/scammers been using AI to _tailor_ posts to look much more authentic, posting "How to use Julia to analyze market statistics" referencing (without links!) a particular crypto exchange and then (sometimes) going back later to edit in phone numbers or the like.

What makes this even more painful is seeing all the good faith answers that such GEO posts spur from the community. It's far more abusive than SEO spam.