“The first proper zero auth password reset I’ve seen in production.”
A username and a VPN were enough to talk Meta’s support AI into resetting passwords and skipping 2FA entirely. The Obama White House account got taken over. Meta let an automated help desk hand out accounts to anyone who asked nicely, and a black market sprang up to sell the good handles. This is what happens when you fire the humans and let the bot hold the keys.