I used deepfakes & injection attacks to hack an identity verification tool used for remote workforce, helpdesk, & onboarding…until they updated the tool to catch me. Thank you Incode Technologies for having me hack you 110+ times to find the latest vulns and fix them together 🤖🤘

Tested mobile & browser: hard/software vid injection, deepfakes, replays, emulators, rooted devices, manipulated ids. Mobile held up every time. Web flows were the 1 way in. When we got in w/ web hard/software vid injection, we gave those vulns to Incode & they fixed them quick.

One of the coolest parts of my job, getting to hack for good. Test every attack method used in the wild, assume there will be some vulns, and fix them quick. Get our full Pentest Report from @IncodeIdentity and see what they can do at:

@IncodeIdentity Team shiesty

@IncodeIdentity loooool

@IncodeIdentity This is how I feel wearing it

This is exactly why trust verification is becoming a bigger challenge than traditional cybersecurity. The attack surface is no longer just code and infrastructure. It's identity, voice, video and human decision-making. Interesting to see how quickly defensive systems need to evolve when attackers can generate realistic synthetic identities at scale.

@IncodeIdentity Hey Rachel, you look good with the beard! 😂 Keep up your good fight, always love to see your work, you do such a great job!

@IncodeIdentity Ha thank you!