Re:Finance worker pays out $25M after VC with deepfake CFO
by wjnc on Sunday February 04, 2024 @10:17AM
(#39250814)
At the end of the day even in large firms you only need to fool three or four eyes. Those eyes might get a lot of transactions to process and a certain sense of complacency might occur. The hope is that automatic controls will aid those humans with all kinds of checks, but even billion dollar transactions at the end of the day are human transactions.
[ Parent
| on HN ]
Re:Finance worker pays out $25M after VC with deepfake CFO
by wslh on Sunday February 04, 2024 @10:39AM
(#39251053)
I have been witness of spreadsheets passed through email, whatsapp, etc from one sector to another to initiate payments. It's all about trust perception. That is one of the weak links.
Re:Finance worker pays out $25M after VC with deepfake CFO
by Solvency on Sunday February 04, 2024 @11:06AM
(#39251358)
I don't get it. I work for a biggish company. Every time a user wants to join my Miro team I have to use a maze of ancient purchase order systems like Sage with multiple levels of approvals from our finance team. It's almost outrageously draconian but... not a penny goes by unpinched.
This is astounding levels of incompetence.
Re:Finance worker pays out $25M after VC with deepfake CFO
by wjnc on Sunday February 04, 2024 @12:07PM
(#39252037)
I’ll give you good odds that if you ever talk to the CFO about the transactions they personally sign off on, it’s a lot of emails and spreadsheets passed around. Processes are there for the little people, the big ones are chefsache. I also know what the biggest risk are. Not the automated stuff, not the very big M&A stuff, it’s the not yet automated routine combined payment order that is boring but rests on a few insiders to keep working. Insiders are very much in demand for these cons. The voice of the CEO is nothing, you need the proper tone, the proper pomp and circumstance.
Re:Finance worker pays out $25M after VC with deepfake CFO
by nvr219 on Sunday February 04, 2024 @11:16AM
(#39251479)
The reality is these processes, while on paper "applicable to all users", can be bypassed the higher up you go. Culture issue.
Re:Finance worker pays out $25M after VC with deepfake CFO
by thaumasiotes on Sunday February 04, 2024 @01:40PM
(#39253016)
That's not a culture issue. The alternative is that no one in the company has the power to do anything.
If processes can't be bypassed, then as soon as you implement a detrimental process, your company dies.
Re:Finance worker pays out $25M after VC with deepfake CFO
by lenkite on Sunday February 04, 2024 @01:49PM
(#39253109)
In other words, detrimental processes are only for the worker bees.
Re:Finance worker pays out $25M after VC with deepfake CFO
by thaumasiotes on Monday February 05, 2024 @03:39AM
(#39258710)
You don't want them anywhere. The fact that people exist who can bypass detrimental processes that apply to low-level workers is what nvr219 was complaining about.
Re:Finance worker pays out $25M after VC with deepfake CFO
by ilrwbwrkhv on Sunday February 04, 2024 @04:35PM
(#39254727)
You are a low level grunt. Directors and executives are not using sage for a lot of things.