I’m Lovin’ It: Exploiting McDonald’s India APIs to hijack deliveries and order food for a penny
I’m Lovin’ It: Exploiting McDonald’s India APIs to hijack deliveries and order food for a penny
eaton-works.com I’m Lovin’ It: Exploiting McDonald’s APIs to hijack deliveries and order food for a penny
A series of API flaws in McDelivery India made it possible to order food for a penny, hijack other people’s delivery orders, view user information, and more.
You're viewing a single thread.
7
comments
A $240 gift card seems quite low for bugs that would allow you to order (essentially) free food, access the orders and invoices of other users, driver's personal information and their real time location.
Yeah I'd be insulted. I think a good compromise would be to demand a higher amount, but to be donated to a charity.
Like Ronald McDonald House Charities
Lol no no. How about donate to open source initiatives?
That's still insignificant compensation
7
comments