I’m Lovin’ It: Exploiting McDonald’s India APIs to hijack deliveries and order food for a penny

https://eaton-works.com/2024/12/19/mcdelivery-india-hack/

377 points · 8 comments · view on lemmy.world

8 Comments

NoForwardslashS@sopuli.xyz · 125 pts · 1y (4 replies)

A $240 gift card seems quite low for bugs that would allow you to order (essentially) free food, access the orders and invoices of other users, driver's personal information and their real time location.

walter_wiggles@lemmy.nz · 29 pts · 1y (3 replies)

Yeah I'd be insulted. I think a good compromise would be to demand a higher amount, but to be donated to a charity.

Etienne_Dahu@jlai.lu · 3 pts · 1y (1 reply)

Like Ronald McDonald House Charities

walter_wiggles@lemmy.nz · 4 pts · 1y

Lol no no. How about donate to open source initiatives?

PlexSheep@infosec.pub · 3 pts · 1y

That's still insignificant compensation

AlecSadler@sh.itjust.works · 34 pts · 1y

Fantastic read!

TheKMAP@lemmynsfw.com · 31 pts · 1y

$240 LMAO

Treczoks@lemmy.world · 8 pts · 1y

And what an impressive list of bugs that is...