[rsnog] Developers Hack McDonald’s Reward System to Get Free Hamburgers
Zoran Perović
iConsult at perke.NET
Mon Feb 24 13:41:09 CET 2020
Mi u SOX-u redovno pratimo razne Threat Intelligence izvore, ali ovaj „incident“ je do sada najinteresantniji J
Pitam se kako stoje KFC i BK?
Pozdrav
Perke
Title: Developers Hack McDonald’s Reward System to Get Free Hamburgers
Source: Silviu Stahie, Hot for Security (Bitdefender)
Date Published: February , 2020
Excerpt:
"While software vulnerabilities or loopholes are sometimes used for
nefarious purposes, that’s not always the case. The same can be said of
white hackers and software developers who want to make the online world
a safer place.
McDonald’s has a promotions systems that offers rewards for some orders,
which is not out of the ordinary. But, according to a Vice report, a
couple of developers found the code behind the promotion system could be
exploited in a way that would allow them to get pretty much anything
from the fast-food chain.
Their first attempt was in Berlin. They generated a €17 voucher, placed
an online order, and got the OK. The two developers didn’t want to pick
it up initially, but they eventually went to the store and explained the
situation. Surprisingly, the manager said that they should take the
order. They tried again, in another restaurant, in Hamburg, for 15
burgers, and it worked. But they notified the manager and canceled the
order before it was prepared."
To read the complete article see:
<https://hotforsecurity.bitdefender.com/blog/developers-hack-mcdonalds-reward-system-to-get-free-hamburgers-22356.html>
See also:
<https://www.vice.com/en_au/article/4agvdw/mcdonalds-hack-free-food>
Come to our events: https://partners.team-cymru.com/rise-SEPT10
DNB: https://www.team-cymru.com/DNB.html
Commercial: https://bit.ly/DNBCommercial
Data Shares: https://bit.ly/DNBCommunity
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.rnids.rs/pipermail/rsnog/attachments/20200224/3335c179/attachment.htm>
More information about the rsnog
mailing list