I’m Lovin’ It: Exploiting McDonald’s APIs to hijack deliveries and order food for a penny
eaton-works.com
A series of API flaws in McDelivery India made it possible to order food for a penny, hijack other people’s delivery orders, view user information, and more.
  • brie@programming.devEnglish
    2·
    1 day ago

    Let me guess, you signed an NDA, and won’t tell anyone which brands had badly configured access control in their web apps?

    Each red flag is okay, but all together is rather strange. It’s kinda classic to say that pajeets write shitty code.