'123456' password exposed chats for 64M McDonald's job applicants

It's funny how mcdonalds did everything in their power to make it almost impossible to run their mcdonalds app on a rooted phone, but their backend infrastructure is beyond broken (security wise)

Btw, I wondered why they flight root on the phone at all?

I have no idea... maybe they store their "coupons" locally and are afraid you'll clone them? Don't know, I eat there twice a year and it's not worth it :)

suhide in magisk makes my banking app work, but not mcdonalds :)

The McDonalds consumer-facing app is quite possibly the worst app from a major company I've ever encountered. It's shockingly bad.

My theory is they store payment information on the mobile app. The app connects to the store wifi automatically, even when going through the drive thru. And processes the payment then. I theorized it so they don’t store credit card info on their servers, simplifying their PCI audits. Presumably they think all that is better than preventing the app from running on rooted phones.

The UI is atrocious.

I do computers for a living and can barely navigate and figure out what’s going on.

Why does one even need an app for a fast food restaurant?

1. You can exchange privacy for 20% off.

2. Many franchises have a crummy PA system, so you can avoid this if you plan on using the drive-through.

3. Customization. It's very tedious for all involved to repeatedly request "no cheese", "no ice", "extra sauce", etc. for a very large (e.g., $100+) order.

I noticed it freezes up on me sometimes when I open it. I assume something is blocking instead of being asynchronous when it pings their servers, but instead of waiting to dismiss a loading screen it just shows the full app and like freezes.

It can be confusing for new or infrequent users.

I use it once a week and I don't find it annoying at all, except for the bug where it will let you complete an order for an airport McDonald's, and then soon after automatically cancel the order.

I don't eat that junk but my understanding is McDonald's have segmented their customers into two groups:

1) People who just want to eat McDonald's now and don't care about apps. They will put up with the normal prices which are quite high now.

2) Cheapskate people who wouldn't go to McDonald's much due to the pricing, but can be enticed to go through deals in the app they are happy to jump through hoops to get.

My guess is that they’ve got a million feature flags and a/b test variations going on because it’s just so tempting to “growth hack” in an app like that.