←back to thread

'123456' password exposed chats for 64M McDonald's job applicants

(www.bleepingcomputer.com)
111 points nan60 | 3 comments | 11 Jul 25 21:48 UTC | HN request time: 0.001s | source
Show context
ajsnigrutin ◴[12 Jul 25 00:29 UTC] No.44538196[source]▶
It's funny how mcdonalds did everything in their power to make it almost impossible to run their mcdonalds app on a rooted phone, but their backend infrastructure is beyond broken (security wise)
replies(3): >>44538213 #>>44538473 #>>44539366 #
1. hippich ◴[12 Jul 25 00:31 UTC] No.44538213[source]▶
Btw, I wondered why they flight root on the phone at all?
replies(2): >>44538245 #>>44538496 #
2. ajsnigrutin ◴[12 Jul 25 00:36 UTC] No.44538245[source]▶
I have no idea... maybe they store their "coupons" locally and are afraid you'll clone them? Don't know, I eat there twice a year and it's not worth it :)

suhide in magisk makes my banking app work, but not mcdonalds :)

3. le-mark ◴[12 Jul 25 01:25 UTC] No.44538496[source]▶
My theory is they store payment information on the mobile app. The app connects to the store wifi automatically, even when going through the drive thru. And processes the payment then. I theorized it so they don’t store credit card info on their servers, simplifying their PCI audits. Presumably they think all that is better than preventing the app from running on rooted phones.