685
McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’ (www.wired.com)
submitted 1 year ago by to c/technology@lemmy.world
68 comments fedilink hide all child comments
 

Paywall removed: https://archive.ph/sn2Ud

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 year ago (10 children)

Wasnt it a security researcher and not a hacker?

  • permalink
  • fedilink
  • source
  • hideshow 10 child comments
    •
  • [–] 19 points 1 year ago (5 children)

    "Hacker" doesn't always imply one acting with malicious intent.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 10 points 1 year ago (4 children)

    If the 90s taught me anything, it's that hacking is done exclusively on monochrome green monitors, with dos. Except once they hack in, the monitor is full color, and somehow has access to every video camera on the planet. With the ability to enhsnce resolution seemingly to magical levels where you can see a clear reflection in someones pupil.

    ENHANCE!!!

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 1 year ago

    Nah, they evolved way past that in the following decades.

    Sometimes when they're in a hurry they create GUI interfaces using Visual Basic to track IP adresses.

    And sometimes, if they're very good, a hacker can manually carve a virus in a piece of bone using fractal patterns. They can use that to hack the computer scanning the bone so it adds a zero in thresholds for CPU heat monitoring and make it instantly catch fire.

  • permalink
  • fedilink
  • source
  • parent
    • load more comments (-1 replies)
  • [–] 3 points 1 year ago (1 child)

    The risk is that some unknown hacker discovered this vulnerability and abused it before the researchers discovered and reported it. It sounds like the company has confirmed that didn't happen, but they aren't 100% trustworthy in that regard, simply because they might have missed something.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 8 points 1 year ago

    yeah i know the risk, but the headline implies the data was exposed to a hacker who tried the password 123456 but thats not the case. A security researcher was investigating the application and accessed a test application with the password 123456 then found an API call which exposed the data and then he instantly reported it.

  • permalink
  • fedilink
  • source
  • parent