685
McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’ (www.wired.com)
submitted 1 year ago by to c/technology@lemmy.world
68 comments fedilink hide all child comments
 

Paywall removed: https://archive.ph/sn2Ud

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 year ago (1 child)

The risk is that some unknown hacker discovered this vulnerability and abused it before the researchers discovered and reported it. It sounds like the company has confirmed that didn't happen, but they aren't 100% trustworthy in that regard, simply because they might have missed something.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 8 points 1 year ago

    yeah i know the risk, but the headline implies the data was exposed to a hacker who tried the password 123456 but thats not the case. A security researcher was investigating the application and accessed a test application with the password 123456 then found an API call which exposed the data and then he instantly reported it.

  • permalink
  • fedilink
  • source
  • parent