all 2 comments

sorted by: hot top controversial new old
[–] 9 points 1 year ago (1 child)
  • 68 comments in c/technology@lemmy.world view that post
    [–] 116 points 1 year ago (3 children)

    I guess I need to change the password on my luggage

  • source
  • hideshow 3 child comments
  • [–] 69 points 1 year ago (1 child)

    12345? Amazing, I have the same combination on my luggage!

  • source
  • hideshow 1 child comment
  • [–] 44 points 1 year ago (2 children)

    I hate any company that uses or builds AI to screen out hires so, so much. Tagging metadata is OK, but filtering is just evil (am/have been a hiring manager).

    The company also added that it’s instituting a bug bounty program to better catch security vulnerabilities in the future. “We do not take this matter lightly, even though it was resolved swiftly and effectively,”

    I also hate it more that I can't hate them for doing the right thing.

  • source
  • hideshow 2 child comments
  • [–] 7 points 1 year ago

    They only did the right thing after getting caught openly doing the wrong thing, so I'd say I'd still be pissed.

    They should have never put the system in place with such a simple vulnerability (which to me) says they take such a laxodasical approach to security that I wouldn't trust them even now.

  • source
  • parent
  • Speak for yourself, I'm holding out hope that the universe is actually a little fair, and that the dolt responsible to creating that password, and subsequently fucking over millions of people has their testicles ruptured. Who are these idiots?

  • source
  • parent
  • [–] 86 points 1 year ago (2 children)

    "Hacker" when the password could be guessed by an elementary student. Jfc.

  • source
  • hideshow 2 child comments
  • [–] 40 points 1 year ago (8 children)

    I'm so lucky that my password is hunter2

  • source
  • hideshow 8 child comments
  • [–] 18 points 1 year ago (4 children)
  • [–] 26 points 1 year ago (4 children)

    When I used to work at McDonald's they required a fingerprint to clock in and out. They then apparently sold everyone's biometric data. I got some kind of settlement thing but it was like $20 or something. So that was nice... I guess

  • source
  • hideshow 4 child comments
  • [–] 19 points 1 year ago

    In the future, actual hacking will just involve social engineering corporate ai systems ( aka prompt hijacking )

  • source
  • [–] 38 points 1 year ago* (17 children)
  • [–] 48 points 1 year ago

    I don't think you were quite grasping the scope the McDonald's operates at. That's only a couple hundred per location, and fast food restaurants tend to have extremely high turnover, so that's definitely not an unrealistic number.

  • source
  • parent
  • [–] 21 points 1 year ago (6 children)

    ETA? Estimated Time of Arrival?

    One of us doesn't know what that stands for. I feel like the time my grandpa died, and mom sent me an email telling me "We're going to the funeral this Friday to pay respects to grandpa. LOL!"

    I was quite confused. Turns out she grew up with "Lots Of Love". For a second she seemed like she turned into an absolute psychopath, for like....no reason.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 37 points 1 year ago* (4 children)

    ETA? Estimated Time of Arrival?

    In this context, it means "Edited To Add". I do wish they abbreviated it some other way, since "Estimated Time of Arrival" is a much more common meaning. I would accept "E2A" or something stupid, as long as it was more unique. Alternatively, they could just use "Edit:".

    Edit: added link.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 14 points 1 year ago (2 children)

    This is my first time reading about this alternate "ETA" initialism. Interesting...

  • source
  • parent
  • hideshow 2 child comments
  • [–] 9 points 1 year ago (5 children)

    They have over 40k locations. Many are 24/7. They also surely churn through employees, have many part time employees, and probably get many more applicants than they hire.

    The employees will be hired by the franchisees but they still use the McDonalds software.

    Millions is not a surprise to me at all. Perhaps that it's tens of millions is a little surprising, but it still seems within the realm of possibility.

  • source
  • parent
  • hideshow 5 child comments
  • [+] -6 points 1 year ago (4 children)

    Many are 24/7.

    Lies detected.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 8 points 1 year ago (3 children)

    Are you saying that there are not many McDonalds that advertise 24/7 service, or that they advertise this but don't actually provide it?

  • source
  • parent
  • hideshow 3 child comments
  • [–] -1 points 1 year ago (2 children)

    I've never seen any mcdonalds advertise or service 24/7 schedules. Not since the pandemic.

    Walmart and Target stopped too.

    Walgreens/CVS is the only thing I know that still does 24/7.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 12 points 1 year ago

    I live in New Zealand and there are many 24/7 McDonalds in busy areas. Clicking randomly on their NZ map it's pretty easy to find them: https://mcdonalds.co.nz/find-us/restaurants

    It's the same with Australia: https://mcdonalds.com.au/find-us/restaurants

    Actually, the same for the US. It's not hard to find 24/7 ones (you need to search for a city before they show on the map): https://www.mcdonalds.com/us/en-us/restaurant-locator.html

    screen shot of mcdonalds restaurant search showing many 24 hour mcdonalds in chigago

  • source
  • parent
  • [–] 18 points 1 year ago (5 children)

    "Spaceballs: the HR Robot"

    Seriously though, who the fuck uses 123456 as the password for anything? The morons pulling shit like this are making bank while the people brought onboard by McDonalds make scratch by comparison, and would be crucified for fucking up even a fraction as much as this. Millions, with six zeroes, millions of applicants' data stolen from an account with the kind of password that a kid would use on their home computer. Fuck, this makes me so mad, the sheer incompetence.

  • source
  • hideshow 5 child comments
  • [–] 0 points 1 year ago* (2 children)

    I did something kinda similar when I applied. Why put effort into remembering a new password when I was only going to use it once to fill out a job ap? Wants anyone even going to do with my account?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 1 year ago* (last edited 1 year ago) (1 child)

    Goddamn it man, not the user account password, the fucking admin account password. Did you even read the article? Every single user account's information was compromised, not one random jerk with 123456 for their password.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 13 points 1 year ago (1 child)

    Why do you even need a hiring bot for McDonalds? Maybe for managers but a McJob is a McJob.

  • source
  • hideshow 1 child comment
  • [–] 14 points 1 year ago

    I help folks with disabilities get jobs, so I'm familiar. I generally avoid fast food for my people, because it's degrading and no one really wants a McJob. That being said, the bot actually makes it easier to apply, and they immediately schedule an interview...because they don't care what your resume says and they just need warm bodies to throw at angry customers. Again, I avoid it for my folks wherever possible.

  • source
  • parent
  • [–] 11 points 1 year ago

    A lot of companies use Paradox. They shit canned all their HR down to the bare bones and hired Olivia, which the Paradox recruiter I worked with said is so bad he has to take over answering in chat half the time.

  • source
  • [–] 20 points 1 year ago
    [–] 3 points 1 year ago
    [–] 5 points 1 year ago (10 children)

    Wasnt it a security researcher and not a hacker?

  • source
  • hideshow 10 child comments
  • [–] 19 points 1 year ago (5 children)

    "Hacker" doesn't always imply one acting with malicious intent.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 10 points 1 year ago (4 children)

    If the 90s taught me anything, it's that hacking is done exclusively on monochrome green monitors, with dos. Except once they hack in, the monitor is full color, and somehow has access to every video camera on the planet. With the ability to enhsnce resolution seemingly to magical levels where you can see a clear reflection in someones pupil.

    ENHANCE!!!

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 1 year ago

    Nah, they evolved way past that in the following decades.

    Sometimes when they're in a hurry they create GUI interfaces using Visual Basic to track IP adresses.

    And sometimes, if they're very good, a hacker can manually carve a virus in a piece of bone using fractal patterns. They can use that to hack the computer scanning the bone so it adds a zero in thresholds for CPU heat monitoring and make it instantly catch fire.

  • source
  • parent
  • load more comments (-1 replies)
  • [–] 3 points 1 year ago (1 child)

    The risk is that some unknown hacker discovered this vulnerability and abused it before the researchers discovered and reported it. It sounds like the company has confirmed that didn't happen, but they aren't 100% trustworthy in that regard, simply because they might have missed something.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 8 points 1 year ago

    yeah i know the risk, but the headline implies the data was exposed to a hacker who tried the password 123456 but thats not the case. A security researcher was investigating the application and accessed a test application with the password 123456 then found an API call which exposed the data and then he instantly reported it.

  • source
  • parent
  • [–] -5 points 1 year ago*

    Paradox.ai’s chief legal officer, Stephanie King, told WIRED in an interview. “We own this.”

    I didn't know Stephen King changed gender and is working for AI company.

  • source
  • 5 comments in c/databreaches@lemmy.zip view that post
    [–] 14 points 1 year ago

    If they only added a 7, this could have been avoided 😞

  • source
  • [–] 9 points 1 year ago (1 child)
  • [–] 4 points 1 year ago

    All watched over by machines of loving grace MY ASS!!

  • source
  • [–] 2 points 1 year ago
    3 comments in c/pulse_of_truth@infosec.pub view that post

    Samsonite..

  • source
  • That's the kind of password an idiot would have on his luggage!

  • source
  • [–] 2 points 1 year ago
    1 comment in c/technology@midwest.social view that post
    [–] 5 points 1 year ago