News

Vulnerability in McDonald’s terminal allowed friends picking hamburgers for free

Two Australians took advantage of vulnerability in McDonald’s delivery system to order food free.

Amateur hackers uploaded video of them ordering 11 hamburgers while the system did not charge them. Clip reached 1.9 million views.

As it is clear from the video, two friends orders ten hamburgers $1 each through the terminal that enables payment for the order without waiting in the query. Next, with the “Customize” option they refused meatballs that subtracted $1.1 from the price of each hamburger. Finally, the sum of the order became negative (-$1). When they ordered a hamburger without refusing a meatball, total score became $0.0.


YouTube / Hamburglar Bourne

According to the comments, this trick does not work in Germany and US. Due to variations in software, vulnerability may be impossible to repeat in some McDonalds restaurants.

Source: https://www.delish.com/food-news/a27091162/mcdonalds-kiosks-free-burger-hack/

Daniel Zimmermann

Daniel Zimmermann has been writing on security and malware subjects for many years and has been working in the security industry for over 10 years. Daniel was educated at the Saarland University in Saarbrücken, Germany and currently lives in New York.

Recent Posts

Remove Pbmsoultions pop-up ads (Virus Removal Guide)

Pbmsoultions.com is a domain that tries to trick you into clik to its browser notifications…

19 hours ago

Remove Prizestash pop-up ads (Virus Removal Guide)

Prizestash.com is a site that tries to trick you into subscribing to its browser notifications…

19 hours ago

Remove Verifiedbreaking pop-up ads (Virus Removal Guide)

Verifiedbreaking.com is a domain that tries to force you into subscribing to its browser notifications…

19 hours ago

Remove Themoneyminutes pop-up ads (Virus Removal Guide)

Themoneyminutes.com is a domain that tries to force you into subscribing to its browser notifications…

19 hours ago

Remove News-xcidizi pop-up ads (Virus Removal Guide)

News-xcidizi.com is a domain that tries to trick you into clik to its browser notifications…

23 hours ago

Remove Everytraffic-flow pop-up ads (Virus Removal Guide)

Everytraffic-flow.com is a domain that tries to trick you into subscribing to its browser notifications…

23 hours ago