No contact or thanks has been received back so far :)
To be fair, it looks like it was only patched in the last 24 hours so not totally unreasonable...yet.
I pwned half of America's fast food chains simultaneously
11–20 of 513 posts
Re: I pwned half of America's fast food chains simultaneously
#12The timeline omits when the article was put online
That can be easily deduced.
Re: I pwned half of America's fast food chains simultaneously
#13This isn’t owning fast food chains; rather compromising some AI startup that has some of them as a customer. Title is misleading.
It exposed PII of the managers & employees of ~half of the most popular fast food companies.
Personally I feel the title is justified but I understand and respect your viewpoint.
Also keep in mind that trying to clarify the such would also make the title much longer than I desired.
Re: I pwned half of America's fast food chains simultaneously
#14This isn’t owning fast food chains; rather compromising some AI startup that has some of them as a customer. Title is misleading.
> This isn’t owning fast food chains; rather compromising some AI startup that has some of them as a customer.
By this argument, getting access by phishing a company employee also wouldn't count as an attack on the company.
Re: I pwned half of America's fast food chains simultaneously
#15If this had been exploited and the job applicants to Target, Subway, Dunkin et al, had bank/credit fraud committed in their name's, would the big companies be liable for not performing due dilligence on chatter.ai? To be clear, I'm asking from a legal standpoint not a practical one.
Probably yeah, although it just comes down to if they get Sued or not I guess.
NOTE: I am not a legal professional, just making my guess.
Re: I pwned half of America's fast food chains simultaneously
#16This isn’t owning fast food chains; rather compromising some AI startup that has some of them as a customer. Title is misleading.
> This isn’t owning fast food chains; rather compromising some AI startup that has some of them as a customer. By this argument, getting access by phishing a company employee also wouldn't count as an attack on the company.
[deleted]
Re: I pwned half of America's fast food chains simultaneously
#17Full permissions for a user is blatant negligence.
For anyone who's never used Firebase before this is as simple as a single piece of logic that appears basically as:
if authUserID is UserDirectoryID
That simple.
Re: I pwned half of America's fast food chains simultaneously
#18i love the picture of your cat on the home page :)
Re: I pwned half of America's fast food chains simultaneously
#19Article gets to the point very quickly, nice.
Re: I pwned half of America's fast food chains simultaneously
#20no contact or thanks for potentially avoiding a lawsuit for them.