The real surprise to me here is that grown ass adults are choosing to eat at McDonald's
Trusting clients is probably a security flaw
101–110 of 150 posts
Re: Trusting clients is probably a security flaw
#102The real surprise to me here is that grown ass adults are choosing to eat at McDonald's
Hey, my inner child needs a (unhealthy) treat every now and then!
Re: Trusting clients is probably a security flaw
#103Wasn't there a public transport app a while back that checked ticket prices on the client? Where you could change the API calls to purchase the same tickets for 0 money (EUR? doesn't really matter).
Re: Trusting clients is probably a security flaw
#104I thought not trusting clients was already security 101?
It was, back when I took my intro to security class. And that was back in the day when we talked about domestic and export versions of RSA.
Re: Trusting clients is probably a security flaw
#105This applies to games too, and the games have even more ridiculous measures such as putting malware into end user kernels to try to compensate for it.
Re: Trusting clients is probably a security flaw
#106This is like the fifth article I've read about the McDonald's app not having any sort of server-side validation. How do they keep getting this wrong???
This sort of things happens a lot. A few years ago a British bus company put certificates in the app to sign tickets. The HSBC UK app will not run if you have any apps installed from outside play store. I cannot log into the website without the app. Luckily all I have with them is a lightly used credit card with a low limit so I have just stopped using it and rely on paper statement. I find it disturbing that any app…
Do you happen to remember which bus company this was? Is there any article you can link me too as I’m quite interested in reading some more on it.
Re: Trusting clients is probably a security flaw
#107McDonald’s is seriously the strangest company when it comes to the way they push your app at you. They literally ask you if they’ve installed their app as the first question when you show up at a drive-thru. I don’t trust them at all and there is no way I’m installing their stupid app.
Employees don't want to ask either, but corporate made it an item in mystery shop inspections.
Re: Trusting clients is probably a security flaw
#108Earlier quoted context omitted.
This is not a factor I consider when reviewing my experience using an app.
That's entirely reasonable, but I think it's unlikely to make a difference in most cases.
No, but it's a papercut. You can piss off 1% of your customers and get 1 star reviews, but do that a bunch of times and it adds up.
Re: Trusting clients is probably a security flaw
#109McDonald’s is seriously the strangest company when it comes to the way they push your app at you. They literally ask you if they’ve installed their app as the first question when you show up at a drive-thru. I don’t trust them at all and there is no way I’m installing their stupid app.
They're trying to train you to use the app. You're expected to respond with your order code.
If enough customers order with the app, the drive through line moves quicker. Probably still not as fast as when they used to premake food.
Re: Trusting clients is probably a security flaw
#110Earlier quoted context omitted.
Entry-level jobs? Sure. Senior level and above? You must have been living under the rock for the past year. Then again, mobile apps are like this tend to be junior work, outsourced to software mills that just burn through juniors cranking out garbage assembled 10% of polyfills and 90% of advertising SDKs. Yes, at this point of your career, you can still say "no" - the company will happily replace you with some other…
It's easy to find entry level jobs? Where? I was trying for ages and barely anyone even replied to my applications
The growth of fake applicants and fake job listings are another issue entirely, but it still is easier to find an entry-level job than senior-level or above.