Lemmy.ca

9,356 readers
713 users here now

Welcome 🍁


Lemmy.ca is run by Canadians, hosted in Canada, and geared toward Canadians. However, it is not restricted to Canadians, or Canadian culture/topics/etc. All are welcome!

To learn more about what Lemmy is, or how the Fediverse works, you can visit our simple Getting Started Guide.

This site is run by the non-profit Fedecan and funded entirely by user donations. You can help support us by visiting our donations page.


Rules and Guidelines

1. No BigotryIncluding racism, sexism, ableism, homophobia, transphobia, or xenophobia.

2. Be CivilArgue in good faith, attack the argument; not the person, and promote a healthy debate. That includes implying violence, threats or wishes of violence and/or death.

3. No PornThis instance is not made to host porn communities. You're free to access porn communities on other instances through your account, but be mindful of Rule 4.

4. Use the NSFW tagUse your common sense: if you wouldn't want this image to show up on your work computer, tag it as such. In comments, use the
spoiler ::: tag for NSFW images, and put a NSFW mention beside links. Do not use NSFW images as your avatar or banner. :::
5. No Ads / SpamThis instance is not there to act as your billboard. If you want to promote your personal work, at least make the effort to be a contributing member of this community. Your account purpose shouldn't be to only advertise, make it natural.

6. Bot accountIf you are the operator of a "bot" account, make sure to flag is as such in the account's settings.

7. Right to privacyDo NOT distribute the personal information of someone else without their consent (aka doxxing). Information that is public domain can be shared, provided it is in good faith.
ex: The official email of an elected official is fair, the private phone number or the real name of a non-public person is NOT.

8. Report abuseThe report function isn't labelled the disagree button. You might not agree with someone, but that doesn't mean what the person says is against the rules. Using it repeately in this fashion will lead to actions being taken against the reporter.

9. ImpersonationDon't make an account with the intent to negatively deceive or defame someone on the fediverse.
ex: Parody of a famous person is okay, submitting outrageous content as appearing like another user, mod or admin isn't.


Contact an Admin:

Guides:

You can find more guides at fedecan.ca by opening the sidebar.

Meta Communities:

Other Frontends:

Don't like how Lemmy looks? Try one of our alternative UIs:

Site Status: status.lemmy.ca


Find Apps: lemmyapps.com

Find Communities: lemmyverse.net

Fediseer: endorsement


founded 4 years ago
ADMINS
1
2
3
 
 

Key Points / Summary

API flaws in the McDonald’s McDelivery system in India, one of the world’s most popular food delivery apps, enabled a variety of fun exploits:

🍟The ability to order any number of menu items for ₹1 ($0.01 USD).

🍟The ability to steal/hijack/redirect other people’s delivery orders through a specific sequence of carefully timed API calls.

🍟The ability to retrieve the details of any order.

🍟The ability to track any order in the “On the way” status. You could real-time track the location of the driver for any order.

🍟The ability to download invoices for any order.

🍟The ability to submit feedback for orders that are not your own.

🍟The ability to view admin KPI reports.

🍟Sensitive driver/rider information that could be accessed: 🍔Name

🍔Email address

🍔Phone number

🍔Vehicle license plate number

🍔Profile picture

view more: next ›