B
BobDaHacker
bobdahacker.com · Personal blog · on HN since 2025
BobDaHacker is a security researcher who writes up vulnerabilities found in consumer apps and company systems, such as Burger King, McDonald's, and Lovense.
What HN saysHN links it for disclosure write-ups on leaked data and bad security contacts. Commenters note one post was removed after a takedown by a security firm.
20HN people shared it
6linked it in comments
18stories submitted
788story points
3 months agolast shared
2025people per year2026
Most-shared posts
- 1Over 181,000 AI meeting recordings left wide open in note taking app5 people · 13 points · first shared 2026 · 1 comments on HN
- 2We hacked Burger King: How auth bypass led to drive-thru audio surveillance3 people · 427 points · first shared 2025 · 218 comments on HN
- 3Click to Pray, Click to Leak: The Pope's Official App Exposes 700K+ User Emails3 people · 6 points · first shared 2026 · 1 comments on HN
- 4Lovense: The Company That Lies to Security Researchers2 people · 60 points · first shared 2025 · 21 comments on HN
- 5I Hacked McDonald's (Security Contact Was Harder to Find Than Secret Recipe)2 people · 39 points · first shared 2025 · 25 comments on HN
- 6I Hacked India's Biggest Dating App (They Offered Me a $100 Gift Card)2 people · 15 points · first shared 2025 · 4 comments on HN
- 7Petlibro: Pet Feeder Is Feeding Data to Anyone Who Asks2 people · 5 points · first shared 2025 · discussion on HN
- 8I hacked Monster Energy1 people · 194 points · first shared 2025 · 167 comments on HN
- 9I Could've Rickrolled the FIFA World Cup. All I Needed Was My ID1 people · 22 points · first shared 2026 · 4 comments on HN
- 10When South Park's Restaurant Had Worse Security Than Cartman's Password1 people · 4 points · first shared 2025 · discussion on HN
- 11Boarding Pass Is a Skeleton Key. Frontier Airlines Doesn't Care1 people · 3 points · first shared 2026 · 1 comments on HN
- 12BobdahackerReal.png1 people · first shared 2025
What HN people wrote when they linked it
gnabgib · 2025-07-29
Source article: https://bobdahacker.com/blog/lovense-still-leaking-user-emails (22 points) https://news.ycombinator.com/item?id=44723773
1vuio0pswjnm7 · 2026-08-11
1785854861 | Tl;Dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open | https://bobdahacker.com/blog/tldv-hack | https://news.ycombinator.com/item?id=49169753
1785962536 | Tl;Dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open | https://bobdahacker.com/blog/tldv-hack | https://news.ycombinator.com/item?id=49188723
dormento · 2026-02-27
Wow they just had to remove it because of some "cybersecurity" law firm shenanigans. And wouldn't you know it...
https://bobdahacker.com/blog/rbi-hacked-drive-thrus/
> Cyble Inc. is an AI-powered cybersecurity platform and DMCA takedown service startup backed by Y Combinator. Their complaint specifically states that our use of the "Burger King" trademark was unauthorized and creates "a high degree of confusion among the public that the website is in some way endorsed by/or linked with our Client."
Way to reinforce the stereotype about their clients.
techjamie · 2026-02-26
Burger King already was doing this at their drive thru to check if employees were saying keywords like "you rule" and determining the customer's mood. Also saving a recording of the interaction for who knows how long. BobDaHacker got into their system with an auth bypass and exposed it[1]. It's very draconian.
[1] https://archive.is/fMYQp (BK DMCA'd the original article offline[2])
[2] https://bobdahacker.com/blog/rbi-hacked-drive-thrus/
tredre3 · 2025-08-23
Presumably redbull, given their avatar https://bobdahacker.com/static/images/bobdahackerReal.png
ryankrage77 · 2025-08-23
Lots of comments about the questionable choices of this person regarding disclosing all this information. To add to the pile, they got a friend fired from McDonalds, and don't seem particularly bothered about it... https://bobdahacker.com/blog/mcdonalds-security-vulnerabilities