News for hackers. Stuff that matters.

A comment on Stealing passwords from McDonald's users. Parent comment

Re:Stealing passwords from McDonald's users by 52-6F-62 on Monday January 16, 2017 @11:50AM (#13411072)
Correct me if I'm wrong but it appears they are now filtering the {} characters by URI encoding them upon submitting a search.

This isn't to say they've fixed anything else yet (I haven't looked), but it may mitigate the efforts of the lazy (like me in this instance).

[ Parent | on HN ]
Re:Stealing passwords from McDonald's users by nihonium on Tuesday January 17, 2017 @06:51PM (#13422692)
There were no filtering last time I've checked. Now, it looks like they've fixed the problem by completely deleting search results page, it's returning 404 :)
[ Parent | on HN ]