Top all-time · #3573
BobDaHacker
Personal blog · bobdahacker.com/blogsecurity
BobDaHacker is a personal blog at bobdahacker.com about security. Since 2025, 20 different Hacker News readers have linked it 25 times, most often “Over 181,000 AI meeting recordings left wide open in note taking app”. It is still writing: the last post was on 2026-08-04, and you can follow it by feed.
Too few sampled comments (6) to say how often HN recommends it.?
Why HN links it
HN readers link BobDaHacker's posts about security flaws the author found in companies' systems, including Monster Energy, Lovense, tl;dv meeting recordings and Burger King drive-thru AI. Comments cite them as sources.
Summarised by Claude from a sample of 6 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Personal site of BobDaHacker - Ethical hacker, security researcher, and tech enthusiast.
Most-linked posts?
- Over 181,000 AI meeting recordings left wide open in note taking app5 people · 5 mentions · first linked 2026-08-04
- We hacked Burger King: How auth bypass led to drive-thru audio surveillance3 people · 3 mentions · first linked 2025-09-06
- Click to Pray, Click to Leak: The Pope's Official App Exposes 700K+ User Emails3 people · 3 mentions · first linked 2026-07-24
- I Hacked McDonald's (Security Contact Was Harder to Find Than Secret Recipe)2 people · 2 mentions · first linked 2025-08-19
- Lovense: The Company That Lies to Security Researchers2 people · 2 mentions · first linked 2025-07-29
- I Hacked India's Biggest Dating App (They Offered Me a $100 Gift Card)2 people · 2 mentions · first linked 2025-08-19
- Petlibro: Pet Feeder Is Feeding Data to Anyone Who Asks2 people · 2 mentions · first linked 2025-12-27
What Hacker News says?
Lots of comments about the questionable choices of this person regarding disclosing all this information. To add to the pile, they got a friend fired from McDonalds, and don't seem particularly bothered about it... https://bobdahacker.com/blog/mcdonalds-security-vulnerabilit...
Comment linking /blog/mcdonalds-security-vulnerabilities
on “I hacked Monster Energy”Submitted We hacked Burger King: How auth bypass led to drive-thru audio surveillance as a story · 427 points
HN discussionPresumably redbull, given their avatar https://bobdahacker.com/static/images/bobdahackerReal.png
Comment linking /static/images/bobdahackerReal.png
on “I hacked Monster Energy”Submitted I hacked Monster Energy as a story · 194 points
HN discussionSource article: https://bobdahacker.com/blog/lovense-still-leaking-user-emai... (22 points) https://news.ycombinator.com/item?id=44723773
Comment linking /blog/lovense-still-leaking-user-emails
on “Lovense sex toy app flaw leaks private user email addresses”Submitted Lovense: The Company That Lies to Security Researchers as a story · 60 points
HN discussion1785854861 | Tl;Dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open | https://bobdahacker.com/blog/tldv-hack | https://news.ycombinator.com/item?id=49169753 1785962536 | Tl;Dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open | https://bobdahacker.com/blog/tldv-hack | https://news.ycombinator.com/item?id=49188723
Comment linking /blog/tldv-hack
on “Over 181,000 AI meeting recordings left wide open in note taking app”Submitted I Hacked McDonald's (Security Contact Was Harder to Find Than Secret Recipe) as a story · 39 points
HN discussionWow they just had to remove it because of some "cybersecurity" law firm shenanigans. And wouldn't you know it... https://bobdahacker.com/blog/rbi-hacked-drive-thrus/ > Cyble Inc. is an AI-powered cybersecurity platform and DMCA takedown service startup backed by Y Combinator. Their complaint specifically states that our use of the "Burger King" trademark was unauthorized and creates "a high degree of confusion among…
Comment linking /blog/rbi-hacked-drive-thrus/
on “Burger King will use AI to check if employees say 'please' and 'thank you'”Submitted I Could've Rickrolled the FIFA World Cup. All I Needed Was My ID as a story · 22 points
HN discussionBurger King already was doing this at their drive thru to check if employees were saying keywords like "you rule" and determining the customer's mood. Also saving a recording of the interaction for who knows how long. BobDaHacker got into their system with an auth bypass and exposed it[1]. It's very draconian. [1] https://archive.is/fMYQp (BK DMCA'd the original article offline[2]) [2] https://bobdahacker.com/blog/r…
Comment linking /blog/rbi-hacked-drive-thrus/
on “Burger King will use AI to check if employees say 'please' and 'thank you'”Submitted I Hacked India's Biggest Dating App (They Offered Me a $100 Gift Card) as a story · 12 points
HN discussionSubmitted Over 181,000 AI meeting recordings left wide open in note taking app as a story · 7 points
HN discussionSubmitted When South Park's Restaurant Had Worse Security Than Cartman's Password as a story · 4 points
HN discussionSubmitted Tl;Dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open as a story · 3 points
HN discussionSubmitted Click to Pray, Click to Leak: The Pope's Official App Exposes 700K+ User Emails as a story · 3 points
HN discussionSubmitted Boarding Pass Is a Skeleton Key. Frontier Airlines Doesn't Care as a story · 3 points
HN discussionSubmitted Petlibro: Pet Feeder Is Feeding Data to Anyone Who Asks as a story · 3 points
HN discussionSubmitted I Hacked India's Biggest Dating App (They Offered Me a $100 Gift Card) as a story · 3 points
HN discussionSubmitted L;Dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open as a story · 2 points
HN discussionSubmitted Click to Pray: The Pope's Official App Exposes 700k User Emails as a story · 2 points
HN discussionSubmitted Petlibro: Pet Feeder Is Feeding Data to Anyone Who Asks as a story · 2 points
HN discussionSubmitted Tl;Dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open as a story · 1 points
HN discussionSubmitted Click to Pray, Click to Leak: Pope's Official App Exposes 700k User Emails as a story · 1 points
HN discussion
