Domino’s Pizza Hack

If you visit

http://trkweb.dominos.com/orderstorage/GetTrackerData?Phone=1xxxyyyzzzz

you will see any Domino’s pizza orders for the given phone number (in
10-digit format). No password is required.

Potential evil use: run a script to test 1000s of numbers until you
find someone who is ordering a pizza (“war pizza ordering”?). Call
them up, tell them there’s a problem with their credit card,
and… well, let your mind go crazy.

Poor judgement on Domino’s part and may even violate their own privacy policy!

Of course, Subway is even worse about this!:

Subway hack: have someone’s phone number? Get access!

This entry was posted in Programming. Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *