Burger King Uses DMCA to Remove Blog Exposing Drive-Thru System Security Flaws

A security researcher published findings showing critical misconfigurations and flaws in Burger King’s beta drive-thru “Assistant” system — open user registration with plaintext passwords, a hidden GraphQL mutation allowing arbitrary admin promotion, hardcoded client-side passwords, and retained audio recordings that could be replayed — which were responsibly disclosed and patched the same day; the blog post was subsequently removed via a DMCA takedown.