Skip to main content
  1. Home
  2. Phones
  3. Mobile
  4. News

Domino’s hacker said ‘no’ to free pizza for life

Add as a preferred source on Google

Brit Paul Price is clearly a good man. Faced with the choice of free pizza for life or not free pizza for life, the security consultant opted for a clear conscience when he discovered a flaw in Domino’s app that let him place food orders without paying a single cent.

Examining the Android app’s source code one evening, pizza-fan Paul noticed that a couple of tweaks enabled him to order what the heck he liked. For free.

Recommended Videos

In a post detailing exactly how he did it, Paul says he was shocked to see an order go through and surprised at an absence of any secondary checks regarding confirmation of payment. Or, more accurately, non-payment.

“A few minutes pass and the Pizza Tracker changes from ‘Order’ to ‘Prep’ and then to ‘Baking,'” Paul explained. “I couldn’t bear to wait another 30 minutes to see if an Americano pizza, Chicken Strippers and Chocolate Chip Cookie + Ice Cream side turn up at my door. I called the store and they confirm they have received my order and it will be delivered within the next 20 minutes. My first thought: awesome. My second thought: shit.”

Possibly salivating, worrying, and setting the table all at the same time, Paul waited for the order to arrive at his home. While the temptation to happily accept the food and wish the delivery guy a good evening must have been overwhelming, Paul decided to tell him he wanted to pay by cash, and handed over £26 ($37) for the order.

Note to Brit-based pizza lovers already poring over Domino’s menu in the hope of scoring some free pizza – the bug has long been squashed, Domino’s confirmed, so you’ll have to pay for your pizza. Just like Paul does.

Trevor Mogg
Contributing Editor
Not so many moons ago, Trevor moved from one tea-loving island nation that drives on the left (Britain) to another (Japan)…
WhatsApp is making it easier for channel admins to label AI-generated posts
Because not every photo in your favorite channel is as real as it looks.
WhatsApp app store listing open on iPhone

WhatsApp already lets channel admins mark sponsored posts with a paid partnership label, a feature that started rolling out last month on Android and iOS. Now the app is cooking up something similar, but this time for AI-generated media. The idea is to keep followers in the loop when a photo or video wasn't captured with a camera but conjured up by an AI tool instead.

How will the new AI label work?

Read more
Meta served ads containing AI-generated child sexual abuse content, continuing years of child safety failures
Meta's own ad library hosted child abuse imagery for nine months straight.
meta-logo

Meta's ad platform did something it has promised, repeatedly, never to allow again. According to a new investigation from Wired, Meta ran dozens of paid ads over the past nine months containing explicit AI-generated child sexual abuse imagery, some of which stayed live even after the company was directly confronted about them.

If this feels like a story you've read before, that's because you probably have. Just weeks before this latest report, a separate BBC investigation found Instagram running paid ads promoting child sexual abuse material in India, directing users to Telegram channels selling illegal content.

Read more
Apple’s iCloud Private Relay isn’t as private as you think
Your real IP address might be leaking, and passkeys are the snitch.
iCloud Private Relay

If you pay for iCloud+ and rely on Private Relay to hide your IP address while browsing, you might want to pay attention to this one. New research by security researchers Tommy Mysk and Talal Haj Bakry, first reported by 404 Media, reveals that Private Relay doesn't hide your IP address as well as Apple claims.

How does the leak actually happen?

Read more