I hacked Monster Energy

https://bobdahacker.com/blog/monster-energy

by speckx • 11 months ago

194 154 11 months ago

SoftTalker• 11 months ago

That's actually pretty representative of the people I see drinking Monster drinks.

mrangle• 11 months ago

Since most people are lower income, and therefore a high-market share low unit price gas-station drink company like Monster will by definition have to have its largest customer base be from the largest ie: poorer demographic, the only slightly revelatory information is that the demographic is younger, male, and leans Hispanic.

This doesn't imply that people in higher income brackets don't drink it, even most of them (though probably untrue).

Also pertinent is that the data is specified for Monster Green, which is their full sugar product. Monster Zero is a pretty big product as well, and could have a slightly differing customer base.

eterm• 11 months ago

Given their definition of "Younger" appears to include GenX, even that just means "Boomers don't drink it".

opan2• 11 months ago

Monster Green, which is their full sugar product

Just want to add that all Monster (AFAIK) contains sucralose even if it also has HFCS or other sugar. It's a small amount because it's so potent, so I usually start at the end of the ingredients label when checking if drinks have it. NOS also puts it in their regular drinks. I don't know when they made this change, but I stopped drinking Monster because of it. I used to like the Mean Bean Java Monster quite a bit.

My energy drink of choice these days is Blueberry Red Bull, in case anyone else is looking for an option that tastes better.

Also some brands like Rockstar put it in half their flavors, so you gotta check every can. Even though Killer Citrus is safe (as of 5+ years ago when I last looked anyway), Killer Grape isn't, despite both being of a similar subtype.

b_e_n_t_o_n• 11 months ago

Haha. White monsters are pretty popular with gen-z'ers in general. A lot of us don't like coffee but still want a hit of caffeine and it's basically pure caffeine with a very mild taste. Other sugar free energy drinks have a much stronger sourness (red bull) or more distinctive flavours. I do love the tropical and coconut red bulls though.

The green monsters are definitely more male gamer oriented, but the white, green, pink, rose monsters etc seem pretty popular with people in my generation who fall outside that male gamer demographic.

Personally I prefer red bull now but as I get older I mostly drink coffee.

catigula• 11 months ago

"Monster Green shoppers are likely younger (Gen-Z/Millennial/Gen-X) male, lower income & Caucasian (skews Hispanic)."

What does this sentence even mean?

nemomarx• 11 months ago

Which part? younger men with lower income who are likely to be Hispanic Caucasian (as opposed to non Caucasian Hispanic)

rossheaton• 11 months ago

Which part don't you understand?

drc500free2• 11 months ago

The part where Gen-X is younger, maybe?

Y_Y• 11 months ago

It means some people still think there are meaningful racial categories, that people with light skin come from the Caucasus, that speaking Spanish is an "ethnicity" which is orthogonal to "race".

Also Gen X (aged between 44 and 60 at time of writing) are "young".

echelon• 11 months ago

It means a marketer will know where to deploy capital.

kevinmchugh• 11 months ago

(Gen-Z/Millennial/Gen-X)

This covers like sixty years?

elcritch2• 11 months ago

Closer to 30 years I'd say. Probably a lot of working age men, especially construction.

r3trohack3r2• 11 months ago

Companies like Monster and Redbull are marketing companies that happen to sell energy drinks.

That is almost certainly not a meaningless demographic they pulled out of thin air. It might not be meaningful to you as a demographic. It might even be offensive to you as a demographic.

But, to the marketing company, that is a concrete “group of humans” that respond well to their product and advertising. It informs how they develop their ads, how they target them, which geographic markets they push hard in, what events they sponsor, etc.

When they define that demographic as the people they’re targeting, and allocate their capital towards targeting them, they see the highest returns they’ve been able to find so far.

anal_reactor2• 11 months ago

The world is so much more beautiful when you don't know how that works.

xaoz• 11 months ago

Looks quite a lot like an esports team!

drc500free2• 11 months ago

What a bizarre reaction to a completely standard marketing segment. Who does the author THINK is Monster Energy Drink's core customer?

adampk2• 11 months ago

So strange, does the author think companies never try to understand their customers?

doublerabbit3• 11 months ago

When do companies ever try to understand their customers? They know what works for who, and continue to rehash that for that specific age of the generation.

The article even states this. "Monster Green shoppers are likely younger (Gen-Z/Millennial/Gen-X) male, lower income & Caucasian (skews Hispanic)."

When you've moved from that generational age, your no longer their audience and they don't care if you buy or not; but it's not like they cared in the first place.

Spivak• 11 months ago

The picture is a little silly but listing out the demographics of your customer base is like so normal. The marketing for Monster would be quite different if their market was over 65 women.

Although it would be a funny bit to run a monster commercial in the style of something like L'Oreal.

LexiMax3• 11 months ago

You don't have to imagine. For some reason beyond my ken, monster energy has achieved meme status in queer circles.

I was half-surprised one of the pictured people wasn't wearing pink headphones with attached cat ears.

bko4• 11 months ago

This is from the post:

"Monster Green shoppers are likely younger (Gen-Z/Millennial/Gen-X) male, lower income & Caucasian (skews Hispanic)."

Later in the post:

The scariest part wasn't the training portal or the questionable customer profiling.

Questionable customer profiling is just basic research about their customers.

Seriously, I wish more companies were honest at least internally who their customers are. A lot of problems could be solved if places like Marvel realized who their core base is, accepted it, and made products for their audience.

esafak• 11 months ago

Thanks for calling gen-x young.

ryoshu• 11 months ago

Good marketers know who their core audiences are. Bad executives will ignore the research.

sigmoid103• 11 months ago

Marvel knows pretty well who their audience is. The problem is Disney trying to tap into emerging markets, because the stereotypical audience is pretty much saturated. Like, there is zero need to market an Avengers movie to white male comic nerds.

elcritch2• 11 months ago

Basic understanding of a customer base could've avoided the BudLight fiasco too. Then again, I'm sure if you're an elite upper-middle-class executive from an Ivy League school the idea that you need to cater to lower class working men must be a bit rankling.

I could imagine similar subcurrents for Marvel executives wanting to appear sophisticated or avant garde but instead having to cater to "comic book nerds" must be challenging.

The post has similar undertones of elitism as well. After all most of us tech people skew towards similar habits as does probably most well paid white collar professions.

Animats• 11 months ago

Marvel's movie business was, for decades, run by the toy business in New York.[1] The movies were optimized for selling the merch. The Hollywood end finally broke free of the New York based "Creative Committee" once film revenue became large enough. The core base for merch is young boys, and that shaped the films.

[1] https://www.goodreads.com/book/show/77264987-mcu

Fade_Dance• 11 months ago

He used his "advanced hacking knowledge" to trick himself into participating in corporate training exercises and tear-inducing boredom. This actually made me laugh.

clickety_clack• 11 months ago

I’d love if he tricked himself into bulk buying monster and promoting it to all his friends to prove how wrong their target demographic was.

adampk2• 11 months ago

I don't get why a normal corporate internal resource system its being framed as ridiculous. Does the writer not know about "personas"? Weird tone.

gnarlouse4• 11 months ago

Reading this article feels like seeing somebody you don't particularly like get pantsed, but feeling bad for them because the person pantsing them is an even bigger idiot. Like Monster is not in tech. In any regard. I'm sure that they contract for 100% of their development.

darkwater2• 11 months ago

Totally still on Monster even if they contract 101% of their IT.

kingforaday• 11 months ago

I first learned of bobdahacker from his post three weeks ago also headlined on HN: https://news.ycombinator.com/item?id=44723773

sigmoid103• 11 months ago

I wouldn't be surprised if their lack of any response is because they literally have noone to deal with this. They can't seem to fill (or hold) some pretty important IT roles:

https://recruiting2.ultipro.com/MON1009MECY/JobBoard/682eaab...

martin-t5• 11 months ago

Which in turn is maybe because they are unwilling to offer sufficient compensation. You get what you pay for but this time the tables have turned and it's a big corp getting shafted.

This is not a mom and pop shop struggling to keep the lights on. This is a huge corporation whose CEO has a net worth 4 orders of magnitude greater than the median American of his age. He could pay the whole IT department out of his pocket and barely notice.

I don't feel bad for them.

squigz3• 11 months ago

It's like watching the school bully pants the weird kid who's just really passionate about his interests. It's not tough or cool, really it's just pathetic and sad.

4ndrewl• 11 months ago

You remember "software is going to eat the world?"

_Everyone_ organisation is a tech organisation.

zrobotics2• 11 months ago

I do dev & IT for a <25 person company in ecommerce. If we had even half of the issues that were pointed out in this post, I'd be telling the owner that he should be looking to replace me. I get that they're not a software company, but these are super basic issues. These issues, coupled with no response to the reported issues, leads me to suspect that the c-suite deprioritized IT to the point that it's a skeleton staff and they can't hire or retain anyone that's even halfway competent. You don't end up with these kind of issues, as a company of their size, unless there are serious management problems. They are big enough that they should definitely have the budget to do basic stuff like auth properly, or at least not make so many 101-level errors.

That said, the author also comes across as a complete d-bag as well. I have about as much love for marketing people as the average software developer, but their description of their average consumer was pretty normal. The author got super-catty about what's a fairly basic description of their average consumer and a stock photo. They aren't saying the only people who drink monster are young white males, just that that is their largest market and the consumer group they are targeting. It does make sense for them to say internally "hey, FYI this is the group of consumers we intend to target with our marketing efforts", and I've definitely read very similar stuff in every marketing proposal I've read, just with different groups.

gnarlouse4• 11 months ago

Yeah I did feel slightly less sorry for Monster after finding out they have a $63B market cap.

dzhiurgis2• 11 months ago

How you are confident you don’t have these issues?

joshcsimmons• 11 months ago

This is what happens when you contract out your development. Huge companies are going to FAFO as they continue to do pursue this foolishness.

uncomputation• 11 months ago

A lot of pearl clutching over extremely average marketing material.

99_00• 11 months ago

Not me. Their "Core Brand Family Consumer". And I have no reason to believe it is inaccurate.

daft_pink• 11 months ago

I found this actually to be very cute. It’s awesome that their employees have gamified badges and that the photo of their core customer looks so awesome.

bko4• 11 months ago

I worked at places with "points" you can give to other coworkers, but no reward. I would love to have traded some of my points for monster merch. This can almost read like an advertisement for working at Monster

blueflow• 11 months ago

You will never guess what i did when i read the headline!

HtmlProgrammer• 11 months ago

This feels a bit over the line from disclosure to sharing corporate documents… feels a lil bit crimey

immibis• 11 months ago

disclosure is also a crime, but anyway

Jcampuzano2• 11 months ago

You can tell this guy has never worked or interacted with corporate marketing or advertising in any way because their astonishment at identifying their main market segment is standard practice literally everywhere. Lmao.

Focus on the security issues sure, but maybe think a bit more critically about how businesses function.

Go look around at who you see drinking monster and you're probably going to see they're not at all wrong.

kuroguro• 11 months ago

Eh, I think part of it is just making a more clickbaity title.

JADev62096• 11 months ago

Yes, or pointing out anti-phishing training like it's anything special. The entire post is cringe imo.

arresin• 11 months ago

This is a customer avatar. It’s standard marketing theory. And likely know who their customers are.

soared• 11 months ago

Avatar or persona is a literal fake person. “This Steve Doe. He works in construction and is 29 years old. He is in a lower income bracket and drinks a monster every weekday with lunch”.

The example in the post is a super generic target market.”gen z, lower income”

Raed667• 11 months ago

I would have loved a breakdown of what group each variant of Monster is being marketed to !

altairprime• 11 months ago

For whatever it’s worth, they do have a job opening posted on LinkedIn for a sysadmin whose duties would include resolving that file access issue. Not my cup of tea as far as employers go (I don’t like energy drinks) but it seemed apropos to mention under the circumstances :)

raaron773• 11 months ago

I dont actually look like the people from the photos but yes I do imagine this is how I would look like on the rare occasion I decide to get Monster drink lol

homefree2• 11 months ago

My guess of what the author of this blog post looks like is 15-19yrs old & male, probably aspie.

Also should probably be a little more careful with risking the CFAA, but they seem really young so I'm guessing that's the main explanation.

ctippett2• 11 months ago

No need for personal attacks.

pessimizer• 11 months ago

I'd be interested in reading you explain what the attack you detected was.

jackblemming• 11 months ago

Categorizing being young or having Asperger’s as a personal attack is on you.

hamdingers• 11 months ago

15-19yrs old

Also would explain their unfamiliarity with what looks to me like totally normal branded corporate training.

gnarlouse4• 11 months ago

The energy feels so high school

akk0• 11 months ago

Would you like me to give an unsolicited read on what you look like and which developmental disorders you might have also?

pletsch• 11 months ago

This is a strange disclosure post.

They may not have had a security email but I’m sure there was some contact this could have been sent to before posting something like this.

Part of me wonders if OP even tried or was mostly just looking to dunk on a company.

darkwater2• 11 months ago

They did contact them and there was no response. The only one answering were ClickUp folks.

readthenotes1• 11 months ago

I wonder what form of beveraged stimulant the author was on?

tredre3• 11 months ago

Presumably redbull, given their avatar https://bobdahacker.com/static/images/bobdahackerReal.png

squigz3• 11 months ago

Oh wow that avatar is way worse than I expected but also doesn't surprise me at all.

js4ever2• 11 months ago

It is highly irresponsible to disclose security vulnerabilities publicly, and in some jurisdictions it may even be illegal.

While I understand that the author attempted to contact Monster without receiving a response, publishing details of the vulnerabilities and how to exploit them only puts users at greater risk. This approach is reckless and harmful.

IlikeKitties2• 11 months ago

Nah, fuck that noise. If the company reacts to a responsible disclosure notice that's nice but no one is under any obligation to help out mega corps to secure their shit. And the users aren't put at risk by the people finding the vulnerability but by the company not fixing it.

Fuck Responsible disclosure, companies should have to bid on 0 days like everyone else.

pizzalife• 11 months ago

There is a market for capabilities, i.e zerodays in widely used software. It has value, sometimes in the millions.

No one will buy some shitty XSS on a public website.

js4ever2• 11 months ago

That argument misses the point. Yes, the company has the primary responsibility to fix their vulnerabilities, but that doesn’t justify recklessly publishing exploits. Once an exploit is public, it’s not just 'the company' that suffers, it’s every customer, employee, and partner who relies on that system.

Saying 'fuck responsible disclosure' is basically saying 'let’s hurt innocent users until the company caves.' That’s not activism, that's collateral damage.

If someone genuinely cares about accountability, there are legal and ethical ways to pressure companies. Dumping 0-days into the wild only helps criminals, not users.

Ekaros• 11 months ago

One probably should not release information from company they hacked.

On other side, if it is some piece of software immediate disclosure in public is only reasonable and prudent action. It allows every user to take necessary mitigation actions like taking their services and servers offline.

darth_avocado• 11 months ago

It is common practice to give the company sufficient time and communicate, and then release the details once the vulnerability is patched. But it’s also common in practice to disclose the vulnerability after a set period of time if the company does not engage in any form of communication and refuses to patch the vulnerability. In this case they didn’t engage in any form of communication and then partially patched the problems. Nothing out of the ordinary here.

eclipticplane• 11 months ago

What _isn't_ common practice is actually copying and posting company material on your blog. Just because a door is unlocked does not give you the right to take materials & post them.

none_to_remain• 11 months ago

I have seen this in practice for vulnerabilities that affect many users of some software. If some Hackermann finds that Microsoft Windows version X or Oracle Database server version Y has a security flaw then disclosure is virtuous so that people using those can take measures. That reasoning doesn't seem to apply here.

dh2022• 11 months ago

My understanding is this is the standard SOP for security vulnerabilities: 1. Report the security vulnerabilities to the “victim” 2. Work with the “victim” the schedule for mitigation and publication 3. Publicize the vulnerabilities (the security researcher wants his findings to be publicly recognized)

If the victim does not acknowledge this issue it is impossible to execute step 2. So then the security researcher goes to step 3.

If the hacker has the emails sent at step 1 he will be fine.

jhanschoo• 11 months ago

OP leaked internal business documents as part of their disclosure that had no business being in a disclosure. It looks like minor employee details have been leaked as well, which is very bad.

martin-t5• 11 months ago

These companies treat fines as the cost of doing business and every time they lose people's personal information, they get slapped on the wrist and laugh it off while the execs get bonuses for having someone write a tearful apology to appear like victims.

I am happy every time somebody makes enough noise to make them notice and fix it because being polite and legal clearly is not working.

snitzr• 11 months ago

Didn't Mike Wazowski and James P. "Sulley" Sullivan go to MU?

t0mas88• 11 months ago

I've seen a documentary on that, they got kicked out ;-)

declan_roberts• 11 months ago

Funny, but these are the kinds of things they will gladly tell you on any earnings conference call (and more!)

mocana• 11 months ago

Their characterization of their customer base mostly rings true to me. My white teenage kids love the stuff.

Don't know about GenX though. A common definition of GenX is born between 1965 and 1980. Speaking for all GenX males of the world, the stuff tastes overly sweet to me and don't want to risk a higher A1C on carbonated sugar water. Bleh!

internet2000• 11 months ago

They have sugar free versions now.

notacoward• 11 months ago

There might be a bit of history involved. I'm GenX - very early GenX, at that. I discovered Monster in 2002 IIRC, back when energy drinks really started to take off. (Red Bull is the only one I remember seeing much before that, unless you also count Jolt, and even then it was nowhere near the pervasive thing it has become today.) I tried everything I could find, and Monster was the only one that didn't taste like absolute crap. I think the siberian ginseng is the key BTW, to complement caffeine's characteristic flavor.

So, back then, most consumers would have been GenX. Millennials would have been between 6yo and 21yo with only the very oldest likely to be buying such things. GenZ wasn't part of any market segment, and Alpha didn't even exist yet. Some of us GenXers stuck with it; at 60yo I still drink a can instead of coffee every day and none of my labs show any ill effects. Maybe we're not the primary demographic any more, but we're certainly still in there.

So ... which of us speaks for all GenX males in the world? ;)

haskellshill• 11 months ago

Uh okay? A drink company thinks their customers look like normal people? So what?

LambdaComplex• 11 months ago

"I violated the CFAA, likely committing several misdemeanors or felonies in the process, wrote up a detailed account of what I did (complete with screenshots), and then posted the account on the internet."

For the author's sake, I really hope they don't live in the USA.

martin-t5• 11 months ago

Or that they took sufficient care to remain anonymous.

kersplody2• 11 months ago

Or Europe. Or the UK. 10+ prison plus civil damages in all three jurisdictions should it be prosecuted for various "Unauthorized computer access" laws. Even just browsing protected endpoints is a criminal violation. Publishing any info is even a bigger crime.

FYI, if you are a hacker:

1. Stop immediately after discovery and don’t go further than the minimal step that proves the vulnerability exists.

2. Document, don’t exploit

3. Report responsibly

4. Do not publish until fixed. Do not publish documents/images without permission.

5. Intent doesn’t erase liability: even “just poking around” can be charged under CFAA (US) or CMA (UK).

rafram• 11 months ago

The existence of bug bounties seems to have misled some people into thinking that you can just break into any system, and it’s OK as long as you email them afterwards. That isn’t the case. This post is documentation of a crime and the author would be wise to take it down.

willwade• 11 months ago

Their opentext API is actually largely marketing - infact so much it worked - Im going to make some Monster cakes https://opentextapi.monsterenergy.com/opentext/images/ecde50... - https://opentextapi.monsterenergy.com/opentext/images/a1e8b8... Yum! Thanks! Count this the first time in history has sold me something

evan_• 11 months ago

Products like this don't just appear in gas station coolers by themselves, they would have started by identifying a demographic first and then building a product specifically targeted to that audience. They decided to target younger-skewing men, and so they made an energy drink that's neon green and called it "Monster". If they had decided to target over-60 women they would have designed the product much differently.

This isn't just a reactive profile of who they think is buying the product, it's the blueprint for the product.

jmye• 11 months ago

And regardless, I would tend to believe that a highly successful, very pervasive consumer product has at least some fucking clue who their customers are, unlike the random dude hacking their site who appears to think he’s an expert in everything because he understands some tech.

Not that HN would know anything about that.

markasoftware• 11 months ago

This isn't security research, it's unauthorized hacking. Monster has no vulnerability disclosure program. It's completely illegal to try and gain unauthorized access without a VDP, even if you attempt to responsibly disclose your findings after the fact. And frankly, you didn't /responsibly/ disclose your findings, because you are publishing this while some of the vulnerabilities are still present. I reckon you have a 5% chance of ending up in jail because of this post.

LauraMedia• 11 months ago

Depending on jurisdiction, it can be argued that this is not unauthorized access, as the files and listings do not prevent access to anyone, effectively authorizing anyone who requests a file.

dustractor• 11 months ago

Completely irrelevant to the article, but next time you come across one of those internet crazies who think the Monster logo is satanic, you can troll them by pointing out that it is really just an Ugaritic L -- 𐎍 -- and that one of the original names for the Hebrew god was EL so really Monster is a godly drink, not satanic.

treyd• 11 months ago

I thought it was the other way around, that the individual mark is interpreted as a 6 so it's 666?

thereticent3• 11 months ago

Redundant! Every UPC barcode has a 6 on the beginning, middle, and end. If you've got the mark of the Beast you may as well get Beast Bux.

billy99k• 11 months ago

I contacted the owner of the house I found unlocked and there was no response, so I proceeded to let myself in anyway.

These writeups are Jr. level hacks (I looked through them all). Aside from making the company look bad, you don't really learn much from it because they are so easy.

I'm tempted to just find the person that owns this blog and make sure they aren't hired int the security industry. We don't need people like this around.

martin-t5• 11 months ago

Because you certainly are the right person to pass judgement and destroy someone's life based on reading a few blog posts.

trinix912• 11 months ago

I'm tempted to just find the person that owns this blog and make sure they aren't hired int the security industry. We don't need people like this around.

Sorry, being the one to "make sure" someone doesn't get hired makes you the person whom I'd never hire in my eyes. Hopefully in all the potential employers' whom you go crying trying to sabotage this guy's career also.

Everyone was an eager junior once. If you weren't, it's your problem, not this guy's.

LexiMax3• 11 months ago

Sorry, being the one to "make sure" someone doesn't get hired makes you the person whom I'd never hire in my eyes.

Yeah, there was some serious, "you'll never work in this town again," energy. Glad I wasn't the only one who picked up on it.

93po3• 11 months ago

alternatively:

the security guard of the local mall left the door unlocked when the mall was actually closed, and i saw the mall hours that it was closed, but i went in anyway out of curiosity since i was already there

technion• 11 months ago

Come on, what security doesn't need is this attitude.

kersplody2• 11 months ago

HACKER NEWS ADMINS: You might want to remove this thread for legal reasons :)

crimsoneer• 11 months ago

Well, this was cringe and irresponsible.

Disclosing security vulnerabilities if they don't respond is fine. Sharing internal training material and photos for the lols and internet points is just being a dick.

lpapez• 11 months ago

IMO the author of the article should lawyer up.

They should not have done any of this in the first place, let alone disclose it publicly in this manner.

I too did similar things when I was younger, riding high on that feeling of power, and learned the hard way that even attempting to hack something can be considered computer fraud in EU.

I was lucky to not suffer any consequences in the long run.

You can brag all you want about being an "ethical hacker", the law is probablycnot on your side - especially if you publish incriminating evidence in the form of an immature post like this.

_mlbt• 11 months ago

Ethical hacking requires prior authorization from the organization you’re hacking. This person is a total clown and is absolutely in violation of the law.

ryankrage77• 11 months ago

Lots of comments about the questionable choices of this person regarding disclosing all this information. To add to the pile, they got a friend fired from McDonalds, and don't seem particularly bothered about it... https://bobdahacker.com/blog/mcdonalds-security-vulnerabilit...

chasemiller• 11 months ago

"ETHICAL hacker"

...yeah... I don't think those words mean what you think they mean...

ValveFan6969• 11 months ago

The author acts like they just hacked an authoritarian government account...

it's just an energy drink, bro. It's not that deep.

erelong• 11 months ago

is there a guide for corporate cybersecurity?

I can see faulting them for these lapses in security, but on the other hand I also don't have a guide in mind to point them to that they should make use of instead (obviously the guide they had was insufficient)

ofjcihen• 11 months ago

Bob needs to lawyer up because this was a CFAA violation and a half.

Ms-J3• 11 months ago

Until companies spend some money on hiring competent security engineers, these attacks will always happen. No one is going to feel sorry for a large corporation that can spend money on marketing but none on security.

Good job, bodahacker. We look forward to your next installment.

Ms-J3• 11 months ago

Here is an archived copy of the more complete, original version:

https://web.archive.org/web/20250823172249/https://bobdahack...

NoPicklez• 11 months ago

Maybe spend less time creating stereotypical customer profiles and more time securing your infrastructure

This person needs to understand that Monster is in the business of selling energy drinks, not storing secret information or managing critical infrastructure. The fact that they have their own branded cyber security training is actually better than most. I'm not saying their infrastructure couldn't be improved, but chill out. They likely operate with a higher risk tolerance compared to other organizations so yes they're probably more exposed.

cornhole• 11 months ago

not that I like monster, but this author sounds like an insufferable person

passants• 11 months ago

He removed this blog post, but it's still available in archives.

e.g. https://archive.today/2uqo2

I hacked Monster Energy

Related Stories