We hacked Burger King: How auth bypass led to drive-thru audio surveillance