Live data from Hacker News

What's inside the QR code menu at this cafe?

peabee.substack.com

61–70 of 328 posts

Re: What's inside the QR code menu at this cafe?

#61

I found similar vulnerability in Bus State transport facility of government, where you can get list of everyone who did reservation online. You can get their gender, age, name, mobile number. I simply reported it to their website's support email and state cyber cell. This was 7 years ago, that vulnerability still exists.

This is why security researchers (threaten to) release this kind of information publicly. Reporting security issues doesn't fix anything until other people learn the details.

Re: What's inside the QR code menu at this cafe?

#62
post #37

Earlier quoted context omitted.

I’m not sure if this could be considered “peak”. The ratio of waiting staff to customers is an obvious bottleneck. This inefficiency is simply accepted and not even really thought about, it’s just the way things are. But one thing I can say for this tech is it fixed it and the difference is noticeable.

In most restaurants the kitchen remains the bottleneck. Tech has not fixed that.

Tech "fixed" that with frozen food, fryers and microwaves. Ordering on your phone a microwaved industrial meal is a consistent user experience. That's ok for fast-food but not something I'd enjoy at a cafe or restaurant.

Re: What's inside the QR code menu at this cafe?

#63
post #22
post #5

Earlier quoted context omitted.

is it really a vulnerability if the entire thing is open by design?

Who says it was? Why would they willingly give out their customers' and customers' customers data to any anonymous person or a bot? More likely a bad oversight

This is “the tire shop doesn't have a torque wrench” level shit. If it's an oversight, it's an oversight due to incompetency, not because a good team just happened to miss something in a crunch. Another possibility is that the issue was raised and management said to fix it later, and because software “engineering” isn't a real engineering field that holds its practitioners to any duty of care, those responsible (the engineers) just went along with it.

Re: What's inside the QR code menu at this cafe?

#64
post #37

Earlier quoted context omitted.

I’m not sure if this could be considered “peak”. The ratio of waiting staff to customers is an obvious bottleneck. This inefficiency is simply accepted and not even really thought about, it’s just the way things are. But one thing I can say for this tech is it fixed it and the difference is noticeable.

inefficiency? It's part of the experience. I'm not in a restaurant or café to drink as fast as possible. I'm there to socialize as well. Waiting a bit is not a bottleneck, but a feature. (If I wanted speed, I'd take the drive-through).

You’re proving my point that it’s simply accepted. A non zero number of people want faster service than you do.

Re: What's inside the QR code menu at this cafe?

#65
post #54
post #13

> Is this what the peak ordering experience looks like? Call me old-fashioned, but to me the peak experience is a paper menu to choose from, and a waiter that patiently takes the order. Far prefer that to everyone at the table fiddling on their phones in some weird-ass website or even god forbid custom app.

Many people like being able to see what they are ordering. I've seen people order by pointing to pictures on Yelp instead of using the paper menu. Online menus with pictures of every dish are desired by plenty of customers.

Some restaurants in my city use a middle-ground solution: there's a tablet on each table (running Android, of course) on which you can order and pay (but that part is full of dark patterns, unfortunately). But you also still get a paper menu. And paper menus with pictures are great.

Re: What's inside the QR code menu at this cafe?

#66
post #54
post #13

> Is this what the peak ordering experience looks like? Call me old-fashioned, but to me the peak experience is a paper menu to choose from, and a waiter that patiently takes the order. Far prefer that to everyone at the table fiddling on their phones in some weird-ass website or even god forbid custom app.

Many people like being able to see what they are ordering. I've seen people order by pointing to pictures on Yelp instead of using the paper menu. Online menus with pictures of every dish are desired by plenty of customers.

> Online menus with pictures of every dish

The invention of color photography, and large and small format color printing, make it unnecessary for the whole thing to be online. You can have pictures without all the issues of online - like small, low-resolution screens (relative to paper all screens are low-res screens), and being coerced to give away personal data.

Re: What's inside the QR code menu at this cafe?

#67
post #46

Not to be a party pooper, but posting detailed financial analysis of the exact sales data of a multi-million dollar business using numbers obtained through an obviously overlooked backdoor seems like a very bad idea. Haven't people have gone to jail for less? (iirc "but it was an insecure API" has not held up in court in the past) On a more positive note, I've used a QR menu recently and it really is a game changer.…

> Looking forward to seeing it more often Not sure if you're serious after reading the paragraph where he ordered food for another table ;-)

When implemented properly, it’s a convenient system. I enjoyed using it at the Stockholm airport a few months ago.

Re: What's inside the QR code menu at this cafe?

#68
post #37

Earlier quoted context omitted.

I’m not sure if this could be considered “peak”. The ratio of waiting staff to customers is an obvious bottleneck. This inefficiency is simply accepted and not even really thought about, it’s just the way things are. But one thing I can say for this tech is it fixed it and the difference is noticeable.

In most restaurants the kitchen remains the bottleneck. Tech has not fixed that.

Soylent and Huel seem to have fixed that issue, for their target market.

Re: What's inside the QR code menu at this cafe?

#69
post #46

Not to be a party pooper, but posting detailed financial analysis of the exact sales data of a multi-million dollar business using numbers obtained through an obviously overlooked backdoor seems like a very bad idea. Haven't people have gone to jail for less? (iirc "but it was an insecure API" has not held up in court in the past) On a more positive note, I've used a QR menu recently and it really is a game changer.…

> Looking forward to seeing it more often Not sure if you're serious after reading the paragraph where he ordered food for another table ;-)

Haha :) Looking forward to seeing it more often... with proper security

Re: What's inside the QR code menu at this cafe?

#70

A guy went to prison for doing this with AT&Ts public subscriber data. The media didn't do him a favor by calling it a hack.

Eh it was not just that, weev obviously had evil intent. (I wonder what's up with him now, last time I read his blog, he was posting neo-nazi posts from Ukraine)
Post reply on HN