Live data from Hacker News

The Doorman's Fallacy in action

rozumem.xyz

131–140 of 326 posts

Re: The Doorman's Fallacy in action

#132
post #115

Earlier quoted context omitted.

That’s such a benign vulnerability that it doesn’t even feel like one. Per your description, the worst thing an attacker can do is see the food ordered to a check number (in a public restaurant) and pay a bill that isn’t their own? On the flip side, some services go absolutely overboard trying to secure low-blast-radius things, or don’t properly scale security to the risk of an activity. I have a service provider tha…

Eh, there could be privacy implications. E.g. you see someone in the restaurant whom you know, and you know he is not supposed to be drinking alcohol (for whatever reason: maybe his religion forbids it, maybe there's a medical reason for it such as a prescription drug he's on that really should not be mixed with alcohol, the reason doesn't really matter in this example). You see that he was served a pork chop with a…

Isn’t it way easier and way more damaging to just take a photo of him? Receipts aren’t even associated by name unless you’re picking up food.

Re: The Doorman's Fallacy in action

#133

Earlier quoted context omitted.

That’s such a benign vulnerability that it doesn’t even feel like one. Per your description, the worst thing an attacker can do is see the food ordered to a check number (in a public restaurant) and pay a bill that isn’t their own? On the flip side, some services go absolutely overboard trying to secure low-blast-radius things, or don’t properly scale security to the risk of an activity. I have a service provider tha…

Enumeration vulns are very serious, it’s just luck that this one appeared to be low risk.

But that’s my point: not all risks are the same. A cache issue that serves you someone else’s crossword puzzle is an inconvenience, but a cache issue that serves you someone’s credit report is way worse.

Re: The Doorman's Fallacy in action

#134

> But when 6 people simultaneously tried to pay their share of the bill, chaos ensued. Hasn't that been a fact of life ? If anything, apps made it barely made easier through splitting either the whole bill equally or offer a bit by bit checking interface. Otherwise on the role of QR codes and online menu, it actually helps a lot for allergies as everyone can check their for each individual item and adjust accordingly…

A good waiter by the time it comes to payment will know the dynamic of the group and help them organize quickly.

Re: The Doorman's Fallacy in action

#135
I didn't interpret it as "automation bad". The invisible value, cancelled by automation, can also be negative.

Consider a doorman or a waiter in low-trust status based society: to get a service one must exaggerate status signaling and/or bribe the gatekeeper to be deemed worthy of a service. Kiosk doesn't accept bribes and you can trust "no vacancy" from kiosk more than from the doorman.

Re: The Doorman's Fallacy in action

#136

I’d not heard of this fallacy* but it makes perfect sense. Well executed human greeting is such a killer asset if you get it right. There’s a few million years of genetic programming inside us all that responds unreasonably positively to hospitality. If someone enters my home and is not drinking their desired beverage in under four minutes, I have brought shame on me and my family! I think we are all programmed to re…

> I think we are all programmed to respond well to any courtesy, no matter how indirect.

I once read a book called "The Media Equation" that argued humans' social cooperation/courtesy instincts are many thousands of years old, while computers are very new (the book was written in 1996). As academic HCI researchers they'd conducted many experiments, providing evidence for this, which is why it's a book, not a paragraph.

What I found fascinating about this book was you could see how their findings had directly translated into Clippy in Office 97. You close 'Clippy' and it waves goodbye instead of disappearing immediately? They had research findings saying that was perceived more favourably.

Re: The Doorman's Fallacy in action

#137
>The worst was when it came time to pay. Naturally, everyone wanted to pay for what they ordered. The waitress pushed us to use the use the QR code again, saying it would be easier. Maybe that's true for 1 or 2 people. But when 6 people simultaneously tried to pay their share of the bill, chaos ensued. The human waiters just hung by, probably just as confused.

>Eventually, all the women went back to their busy lives and it was just us two guys left, continuing on. Suddenly, the waitress came up to us to say that 24 Dhs was still unpaid. I couldn't believe it. *Thankfully,* the other guy took care of it.

Is OP Dutch? Just split the bill evenly, have someone pay and send them your share.

Re: The Doorman's Fallacy in action

#138
post #115

Earlier quoted context omitted.

Eh, there could be privacy implications. E.g. you see someone in the restaurant whom you know, and you know he is not supposed to be drinking alcohol (for whatever reason: maybe his religion forbids it, maybe there's a medical reason for it such as a prescription drug he's on that really should not be mixed with alcohol, the reason doesn't really matter in this example). You see that he was served a pork chop with a…

Isn’t it way easier and way more damaging to just take a photo of him? Receipts aren’t even associated by name unless you’re picking up food.

True; a more realistic scenario would have to include "covert surveillance" (where you don't want to let him know you're watching), and even there I'm not sure much could be gleaned about any individual. In theory you could use that to build up a picture of someone's habits, in practice other techniques are better. Though... you could use that to spy on the store, actually. If you're a tax auditor making sure they aren't underreporting their sales, that could be useful.

But yeah, any idea I come up with to exploit that is always a bit of a stretch.

Re: The Doorman's Fallacy in action

#139
It really doesn't sound like a good example of the Doorman's Fallacy, which is about automation failing to provide the nonobvious benefits of a human doing the job.

It's just an example of automation done badly. Just have multiple QR codes to allow scanning in parallel. And if 6 people each paying for the own stuff creates a mess then sorry, that's just incredibly incompetent UX design. It should actually be easier to do it right when they're already ordering through separate devices!

Re: The Doorman's Fallacy in action

#140

I’d not heard of this fallacy* but it makes perfect sense. Well executed human greeting is such a killer asset if you get it right. There’s a few million years of genetic programming inside us all that responds unreasonably positively to hospitality. If someone enters my home and is not drinking their desired beverage in under four minutes, I have brought shame on me and my family! I think we are all programmed to re…

I also hadn't heard of it, but I feel like it's kind of a corollary of the whole, "what's measured is managed" idea or maybe the Streetlight effect (https://en.wikipedia.org/wiki/Streetlight_effect).

It's easy to measure a doorman's cost, but hard to measure their impact. Few, if any, guest are likely to mention the impact of a doorman on their stay except in the exceptional case. That means when budgets start to get tight (or an exec wants to drive the share price up), doormen become an easy target to cut because there's little hard data to justify their value.

Post reply on HN