Live data from Hacker News

What's inside the QR code menu at this cafe?

peabee.substack.com

241–250 of 328 posts

Re: What's inside the QR code menu at this cafe?

#241
post #67
post #46

Earlier quoted context omitted.

> Looking forward to seeing it more often Not sure if you're serious after reading the paragraph where he ordered food for another table ;-)

When implemented properly, it’s a convenient system. I enjoyed using it at the Stockholm airport a few months ago.

What makes you think that system was implemented securely?

Re: What's inside the QR code menu at this cafe?

#242

Earlier quoted context omitted.

At least the screen is only touced by you. My peril are the touch screen ordering places (practically all fast food places nowadays) where based on their outlook hygienically challanged persons swipe their fingers up and down for long before you have a chance following them. There is an icecream place opened nearby I had no chance trying because they only have touchscreen order. Guys at the till only serve icecream a…

Do you get a freshly-printed paper menu every time? From the hygiene standpoint, remote-ordering from your phone is the best, screens are worse (but at least you can wipe them before use) and paper menus are the worst, since it may be harder to disinfect them.

Which is why restaurant menus are often laminated.

Re: What's inside the QR code menu at this cafe?

#243
post #42
post #2

I am confused, they didn't contact the company at all and just disclose this publicly? Very immature handling of a vulnerability finding.

And to add that he tried out the exploit on unknowing participants. It would be better to try this with a friend in-the-know at a separate table. It makes me think he did it more as a practical joke than testing his exploit, especially because he mentioned they were "not-too-intimidating-looking guys". I'll admit it is a bit funny and the damage caused is tiny(just the price of the food). However, things like this do…

He could have just tried it on his own table (order on the phone, and then on the laptop through the vulnerability) and avoid having to a) bother others, b) waste food. The result would have been the same.

Re: What's inside the QR code menu at this cafe?

#244
post #211
post #108

Earlier quoted context omitted.

> "server" is not considered a respectable career In the USA maybe. I can assure you, being a waiter is taken quite seriously by much of the civilised world. A good waiter is an important part of the dining experience.

Only in fine dining establishments, certainly not in casual/family restaurants, which are most restaurants.

There are many casual/family restaurants in France, Italy, Germany, Spain and other European countries with high-quality waiting staff.

Re: What's inside the QR code menu at this cafe?

#246
post #13

> Is this what the peak ordering experience looks like? Call me old-fashioned, but to me the peak experience is a paper menu to choose from, and a waiter that patiently takes the order. Far prefer that to everyone at the table fiddling on their phones in some weird-ass website or even god forbid custom app.

And a little button to call the waiter... I hate trying to make eye contact with a waiter in a big and busy place.

Re: What's inside the QR code menu at this cafe?

#247

Earlier quoted context omitted.

Curious. How is this, specifically, fraud?

By the sensible definition, it isn’t. By the definition that killed Aaron Swartz, it probably is.

He wasn't prosecuted for logging in and looking around. He overtly did copyleft type things like finding ways to take copyrighted journal articles and release them into the public domain. Overzealous prosecution for sure regardless.

Re: What's inside the QR code menu at this cafe?

#248

Not to be a party pooper, but posting detailed financial analysis of the exact sales data of a multi-million dollar business using numbers obtained through an obviously overlooked backdoor seems like a very bad idea. Haven't people have gone to jail for less? (iirc "but it was an insecure API" has not held up in court in the past) On a more positive note, I've used a QR menu recently and it really is a game changer.…

I'm interested to know what the correct way to report this would have been? Specifically in this case. And what would one expect after reporting it? I've found many things like this and I only reported two (Genius, they said thanks) and Amazon (they replied but ultimately ignored it, and the issue is still there today)

Re: What's inside the QR code menu at this cafe?

#249
post #237
post #220

Earlier quoted context omitted.

The gist of some various laws around the world is that simply obtaining credentials does not authorize you to access the system, and accessing it without authorization is the illegal part.

This principle is clear if you apply a real world analogy. Just because you happen to have keys to a building doesn't mean you can enter without authorization from the owner. (E.g. you may have kept copies after a lease expires or a sale, it maybe you found them, etc.)

Considering it’s a API available without any authorization, the better comparison would be walking around on unfenced private land. There’s nothing to indicate they don’t want people on it but it’s also obvious it’s private land.

Re: What's inside the QR code menu at this cafe?

#250

Earlier quoted context omitted.

In Japan, many chains are using tablets for their menu, and you can order through that. That's much better than having to pull whatever from a QR code.

I Japan, with their obsession about cleanliness, I can imagine that those tablets are thorougly wiped between each customer. But not in other countries.

I am always interested in this perception. It is clean is some ways but unclean in others like handwashing after bathroom hygiene.
Post reply on HN