Earlier quoted context omitted.
I Japan, with their obsession about cleanliness, I can imagine that those tablets are thorougly wiped between each customer. But not in other countries.
I am always interested in this perception. It is clean is some ways but unclean in others like handwashing after bathroom hygiene.
What's inside the QR code menu at this cafe?
261–270 of 328 posts
Re: What's inside the QR code menu at this cafe?
#262A guy went to prison for doing this with AT&Ts public subscriber data. The media didn't do him a favor by calling it a hack.
I almost got into big trouble at school for "hacking a teachers email". I guessed their email address (they were systematically generated) and sent an email. It's true you can get into trouble for this, but we need to all take it upon ourselves to make sure this doesn't happen. If this guy got into trouble I would hope every software engineer would be up in arms defending them.
Re: What's inside the QR code menu at this cafe?
#263> I would have thought about privately disclosing these findings to Dotpe. But all the API requests are right there in plain sight... There are pretty common ethical standards about disclosing vulnerabilities privately before disclosing them publicly. I don't see how the obviousness of the vulnerability changes the situation. By warning the company, you give them the opportunity to remedy the problem before announcin…
Re: What's inside the QR code menu at this cafe?
#264Earlier quoted context omitted.
My main beef with these menus is that I can't see the entire menu on my phone screen, and end up scrolling up and down multiple times before I can decide what I want to order. With a paper menu my eyes can flick up and down much faster. It's like trying to edit spreadsheets on a phone - technically possible but a real pain in the arse.
I find it absolutely annoying that our phones with amazing pixel density limit the max zoom out for some reason. If I want 5x8 font on my 1080p phone screen why not let me?
Re: What's inside the QR code menu at this cafe?
#265Earlier quoted context omitted.
I Japan, with their obsession about cleanliness, I can imagine that those tablets are thorougly wiped between each customer. But not in other countries.
Same would apply to paper menus, though? At least it's easier to notice on glossy tablet screens.
Re: What's inside the QR code menu at this cafe?
#266Re: What's inside the QR code menu at this cafe?
#267> Is this what the peak ordering experience looks like? Call me old-fashioned, but to me the peak experience is a paper menu to choose from, and a waiter that patiently takes the order. Far prefer that to everyone at the table fiddling on their phones in some weird-ass website or even god forbid custom app.
Re: What's inside the QR code menu at this cafe?
#268Earlier quoted context omitted.
Could be as simple as no auth in debug builds and then deployed it by accident.
I don't mean to pick on your comment, but to respond to a prior comment, you are beginning with a very positive world view and interpreting the events from there. Lazy API that did not vet a simple backdoor? Good coders but accidentally pushed the debug version of the API? I am going to have to say the second option feels less likely (yes, I have been called cynical).
It was just an example. Maybe they knew.
Re: What's inside the QR code menu at this cafe?
#269Earlier quoted context omitted.
I almost got into big trouble at school for "hacking a teachers email". I guessed their email address (they were systematically generated) and sent an email. It's true you can get into trouble for this, but we need to all take it upon ourselves to make sure this doesn't happen. If this guy got into trouble I would hope every software engineer would be up in arms defending them.
you mean you guessed the systematically generated password, right?
the old "HELO" hack
Re: What's inside the QR code menu at this cafe?
#270> Is this what the peak ordering experience looks like? Call me old-fashioned, but to me the peak experience is a paper menu to choose from, and a waiter that patiently takes the order. Far prefer that to everyone at the table fiddling on their phones in some weird-ass website or even god forbid custom app.