Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

What's inside the QR code menu at this cafe?

peabee.substack.com

Post reply on HN
Print view View original

321–328 of 328 posts

Re: What's inside the QR code menu at this cafe?

#321

Post by mpeg »

hnbad wrote: post #176

Looks like the article was deleted and purged from archive.org. I wonder if anyone saved a copy elsewhere? From the comments it seems likely the author realized they may have accidentally committed a crime or at least done something that could cause real legal consequences for them and quickly destroyed the evidence. That's probably better than leaving it up but I'd wager it wouldn't protect them from any legal conse…

According to Twitter they removed it due to a legal notice from Dotpe, author still seems to believe he was just accessing public data unfortunately which does not look good for him should Dotpe choose to take it further

Re: What's inside the QR code menu at this cafe?

#322

Post by mihaaly »

DiggyJohnson wrote: post #293
mihaaly wrote: post #178

Earlier quoted context omitted.

At least the screen is only touced by you. My peril are the touch screen ordering places (practically all fast food places nowadays) where based on their outlook hygienically challanged persons swipe their fingers up and down for long before you have a chance following them. There is an icecream place opened nearby I had no chance trying because they only have touchscreen order. Guys at the till only serve icecream a…

I don't mean to be too forceful about this, but how is a common touchscreen ordering system any better or worse than the door handle you used to walk in?

I wouldn't use the entrance door as example due to automatic doors in most places, but lets assume the toilet door handle, that is even more disgusting.

I would say that there is no difference! : )

Except not everyone is using the toilet door handle, and not for prolonged time, holding and swiping for long seconds or minutes, no, unlike with a touch screen ordering system, which they swipe around for looong, each of them ordering, making sure all the content of their skin is thorougly applied on the surface, practically everyone does that - except me in case I have the option going to the till and order by speaking (before someone niggle: I stand back and not spraying saliva :) ).

Re: What's inside the QR code menu at this cafe?

#323

Post by greengoblin- »

hnbad wrote: post #176

Looks like the article was deleted and purged from archive.org. I wonder if anyone saved a copy elsewhere? From the comments it seems likely the author realized they may have accidentally committed a crime or at least done something that could cause real legal consequences for them and quickly destroyed the evidence. That's probably better than leaving it up but I'd wager it wouldn't protect them from any legal conse…

Check the thread here: https://x.com/deedydas/status/1838137082683728323?s=46

Re: What's inside the QR code menu at this cafe?

#324

Post by msephton »

ldjb wrote: post #309
msephton wrote: post #248

Earlier quoted context omitted.

I'm interested to know what the correct way to report this would have been? Specifically in this case. And what would one expect after reporting it? I've found many things like this and I only reported two (Genius, they said thanks) and Amazon (they replied but ultimately ignored it, and the issue is still there today)

First thing I would do is look for a security.txt file or search to see if they operate some kind of bug bounty. Failing that, I would browse their website or search for contact details (or even just a contact form). WHOIS can be useful for this. Ideally you'd want some kind of security contact, or a technical contact, but other times you have to make do with the general contact email/form. In this specific case, the…

Thanks! Very useful advice.

Re: What's inside the QR code menu at this cafe?

#325

Post by mavhc »

austinjp wrote: post #212
mavhc wrote: post #191

Earlier quoted context omitted.

You can always go to an expensive eating establishment. It's easier to choose from an online system because it's up to date with what's in stock

This highlights a problem: you need to be wealthy to have any privacy. Why has privacy become something that is only available to a dwindling few? What price convenience?

That's always been true, the wealthy have their giant plots of land with giant walls around them, the poor live side by side with thin walls

No one cares if the worst thing that happens is they get slightly better ads

Re: What's inside the QR code menu at this cafe?

#326

Post by infecto »

mihaaly wrote: post #261
infecto wrote: post #250

Earlier quoted context omitted.

I am always interested in this perception. It is clean is some ways but unclean in others like handwashing after bathroom hygiene.

I am not aware of that aspect at all, but cleaning and cleanliness is in focus in general, from childhood, cities are more tidy even by look and the sight of the lady washing up (properly, with water, sponge, having a custom belt with containers for the tools and liquids used in the process) the sidewalk after cleaning up the poo of her dog is burnt into my retina.

Certainly there is a social pressure to clean and keep social order. It is one of those things that as multiple layers though, the streets are usually clean, people generally fall in line and don't make a mess but it does not mean everything is clean (like commercial kitchens).

Re: What's inside the QR code menu at this cafe?

#328

Post by altacc »

Wytwwww wrote: post #200
altacc wrote: post #75

Earlier quoted context omitted.

There's a big difference between announcing "I found all this private data" and "I found all this private data and here's exactly how I did it and here are the URLs". What the author has done is detail exactly how anyone else can abuse this system from anywhere in the world and also given them ideas about what to do with that information that would cause a direct cost to the company. I think that's irresponsible and…

> cause a direct cost to the company Nothing wrong about that. Of course still doesn't justify publishing/providing access to client data who did nothing wrong.

Causing damage or cost to a company through fraudulent use would be the cornerstone of a civil or criminal prosecution. Cases where there is good disclosure and no cost incurred tend to get dismissed, cases where there is identifiable damages get stupidly big sentences and/or fines.
Post reply on HN