6 ms·

The worst aspect of QR codes as menu replacements is that they are a huge security risk. Who’s to say that QR code is legit? You can’t tell from looking at it.

by teeray 5y ago

The worst aspect of QR codes as menu replacements is that they are a huge security risk. Who’s to say that QR code is legit? You can’t tell from looking at it. The trouble is compounded by the common practice of restaurants using some third-party service hosted off-site. The domain is no longer a trust signal either. It’s only a matter of time before someone starts snarfing information or credit card numbers this way (scan here to pay your bill).

Karrot_Kream 5y ago
Most of the places I've been to just put their menu on a website linked through QR code, but still take orders and payment through staff. I've been to one place that doesn't do this but only one.
- bootlooped 5y ago
  But if a malicious QR code led to a website that asked diners to pay for their meal at the point that they ordered it, how many of them would?
  - Dylan16807 5y ago
    Setting up a scam payment processing account for that doesn't seem worth the effort when it's going to be reported for fraud basically immediately.
    - kebman 5y ago
      You'd be surprised.
    - bigiain 5y ago
      "To pay for your 1 x Cheeseburger add egg, please purchase a $10 iTunes gift card and enter the code here: [_______________]"
    - bootlooped 5y ago
      I think you could set up something clever where the QR code redirected to the correct menu 95% of the time, and maybe it didn't charge the credit card initially, and that would last longer than if you had charged something immediately 100% of the time. However, I think your point still stands that it's not worth the trouble and it doesn't scale well.
jrnichols 5y ago
> restaurants using some third-party service hosted off-site. agreed. it's become frustrating. I shouldn't have to make an account with some 3rd party to view specials. Also shouldn't have to look at 2002 style desktop publishing to try to find a menu either. some have been well done. but not nearly enough.
wruza 5y ago
It’s usually just a menu, not e-shoping at the table. Why would they even implement that, if a waiter has to greet you, bring orders and clean up anyway?
- dabfiend19 5y ago
  ordering and paying through the QR code is now pretty common place in NYC. fewer waiters can attend more tables.
  - Pamar 5y ago
    How does tipping works in those places?
    - Jcowell 5y ago
      The same way other ordering services does it you can either do it through the app or you can always leave cash on the table as always.
- soylentgraham 5y ago
  Its usually payment whilst ordering via the site/menu. (Uk) Server just brings food/drinks and doesnt deal with money. I wish they would just take orders from the site, but pay with a card machine which 107% of people are used to.
  - driverdan 5y ago
    I would leave if they won't take payment in person. No way am I signing up for some shitty online service to pay for an in-person meal.
    - jackson1442 5y ago
      I personally much prefer scanning a code on my receipt then pressing the apple pay button to handing my debit card with all my payment details on it to a stranger.
Marsymars 5y ago
I'm pretty sure that the only compromised credit card I've had in the past decade was due to something along these lines. I called a restaurant to get some takeout on Valentine's Day (one that I'd been to for dine-in previously, and had great food), and they told me that they didn't do phone orders, only online orders. I placed my food order, and was immediately also hit with a pending charge of <$1 for a utility provider in a difference province where I've never lived. (I get email notifications of credit card transactions.) Called bank and they cancelled card, so it didn't progress any further. I'm not inclined to eat at that restaurant again, or to ever order food online again.
bigiain 5y ago
It certainly crossed my mind to print up some QR Code stickers that connect you to a wifi network named %p%s%s%s%s%n when you scan them, to slap over random ones around... http://api.qrserver.com/v1/create-qr-code/?color=000000&bgcolor=FFFFFF&data=WIFI%3AT%3Anopass%3BS%3A%25p%25s%25s%25s%25s%25n%3BP%3A%3B%3B&qzone=1&margin=0&size=400x400&ecc=L http://api.qrserver.com/v1/create-qr-code/?color=000000&bgco...
atatatat 5y ago
Malicious Scan Here to Pay on the fuel dispenser/charger, etc

by teeray 5y ago

Karrot_Kream 5y ago

Most of the places I've been to just put their menu on a website linked through QR code, but still take orders and payment through staff. I've been to one place that doesn't do this but only one.

bootlooped 5y ago
But if a malicious QR code led to a website that asked diners to pay for their meal at the point that they ordered it, how many of them would?
- Dylan16807 5y ago
  Setting up a scam payment processing account for that doesn't seem worth the effort when it's going to be reported for fraud basically immediately.
  - kebman 5y ago
    You'd be surprised.
  - bigiain 5y ago
    "To pay for your 1 x Cheeseburger add egg, please purchase a $10 iTunes gift card and enter the code here: [_______________]"
  - bootlooped 5y ago
    I think you could set up something clever where the QR code redirected to the correct menu 95% of the time, and maybe it didn't charge the credit card initially, and that would last longer than if you had charged something immediately 100% of the time. However, I think your point still stands that it's not worth the trouble and it doesn't scale well.

jrnichols 5y ago

> restaurants using some third-party service hosted off-site. agreed. it's become frustrating. I shouldn't have to make an account with some 3rd party to view specials. Also shouldn't have to look at 2002 style desktop publishing to try to find a menu either. some have been well done. but not nearly enough.

wruza 5y ago

It’s usually just a menu, not e-shoping at the table. Why would they even implement that, if a waiter has to greet you, bring orders and clean up anyway?

dabfiend19 5y ago
ordering and paying through the QR code is now pretty common place in NYC. fewer waiters can attend more tables.
- Pamar 5y ago
  How does tipping works in those places?
  - Jcowell 5y ago
    The same way other ordering services does it you can either do it through the app or you can always leave cash on the table as always.
soylentgraham 5y ago
Its usually payment whilst ordering via the site/menu. (Uk) Server just brings food/drinks and doesnt deal with money. I wish they would just take orders from the site, but pay with a card machine which 107% of people are used to.
- driverdan 5y ago
  I would leave if they won't take payment in person. No way am I signing up for some shitty online service to pay for an in-person meal.
  - jackson1442 5y ago
    I personally much prefer scanning a code on my receipt then pressing the apple pay button to handing my debit card with all my payment details on it to a stranger.

Marsymars 5y ago

I'm pretty sure that the only compromised credit card I've had in the past decade was due to something along these lines. I called a restaurant to get some takeout on Valentine's Day (one that I'd been to for dine-in previously, and had great food), and they told me that they didn't do phone orders, only online orders. I placed my food order, and was immediately also hit with a pending charge of <$1 for a utility provider in a difference province where I've never lived. (I get email notifications of credit card transactions.) Called bank and they cancelled card, so it didn't progress any further. I'm not inclined to eat at that restaurant again, or to ever order food online again.

bigiain 5y ago

It certainly crossed my mind to print up some QR Code stickers that connect you to a wifi network named %p%s%s%s%s%n when you scan them, to slap over random ones around... http://api.qrserver.com/v1/create-qr-code/?color=000000&bgcolor=FFFFFF&data=WIFI%3AT%3Anopass%3BS%3A%25p%25s%25s%25s%25s%25n%3BP%3A%3B%3B&qzone=1&margin=0&size=400x400&ecc=L http://api.qrserver.com/v1/create-qr-code/?color=000000&bgco...

atatatat 5y ago

Malicious Scan Here to Pay on the fuel dispenser/charger, etc