2 ms·

I think the average user doesn't know the app is there to circumvent tracking protections in browsers and doesn't realise the app is most likely just a web page

I think the average user doesn't know the app is there to circumvent tracking protections in browsers and doesn't realise the app is most likely just a web page in a wrapper. I was at a car park in UK and you didn't have to install an app, just scan the QR to go to the web page, simple payment. Sadly they then messed it all up by not offering payment through normal services.

GJim 2mo ago
> just scan the QR Lord no! Scanning a random QR code.... where is the worst it will take you? https://www.bbc.co.uk/news/articles/crrpknqpgzlo https://www.bbc.co.uk/news/articles/crrpknqpgzlo
- ryandrake 2mo ago
  Yea a QR code is only marginally better than requiring an app. I shouldn't need a goddamn smartphone to conduct business and live in society!
- gtufano 2mo ago
  The actual reality is that it's impossible to have people go to a web site from a physical ad/offer/thing without using a QR (or paying Google). Google (and friends) managed to hide the URL almost totally, people don't even know that you can go somewhere without searching on google. So the options are: paying google to have your name point to you (an expensive choice depending on the actual name) or use a QR. Weirdly enough people uses QRs this way. I think the restaurants/bars menus after the pandemic only digital via QR opened this way (again, it was trendy also many years ago).
  - jknoepfler 2mo ago
    Did domain names stop functioning all of the sudden? Going to somedipshitsbar.com/menu is about as complicated as entering a wifi password at a coffee shop.
    - goosejuice 2mo ago
      Consumers don't care. QR is easier for them and owners get analytics plus built in table identified ordering. I brought up the attack vector to a table full of developers back when this was taking off, just shrugs.
      - vel0city 2mo ago
        > owners get analytics They'll get analytics from digital menus regardless of if a QR code is scanned or not. The QR code isn't really making a difference here, other than maybe adding in a specific table ID. > built in table identified ordering...attack vector Oh no, they're going to know table 36 ordered the appetizer sampler and a few beers. The horror. They couldn't have possibly known that before. They're going to get a lot more verifiable information about me when they run my payment card than what they'll glean from a fresh browser tab.
        goosejuice 2mo ago
        The analytics are very different when you have locality built in. You know exactly how many times your menu was scanned in house.. how long they spent on the page etc has much more meaning. An open website mixes traffic. I'm not promoting QR codes here. When I can avoid them I do. It's just that the incentives for owners and consumers are better with them and that's the challenge. > Oh no, they're going to know table 36 ordered the appetizer sampler and a few beers. The horror. They couldn't have possibly known that before I have no idea what you're on about here. I'm clearly referring to quishing to collect payment info. It's very easy to copy a website and plop a QR code onto a picnic table over the old one.
        vel0city 2mo ago
        Do people actually pay through a QR code through a sticker on the table though? I've never seen that nor would I ever do such a thing, because yeah that's obvious. I will scan a QR code on a check the waiter printed for me and pay through that. > You know exactly how many times your menu was scanned in house The vast majority of the time I've seen a QR code stuck to a table its just goosejuicerestaurant.com/menu or https://taplist.io/demo-brewery https://taplist.io/demo-brewery on the QR code. About the only real time I've seen otherwise has been McDonalds, but they have raised metallic emblems glued to the table, it would be pretty obvious if it was messed with. And I'm not sure if they're even useful outside of the app.

GJim 2mo ago

> just scan the QR Lord no! Scanning a random QR code.... where is the worst it will take you? https://www.bbc.co.uk/news/articles/crrpknqpgzlo https://www.bbc.co.uk/news/articles/crrpknqpgzlo

ryandrake 2mo ago
Yea a QR code is only marginally better than requiring an app. I shouldn't need a goddamn smartphone to conduct business and live in society!
gtufano 2mo ago
The actual reality is that it's impossible to have people go to a web site from a physical ad/offer/thing without using a QR (or paying Google). Google (and friends) managed to hide the URL almost totally, people don't even know that you can go somewhere without searching on google. So the options are: paying google to have your name point to you (an expensive choice depending on the actual name) or use a QR. Weirdly enough people uses QRs this way. I think the restaurants/bars menus after the pandemic only digital via QR opened this way (again, it was trendy also many years ago).
- jknoepfler 2mo ago
  Did domain names stop functioning all of the sudden? Going to somedipshitsbar.com/menu is about as complicated as entering a wifi password at a coffee shop.
  - goosejuice 2mo ago
    Consumers don't care. QR is easier for them and owners get analytics plus built in table identified ordering. I brought up the attack vector to a table full of developers back when this was taking off, just shrugs.
    - vel0city 2mo ago
      > owners get analytics They'll get analytics from digital menus regardless of if a QR code is scanned or not. The QR code isn't really making a difference here, other than maybe adding in a specific table ID. > built in table identified ordering...attack vector Oh no, they're going to know table 36 ordered the appetizer sampler and a few beers. The horror. They couldn't have possibly known that before. They're going to get a lot more verifiable information about me when they run my payment card than what they'll glean from a fresh browser tab.
      - goosejuice 2mo ago
        The analytics are very different when you have locality built in. You know exactly how many times your menu was scanned in house.. how long they spent on the page etc has much more meaning. An open website mixes traffic. I'm not promoting QR codes here. When I can avoid them I do. It's just that the incentives for owners and consumers are better with them and that's the challenge. > Oh no, they're going to know table 36 ordered the appetizer sampler and a few beers. The horror. They couldn't have possibly known that before I have no idea what you're on about here. I'm clearly referring to quishing to collect payment info. It's very easy to copy a website and plop a QR code onto a picnic table over the old one.
        vel0city 2mo ago
        Do people actually pay through a QR code through a sticker on the table though? I've never seen that nor would I ever do such a thing, because yeah that's obvious. I will scan a QR code on a check the waiter printed for me and pay through that. > You know exactly how many times your menu was scanned in house The vast majority of the time I've seen a QR code stuck to a table its just goosejuicerestaurant.com/menu or https://taplist.io/demo-brewery https://taplist.io/demo-brewery on the QR code. About the only real time I've seen otherwise has been McDonalds, but they have raised metallic emblems glued to the table, it would be pretty obvious if it was messed with. And I'm not sure if they're even useful outside of the app.