Remix.run Logo
gtufano 4 hours ago

The actual reality is that it's impossible to have people go to a web site from a physical ad/offer/thing without using a QR (or paying Google). Google (and friends) managed to hide the URL almost totally, people don't even know that you can go somewhere without searching on google. So the options are: paying google to have your name point to you (an expensive choice depending on the actual name) or use a QR. Weirdly enough people uses QRs this way. I think the restaurants/bars menus after the pandemic only digital via QR opened this way (again, it was trendy also many years ago).

jknoepfler 4 hours ago | parent [-]

Did domain names stop functioning all of the sudden? Going to somedipshitsbar.com/menu is about as complicated as entering a wifi password at a coffee shop.

goosejuice 4 hours ago | parent | next [-]

Consumers don't care. QR is easier for them and owners get analytics plus built in table identified ordering. I brought up the attack vector to a table full of developers back when this was taking off, just shrugs.

vel0city 4 hours ago | parent [-]

> owners get analytics

They'll get analytics from digital menus regardless of if a QR code is scanned or not. The QR code isn't really making a difference here, other than maybe adding in a specific table ID.

> built in table identified ordering...attack vector

Oh no, they're going to know table 36 ordered the appetizer sampler and a few beers. The horror. They couldn't have possibly known that before.

They're going to get a lot more verifiable information about me when they run my payment card than what they'll glean from a fresh browser tab.

goosejuice 3 hours ago | parent [-]

The analytics are very different when you have locality built in. You know exactly how many times your menu was scanned in house.. how long they spent on the page etc has much more meaning. An open website mixes traffic.

I'm not promoting QR codes here. When I can avoid them I do. It's just that the incentives for owners and consumers are better with them and that's the challenge.

> Oh no, they're going to know table 36 ordered the appetizer sampler and a few beers. The horror. They couldn't have possibly known that before

I have no idea what you're on about here. I'm clearly referring to quishing to collect payment info. It's very easy to copy a website and plop a QR code onto a picnic table over the old one.

vel0city 3 hours ago | parent [-]

Do people actually pay through a QR code through a sticker on the table though? I've never seen that nor would I ever do such a thing, because yeah that's obvious.

I will scan a QR code on a check the waiter printed for me and pay through that.

> You know exactly how many times your menu was scanned in house

The vast majority of the time I've seen a QR code stuck to a table its just goosejuicerestaurant.com/menu or https://taplist.io/demo-brewery on the QR code. About the only real time I've seen otherwise has been McDonalds, but they have raised metallic emblems glued to the table, it would be pretty obvious if it was messed with. And I'm not sure if they're even useful outside of the app.

goosejuice 3 hours ago | parent [-]

> Do people actually pay through a QR code through a sticker on the table though? I've never seen that nor would I ever do such a thing, because yeah that's obvious.

Yes, that's what I'm referring to.

https://pos.toasttab.com/products/mobile-order-and-pay

https://get.chownow.com/blog/restaurant-qr-code/

vel0city 4 hours ago | parent | prev [-]

Its like two taps on my phone to scan a QR code where as typing that is probably going to take me 26+ taps.

And I usually prefer to just scan a QR code to get the wifi details. Once again, its far fewer taps.

If you could do something with just two clicks or do something with 26 clicks, which path would you normally take?

GJim 3 hours ago | parent [-]

You scan and trust random QR codes?

To paraphrase George Bush: Goatse me once, shame on...shame on you. Goatse me — you can't get Goatse'd again

akdev1l 3 hours ago | parent | next [-]

How does typing a url stop that?

type out: https://thisislegitparkingpaymentwebsite.com

Is this goatse or is it the real payment website for your parking? You won’t know unless you go there

vel0city 3 hours ago | parent | prev [-]

You type in and trust random URLs? You just click on random URLs?

No, I don't just go around and scan every random QR code sticker on every single lamp post without any kind of context. But a QR code on the back of a business card with their contact information already nicely digitally formatted? Sure. A friend's QR code of their WiFi credentials on a little plaque in the den? Sure. A QR code at the bar showing the live tap list menu? Sure. A presenter giving the presentation slides by QR code? Sure.

And I pay attention to the URL that QR code is sending me to before I actually decide to go there. The QR code is just so I don't have to type in reallylongannoyingurl.ninja/some-horrific%20path/and?with=junkinit. It shows me the URL and asks "Do you want to go to obviousgoatse.com?" after it scans the code. That's the tap 2 of the two taps.