Disagree, this is one of those changes that not only is very hyginic but also has a juge impact on reducing the amount of work for staff.
I won’t disagree however that they could still have menus available for the instances people don’t have a smartphone or are having problems with their smartphone. However, overall the impacts are mostly positive aside from incoviniencing the customer slightly to look at the menu on their phone.
The entire point of going out to eat is customer service. If I didn’t want things like this handled for me I would eat at home. “Slightly inconveniencing the customer” is not acceptable.
What’s worse is I’m now expected to tip 20% to a person that basically runs my food and fucks off. Id be fine with it if I picked up my food at a window. Why am I tipping someone so much money when all they do is deliver food? No talking, no taking an order, no checking in, not even bringing a bill. I was at a brewery recently with one of those order online and bring it to your table setups. I asked for some ketchup when they brought the food and they told me I had to order it through the website. Not going back.
Yeah sorry, if I can view the menu from my phone instead of touching a menu that 6000 other people have touched, without having to deal with either the server taking it away or it being in the way on my table, I don’t see why I would want or need an actual physical menu
I don’t think you should “have to”. I think physical menus should always be available. But if both are available, I certainly think the digital is superior in every way
QR codes as menus are a security risk. A bad actor could make up some stickers and put them on the table in place of the menu QR code. The code could then take the user to a malicious site, that they think they should be able to trust.
I see your point, but that seems highly improbable. That a bad actor would be willing and able to successfully create a QR Code that looks enough like the restaurant’s QR and that neither the patrons nor the establishment itself would notice. Not only improbable, but the roi for the scammer seems very poor.
No one working at the restaurant is analyzing the pixels in a QR code to see if they are in the right spot. A QR looks like a QR code. Show someone 10 QR codes and ask them to pick the one from their restaurant, no way anyone is getting that right based on anything more than dumb luck.
The fake one could even forward on to the normal menu after it does the nasty bits, assuming it’s just installing something that will run in the background. This seems like a great way to get some malware out into the wild, especially if it can’t self-replicate.
They might not be analyzing, but its not like restaurant’s qr codes are just plain generic qr codes.
They are branded, so effort would have to be put into making them appear to be authentic. And I think it’s improbable that staff wouldn’t notice. And again, the roi for the bad actor seems incredibly poor.
They are branded, so effort would have to be put into making them appear to be authentic.
Not really. Branded QR codes are just regular, unbranded QR codes but messed up— You basically just stick the the branding right on top, and then let the built-in error correction take care of the rest. Should take all of 5 minutes to set up, or maybe 20-30 if you wanna be a stickler for detail.
And I think it’s improbable that staff wouldn’t notice.
If I were working at the restaurant— I think I’d notice after a couple weeks— They’d have impunity up to then— But even then, I’d just assume the management switched it out or patched it up because they wanted to change the link for metrics or messed up something backend or something like that.
The staff is paid to wait tables, not to audit cybersec from the perspective of the customers.
And again, the roi for the bad actor seems incredibly poor.
Probably highly variable.
If the restaurant has a lot of patrons that are wealthy and technologically illiterate, with banking apps on unupdated phones with known exploits, then you’d think “ROI” is basically everything in the bank accounts of the patrons.
Same if the online menu includes online payment options for whatever reason.
I’ve seen places with generic QR codes, and at best most would just have a logo in the middle the sticker could easily go around, if that particular target would lead to a big enough pay off. I don’t know what the ROI would be. I don’t know how these hackers make money, but they seem to make enough to make it worth their time.
I’m with you on this, I live in a country where a digital menu is not a given and I hate it more than people who prefer physical menus seem to hate digital menus. I do agree that both should be available as an option
deleted by creator
I don’t think wanting a physical menu to look at is unreasonable for any generation.
or spend like 30 minutes making a decent website i swear online menus are the most asinine thing at every restaurant.
i don’t even require a menu just give me a list with name, price, and ingredients im good. maybe a touch of heirarchy but like then im good.
I went on a date and both of our phones were dead lol
I don’t want to have my device tracked by your cookies in order to eat
Disagree, this is one of those changes that not only is very hyginic but also has a juge impact on reducing the amount of work for staff.
I won’t disagree however that they could still have menus available for the instances people don’t have a smartphone or are having problems with their smartphone. However, overall the impacts are mostly positive aside from incoviniencing the customer slightly to look at the menu on their phone.
The entire point of going out to eat is customer service. If I didn’t want things like this handled for me I would eat at home. “Slightly inconveniencing the customer” is not acceptable.
What’s worse is I’m now expected to tip 20% to a person that basically runs my food and fucks off. Id be fine with it if I picked up my food at a window. Why am I tipping someone so much money when all they do is deliver food? No talking, no taking an order, no checking in, not even bringing a bill. I was at a brewery recently with one of those order online and bring it to your table setups. I asked for some ketchup when they brought the food and they told me I had to order it through the website. Not going back.
Yeah sorry, if I can view the menu from my phone instead of touching a menu that 6000 other people have touched, without having to deal with either the server taking it away or it being in the way on my table, I don’t see why I would want or need an actual physical menu
I don’t see why I should need to pull up my phone to order food at a restaurant.
I don’t think you should “have to”. I think physical menus should always be available. But if both are available, I certainly think the digital is superior in every way
Fair enough. Both is better
The option still seems pretty nice to have.
QR codes as menus are a security risk. A bad actor could make up some stickers and put them on the table in place of the menu QR code. The code could then take the user to a malicious site, that they think they should be able to trust.
Even a restaurant’s legit web site may require cookies or some other thing that not everyone is comfortable with
I see your point, but that seems highly improbable. That a bad actor would be willing and able to successfully create a QR Code that looks enough like the restaurant’s QR and that neither the patrons nor the establishment itself would notice. Not only improbable, but the roi for the scammer seems very poor.
No one working at the restaurant is analyzing the pixels in a QR code to see if they are in the right spot. A QR looks like a QR code. Show someone 10 QR codes and ask them to pick the one from their restaurant, no way anyone is getting that right based on anything more than dumb luck.
The fake one could even forward on to the normal menu after it does the nasty bits, assuming it’s just installing something that will run in the background. This seems like a great way to get some malware out into the wild, especially if it can’t self-replicate.
They might not be analyzing, but its not like restaurant’s qr codes are just plain generic qr codes. They are branded, so effort would have to be put into making them appear to be authentic. And I think it’s improbable that staff wouldn’t notice. And again, the roi for the bad actor seems incredibly poor.
Alright, what if it’s a restaurant that’s popular within a certain discriminated demographic? The risks for such attack would instantly skyrocket
Not really. Branded QR codes are just regular, unbranded QR codes but messed up— You basically just stick the the branding right on top, and then let the built-in error correction take care of the rest. Should take all of 5 minutes to set up, or maybe 20-30 if you wanna be a stickler for detail.
If I were working at the restaurant— I think I’d notice after a couple weeks— They’d have impunity up to then— But even then, I’d just assume the management switched it out or patched it up because they wanted to change the link for metrics or messed up something backend or something like that.
The staff is paid to wait tables, not to audit cybersec from the perspective of the customers.
Probably highly variable.
If the restaurant has a lot of patrons that are wealthy and technologically illiterate, with banking apps on unupdated phones with known exploits, then you’d think “ROI” is basically everything in the bank accounts of the patrons.
Same if the online menu includes online payment options for whatever reason.
I’ve seen places with generic QR codes, and at best most would just have a logo in the middle the sticker could easily go around, if that particular target would lead to a big enough pay off. I don’t know what the ROI would be. I don’t know how these hackers make money, but they seem to make enough to make it worth their time.
I’m with you on this, I live in a country where a digital menu is not a given and I hate it more than people who prefer physical menus seem to hate digital menus. I do agree that both should be available as an option
Your phone is 10x dirty as a toilet seat
You’ve never seen my phone. And I don’t use it as a toilet seat.