Technology

This startup provides a shitty digital menu for restaurants. You scan a qr code that takes you to a terrible website where you submit your order. Once its ready the waiter brings it to you.

Someone opened their ordering webpage on a PC and looked at the API calls being made using their browser's dev tools. Turns out the entire API is public. This person was able to order on behalf of another table and view records of all the sales that took place at the restaurant.

The funniest thing is, instead of disclosing this to DotPe, the person instead wrote a blog post and posted it on Hacker News for the updoots. While describing this situation as a "vulnerability" feels extremely charitable, I think he should have covered his bases to avoid lawsuits.

39

46

Israel's pager attack in Lebanon will blow back: Western tech can't be trusted anymore (youtu.be)

submitted 1 month ago by [email protected] to c/[email protected]

9 comments fedilink

40

7

My 1960s Ukrainian Mainframe Circuit Board Collection (inv.nadeko.net)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

41

13

Delete America, GPS, and BeiDou: the Great Power Competition in satellite navigation systems (youtu.be)

submitted 1 month ago by [email protected] to c/[email protected]

1 comments fedilink

https://ghostarchive.org/varchive/YLQGYZK-8J4

42

14

Thoughts on Firefox forks? (lemmygrad.ml)

submitted 1 month ago by [email protected] to c/[email protected]

13 comments fedilink

Yesterday I accidentally wiped my Firefox profile. Upon creating a new one I was hit with the realisation of just how many shit defaults Firefox has. This made me consider using a fork which un-enshittifies Firefox.

There is only one that I know of, LibreWolf. Thankfully it seems actively maintained. So on Windows I have started using that for now. On Linux I still use Firefox because the enlightened repository maintainers don't allow any Firefox/Chromium forks and I don't wanna use Flatpak or pacakge it myself.

Are there any other forks worth considering?

43

11

YMTC Advances Chip Tech With Chinese Tools, TechInsights Says (www.bloomberg.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

https://archive.is/2AfDy

44

7

New Garbage Tech bro invention just dropped (www.youtube.com)

submitted 1 month ago by [email protected] to c/[email protected]

2 comments fedilink

45

17

Frying pan-sized detector could track US stealth fighters using Starlink (interestingengineering.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

https://archive.is/2024.09.16-214410/https://interestingengineering.com/innovation/china-starlink-detect-stealth-fighters#selection-373.0-373.86

46

8

Tiny DJI Neo Could Be The Biggest Drone Ever (www.forbes.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

https://archive.is/5mr2C

47

32

China’s chip making shows progress with new EUV patent despite US sanctions (www.scmp.com)

submitted 1 month ago by [email protected] to c/[email protected]

7 comments fedilink

https://archive.is/AQMn6

48

7

Are there any Lenovo Thinkpad models that are good at handling video editing? (lemmygrad.ml)

submitted 1 month ago by [email protected] to c/[email protected]

3 comments fedilink

Looking to get a new laptop and this is what I'm thinking about.

Also do they overheat quickly?

49

3

Swarm of Micro Flying Robots in the Wild (www.youtube.com)

submitted 1 month ago by [email protected] to c/[email protected]

2 comments fedilink

50

25

The Failing NYT: How Telegram Became a Playground for Criminals, Extremists and Terrorists (archive.md)

submitted 1 month ago by [email protected] to c/[email protected]

7 comments fedilink

A list of grievances of the US government and I think that they are directing the arrest of Pavel durov

"The company can gain access to messages unless users select a secret chat option with end-to-end encryption, according to two former employees. On at least two occasions, the company has retrieved the messages of former employees, one person said." LOL, the pretend privacy branding