Life Hack
Life Hack
Life Hack
The meme says "IRS", so it's obviously intended to refer to America.
But outside of that context, they'd fucking deserve it for their shitty dark pattern UX trying to export American tipping culture into the civilised world. If people want to tip, they can do it using cash (so the money actually goes to the person you intended it to!). Or at most, there could be a little "tip" button in the corner somewhere that then takes you to a page like this. It shouldn't be shoved in our faces like this.
Live in a country where tipping is practically unheard of. Lately pay terminals have started appearing in restaurants that have asking for tip enabled by default, and restaurants often don't know how to disable it.
Well, at least there are some safeguards. I was handed the terminal so I put in my PIN code, not realising it was actually asking for a tip. I was pretty confused when it said "value too high" or something like that.
I, an American, was ashamed when I had to ask that a tip be removed from my bill at a restaurant in Camden.
CAMDEN WAS SUPPOSED TO BE WOKE AND Y'ALL FUCKING DOG OVER HERE
Pay your damn staff a good wage
In most places even if you tip cash they are supposed to keep that for the tip pool and it is split. Often among the cook staff and other people at the restaurant.
Americunts shit on you when you tell them tipping culture is bad. Like, here in my third world country, where we all earn a misery compared to the minimum wage in burger land, we can say no to tips or just give a few cents or some more...fuck this. Food is already expensive. I am not going to waste extra cash for my food.
Little Bobby Tables says hi.
Hi!
You're not so little anymore!
Whaaaaaaaat!?!?
Oh no! He's arrived
the adjectives on the tip options are so weird lol What a shitty system to even exist
I want to know what it says under 30%.
"Best Service Ever!"
bazinga
I think it's "Best Service Ever".
The picture on this page seems to have the same screen minus the red box.
"I'm drunk"
"Scammed"
One day someone will use the SQL injection to execute code on the remote server to add message to the web site that tells the workers to unionise and demand actually fair wages and put an end to the whole tipping nonsense
Please write this code and I'll do it tomorrow when stuff opens today.
Jokes on you. Restaurant owner too rich, behavior is within normal range for IRS AI.
Though the AI is interested on how your bank account is higher than it’s supposed to be.
Joke's* on you
(Short for "The joke is on you".)
Thank's.
No, jokes. It's plural because there are many jokes on you.
Too complicated. Just enter a negative number.
No negative sign on the keyboard. But you can enter 2147483647
Risky gamble there
I'd love to know what this would actually do.
Edit: Thanks for the responses and lively discussion!!
Assuming the accounting system this thing links with both does not protect from SQL injection attacks (many don't, despite it being easy to protect against) and also has a table named "Bills" with a field named "amount"; what this would do is go through every single Bills record and half the value in the amount field. This would completely fuck the system, particularly when it came to billing and tax filing as the numbers for accounts billing and receivable wouldn't even come close to matching each other. The accounting department would have a hell of a time fixing the damage.
does not protect from SQL injection attacks (many don't, despite it being easy to protect against)
Every modern database library automatically protects against SQL injection, usually by using prepared statements (where the query with placeholders, and the placeholder values, are sent as two separate things). so a system would have to be written extremely poorly to be vulnerable to it.
This post is just a joke as developers should hopefully be aware of the OWASP top 10 security vulnerabilities.
Edit: Bad developers will do bad things, but any reasonable developer should be well aware of these risks.
EOM recon will be a bitch.
its an sql injection attack.
its rather unlikely that it works in a modern app.
assuming this would work,
it injects a command in the sql database.
it is assumed that the app runs a sql querry with the input field as a parameter e.g.
INSERT INTO "bills" (item, ammount, tip) VALUES ("steak", "20,00 $", "content of the custom tip goes here");
the semicolon indicates the end of the querry,
so the the text would cause the app to run an unfinished querry, and then start a new querry that messes up the content of the bills table.
Further: xkcd.com/327
Nothing. For one, it won't let you enter letters. Two, the table structure to these POS systems are more nuanced than a simple bills table with am amounts field.
It's amusing and all, but it's not something you can do.
Source: work with, and develop around, these types of POS systems.
What code could I enter there to get them to pay me for the food? 🤔
Amount/0
Negative tip value.
I wish 15% and 18% were options. Normally it's more like 20%, 25% (default), 28%, 30%
Eventually people will say that about the current options lol.
There should be no default percent options at all. None.
'complete transaction' or 'add optional tip'.
I hate %, give me a option to round up to the nearest 5. This is useful for my financial tracking, and I'm willing to bet a lot of people would like nice round numbers. If I buy a coffee or whatever and it's $7 I round up to $10, not because I'm trying to give a good tip but because it's more convenient for me when I'm sitting there doing my finances (I track everything) and while I know that not everyone would universally agree maybe they would only want to round up to the nearest whole dollar the fact remains I feel like most places would actually end up with more total tips overall if that was a one button option
Can't they trace it back to you since you're using a card to get that prompt?
In my country, we can buy pre-paid credit cards in the supermarket using cash. I guess that is still traceable using supermarket security cameras and facial recognition, but if you're attempting this, I'd make it as difficult as possible.
You just have to buy a prepaid card through another third party
This isn't even remotely viable. There's so much isolation and "cloud" shit that it wasn't viable from the start. It's just a joke.
Maybe. If they can identify which record was the last one changed and the last one changed its directly related to the one that made the change and the ended transaction statement successfully posted a transaction
If the SQL injection crashed that person's transaction there's little chance of finding the culprit
I laughed a lot at this.
Does this actually even work any more? I figured most things protected against it nowadays.
I highly doubt it, most frameworks do indeed automatically prevent it these days. Still funny though.