Steve Could HACK “Every Last Privacy Detail" From Mom's Software In Two Minutes | Shark Tank AUS

Check out Tractag's Website Here - www.thnxtags.com/pages/sharkt...
Steve Baxter ensures businesswoman he could write software that would tear every last privacy detail out of Maree Machin's QR system in a matter of minutes. Maree is pitching for an investment of $200,000 in return for a 10% equity stake. 'Tractag' - QR codes that you stick on your valuables so people can return them to the rightful owner.
An international sensation, Shark Tank AUS features entrepreneurs pitching for investment in the Tank from our Sharks, five venture capitalists willing to invest their own money in exchange for equity.
As Seen On Shark Tank Australia Products: amzn.to/2ZJBbyf
Shark Tank US Products Collection: amzn.to/3bMNjmI
#SharkTank #TRACTAG #DataBreach #Hacking #Mods #Equifax

[@rubuntux]

As a software developer I saw so many people like her that spend tons of money to outsource a software that can be done just in one day 🤦‍♂️ I'm really sorry for her

[@goodkisser8591]

Knowing she sold her house for some software that she could learn to code with a week of KZbin tutorials is painful

[@KuzkayDev]

​@@goodkisser8591 I don't think a person that has 0 coding experience could write such thing after a week of a youtube tutorial, hosting, domain, database, php, javascript, html & css, sql queries etc.

[@user-ej4dm2xq6q]

Same here. I feel sorry for her.

[@saturnGEEK]

@@KuzkayDev She could've had a uni student build it for her for $20k. The website and functionality is far easier to deploy than you make it out to be.

[@makers_lab]

Right. The QR code just links to their site with a unique code, which can also be entered manually. You can then enumerate the stored details by changing the numeric id in the URL. Contact details generally aren't shown and the site can contact the owner, though presumably they were when steve tried. Looks like only a few hundred tags were ever registered. Plenty of ASP errors, such as clicking the news page, entering a non-number for the item details ID or viewing contact details for a tag that isn't registered. Signup confirmation has an http rather than https URL. Grammatical errors in some of the website text. Tag ID's with O and 0 characters. Sadly very typical standard for many outsourcing outfits.

[@suchthefool188]

Steve was so distracted by data privacy, he forgot to ask where she was from.

[@MRUltimatePS3]

He knew he would find out where she is from from her QR code

[@MrJamberee]

He knows she is from the local mental hospital.

[@jimsuniverse4954]

@@MrJamberee dead 😂😂😂😂😂😂

[@exhale7873]

suchthefool88 you were so distracted that you forgot your comment isn’t original.

[@alikayyal9050]

Dean M he would probably say “Noice” first

[@guents]

What sent shivers down my spine is not the privacy issue, but how this lady probably ruined her life. I really feel sorry for her.

[@riturajupadhyay3692]

After watching this I felt bad for the lady but I found out that She is doing good with her new business Telltale bags now, so feeling good. Even some newspaper of Australia covered her story.

[@amzwl1671]

@@riturajupadhyay3692 thank you, I am much happier now

[@combsbrushes777]

Jesus christ is coming back, people look to God put him first read your bible and pray Jesus loves you"

[@mgproductions2007]

@@combsbrushes777 Wowi! Jesus! coming back after all these years? What date? I'll set it in my calendar.

[@ClassifiedPerson]

@@combsbrushes777 nah come back from where? Popout from virgina?

[@BrendenElola]

When the investor doesn’t realize every smartphone has a qr scanner now. You don’t need to download an app

[@vueport99]

What's more incredible is the website is still up

[@keenannelson-barer307]

This was made 2012

[@gothicherie6691]

Yeah she’s fucking stupid, does ur phone have a camera? Or do you use a flip phone

[@vishnuvijwani]

@@keenannelson-barer307 no. Steve was using samsung s7 edge. Maybe in 2016-17

[@wintermute8315]

You mean the investee?

[@Crypdography]

"QR codes are hard to scan" Damn, it must suck being old.

[@Kaser]

millionnaire but still got a potato camera on his phone lmao

[@sayyamaneja]

yeah man, it took him 90 sec . how ?

[@nicolo7789]

I'm pretty sure these videos came from older episodes.

[@SomethingAbstract]

@@nicolo7789 they come from 2016-17 episodes from what I've seen

[@thenorthcarolinian6796]

They are annoying sometimes...

[@TheNameIsForty]

lol she sold her house for a piece of software that i can write in any short weekend.

[@kaing7161]

its quite simple ye. i dont see how you can spend 200k on qr codes tbh. absurd amount of money

[@w3w3w3]

Same, lol... wtf?? Clearly this is when people who no knowledge of software/computers ask someone who is meant to have the knowledge and then gets scammed by them and taken for a ride...

[@killler240]

This was likely from a few years ago, when knowledge was not as well spread

[@kpan]

@@killler240 No, even a fairly new software engineer can program something very similar in a week tops.

[@JewTube001]

@@killler240 qr codes were already ubiquitous in east asia by then. i really don't know what this woman is selling, i guess it's just a printing or merchandise service as the qr itself is free to generate but can't be written by hand like a phone number. turning it into a subscription service by renting out webpages only makes the proposition less attractive as i can already link to any and all of my socials for free.

[@damonhtoo]

The exploit the shark found was almost certainly that the app used sequential ID's in the link, so you could change from /0000001 to /0000002 and get a different customer's info. So when he says he could script it in two minutes, he's not exaggerating.

[@Disatiere]

Either that or its random DB IDs such as EFSFGB434DF where you could literally just bruteforce the system

[@rtxf]

But it’s so easily solvable though… just put a 4 digit access code on the tags

[@Disatiere]

@@rtxf Make it infinitely more secure by allowing any Unicode character in the code and 8 characters long

[@jukimv1986]

It should be a two key system, a single key system is really poor

[@CokesAndTokes]

Wasn't that like a super big exploit for a bank or government website. I remember hearing something about that.

[@NaphtaliFox]

She spent 200k on software thats easier than some projects I did in AP Comp Sci

[@ChronicNewb]

I made one of these last night with an apple shortcut, a printer, and a keychain

[@harryjey8830]

"than some projects I did in AP Comp Sci" mate a 10 year old child could make this for free.

[@nugget7865]

@@harryjey8830 Yeah, even unborn fetuses could do it and pay YOU at the same time!

[@Songs-lr4wt]

@@ChronicNewb okay people calm down. She spent that money on kids who made that website and app. Grandma herself didn't made those

[@carolinegallegos_]

@@harryjey8830 I’m so bad with technology and I could easily make these within like an hour. I’m floored it took her $200k and she doesn’t even have an app to show for it.

[@ethank5681]

This app is great! Steve can finally find out where everyone is from!

[@ezekiel0606]

winner!

[@vanilleu3003]

AHAHAHAHAH

[@treylon_sprayart]

Lmaoo you binge watch these too 👌🤣

[@damianchong2305]

HAHA YEA

[@_.WildMoonChild]

🤣😂👌🏻

[@FrankRoosevelt32]

You have to feel for her. She literally spent every last dime and didn’t realize it’s the exact same as a 50 cent dog tag that you write your number/email on. Only her product makes whoever found it do more work. Not to mention the data issue...

[@gnack420]

Why would I feel sorry for her? I feel sorry for her kids that she's throwing away her boomer money on this bullshit instead of supporting her children.

[@CorporateShill]

Nick Coad Did you just use boomer unironically?

[@johnnyfrankenstein0123]

I feel like I should feel sympathy towards her but then again she sold her house for a product that overcomplicates the process and to add insult to injury theres a privacy problem, if theres any sympathy for her its sympathy cause shes that incredibly dumb

[@loganc2380]

Also she decided to SELL her house instead of refinance it out (so she has the house and up to 75% of the houses value), so there's no backing out

[@shrodingerscat8940]

And a code that will take an afternoon to make

[@kielcarson6776]

The way this should work is instead of showing the "finder" the owner's info, they should have a button that just says "send notification to owner" with a text field to put the address, and the app will let the owner know where they can pick up their item

[@EloquentTroll]

Oooh, that's actually a good innovation on the idea. I don't know if it saves it, but if we can get her hooked up with programmers that aren't scam artists she could implement it for a couple hundred dollars at most. Heck, I can write the web front and back end if someone who knows mobile better can write app side.

[@Z5Z5Z5]

@@EloquentTroll 🥺🥺

[@StratospheralNurse]

Who wants to give their address to a random individual who they’re never met?

[@kielcarson6776]

@@StratospheralNurse it doesnt have to be your address. The establishment where the device was found would be fine, or the police station you'll be dropping it off at

[@damonhtoo]

@@EloquentTroll "for a couple hundred dollars at most" living up to your name.

[@xl3bigdrizzy891]

The people that took her money to "develop" this, should be ashamed.

[@MrInk113]

Nah, she should.

[@inverovenevectum6857]

I dont even know what they „developed“. This is a QR code backed with information you can scan. Every child could do that…..

[@gamingsportz3390]

Why, those are developers not lawyers. They do the product and do not publish it. It is not like they developed an mobile artillary system for iraq.

[@TheUnitedNations.]

I'm pretty sure she hired freelance workers. I doubt they knew how much money she was sinking in the business. They were given a brief. They did their job.

[@johndorian4078]

@@inverovenevectum6857 Maybe today, but not so much back then.

[@Halbmond]

6:16 the way she said “oooooooh *loud whisper* Hackers!”, that’s such a mum reaction 😂😂😂

[@RydalS]

😂😂😂😭😭😭

[@gnack420]

Hahaha yeah I literally laughed out loud at that. What a dumb ass.

[@harryvanderveen773]

Now you know who not to take money from if you're a tech company haha.

[@alfarasyiedsyahrizad5395]

Thats not even the right word lol

[@kylezindel314]

Nick Coad yeah dumbass that probably has 10x the next worth of your family

[@KabbaModern03]

This is why old people don’t need to do anything, she could’ve made her website for $12-$15 with a website builder, shopify can place a QR code on a piece of paper for your business and you can implement it to your website. She didn’t do enough research.

[@FloppydriveMaestro]

If people really wanted to use a QR code you could just get a QR code that says if found call this number and then a phone number. There is no reason for her product to exist at all. It just adds a bunch of pointless steps to getting a return address

[@johnnyfrankenstein0123]

@@FloppydriveMaestro yeah, she sold her house for such a dumb product that actually overcomplicates the process, yikes

[@macealvaro2]

She should have just test the idea and the market response before investing a dollar in developping. 20k is too much for a test.

[@dub161]

@@macealvaro2 200k it is!

[@damonhtoo]

She still got 200 people to pay her $30 a year for this service. Even using static web hosting is way too much time and effort for most people.

[@zorberlolzer792]

This lady is the example of how dangerous it can be not knowing anything about technology.

[@ericag4908]

It's also an example of how lacking common sense and critical thinking skills is dangerous.

[@anant6778]

@@ericag4908 It's not dangerous, it's immensely profitable. Her company is making a butchering.

[@BombShot]

Honestly, the saddest part is she spent 200,000 and I could've made this myself with 15 bucks and a laptop lol

[@youtubeSuckssNow]

She should have hired a comp sci college kid strapped for cash. Spent like max 1k all said and done

[@GreenDudeHC]

Why would you ever subscribe monthly to this service when you can buy keychains with paper inserts for less than a dollar, and write your number...

[@JewTube001]

well, you're also paying to put your details on a public webpage that everyone can see.

[@samuukxs1417]

JewTube Yea It’s great I get all these girls messaging me on my email asking for a good time for some money! Haven’t met any yet and down a few hundred but I’m sure I’ll meet one soon!

[@jasonleejames_official]

Its not just for keys though. It's for anything the customer is dumb enough to think someone would return to them just because they felt like being nice.

[@rhinestonecowboy9967]

There’s also inexpensive bluetooth keychains that exist that are literally just small tracking devices so you can keep track of keys/wallet.. Knowing that exists, buying a subscription to have a tag that you’re depending on someone else to find and give you your keys/device back does not make any sense at all. None the less without even considering the awful privacy concern.

[@FrankRoosevelt32]

Gotta feel for her though... she literally spent ever dollar she had and didn’t realize this until she was on shark tank. She had no response for that.

[@enclocreations4427]

Here’s the security concern that Steve is talking about - every time you scan a tag it takes you to a url. That url has a number id instead of a tag id attached to it, meaning that anyone could just increase this number id by 1 and re load the url to find a new item they weren’t supposed to see. This would effectively allow anyone to search the entire sites database as they could just keep increasing this number by 1 to find new items and the contact details of their owners. The fix is simple - just attach the tag id to the url instead of a number id - or better yet (so that the google recaptcha thing the site has has a purpose, use an entirely different ID that isn’t number based for the url, and just return a 404 error if the that id is invalid)

[@rodrigojager]

You can have an even better solution that is easy to implement: On the website there is only a form for you to text the person, no private information at all.

[@Exachad]

Exactly. This is a huge security flaw that's so easy to fix I've even seen successful businesses do this. A recent company I ordered from partnered with a local logistics company for shipment and their tracking code was the company's initials followed by four digits. You can bet I checked the codes before me and yes, I saw the name, address, order, etc.

[@saspect2462]

IDOR

[@cu7695]

The issue is not just with url but with website itself. You can write a simple script to enter different numbers and iteratively get data out of her website. The fix from website site should be limiting number of attempts per browser, per ip traffic

[@infiltr80r]

Depending on the length that's fallible also. Can just brute force it to get the details.

[@figloalds]

I know exactly what Steve found, yes it's a naive programming mistake, but even still it shows that the dude really knows his shit. Yeah I know he worked mostly with tech companies and telecomms, a renowned tech guy, but it's just nice to see a business man using his "tech-guy" skills;

[@ItsAsparageese]

Yeah, it's definitely nice to see someone who's generally just in moneybags roles actually demonstrating some specific applied useful knowledge about how something actually works. I know plenty of investors and business leaders out there got to their positions by knowing real trades well, but too many don't really understand the ground floor of their industries.

[@colmarek]

What did you find? Because I looked into it and what I found made what he (Steve) said wrong.

[@ItsAsparageese]

@@colmarek Lol you want to elaborate? Steve was absolutely right. If the company has changed practices now then good on them, but the problem was simple and straightforward and is also all too common

[@colmarek]

@@ItsAsparageese Changed practices? lol. How would they have changed a QR code that's been printed, recorded in a video then uploaded? Scan the tag at 2:25 and you'll notice that it's not a numerical ID, as people are assuming (and not bothering to confirm). They also have rate limiting, which Steve wouldn't have been able to determine at that time. I've watched enough Shark Tank to know they sometimes say things that are absolute nonsense, sometimes even contradicting their own lives.

[@xenosfur]

@@colmarek They don't need to change QR Code to change the webpage's function. The URL on the QR code stays the same but the admin can change the webpage at anytime. Unless the QR Code does not contain an URL but instead just contains the information (Phone Number, Email), then yes, you cannot change that information without changing the QR Code.

[@VrIgHtEr]

How does one spend 200K developing what is pretty much just a typical exercise done in a 1 hour web development class?

[@theoggoodjedi]

If you're not familiar with How back end internet work it's an easy situation to take advantage of, unfortunately

[@MS-gn4gl]

That she literally didn't immediately tell Janine that any cell phone from the last few years reads QR codes in their camera apps was a huge miss.

[@Jomskylark]

These shows are super edited and usually a lot longer, I wouldn't be surprised if she told her

[@LegDayLas]

@@Jomskylark based on how little she was shown to know about technology, I highly doubt she knew that. Hell a multi millionaire business investor is saying "my phone doesn't have a qr code scanner". Yes, her phone obviously does, she just doesn't know about it. You would be shocked how many people still don't know how to access a qr code from their phone. When all restaurants switched to qr code menus thanks to covid it was a nightmare for servers, as they needed to explain step by step how to access the menu. (this mostly applies to android users, as apple users it's simple enough to explain "just use your camera app and click on the popup (this was still confusing to many old people))" but most android need qr code scanner access turned on in settings, as factory settings has it turned off on the camera.

[@ZombieHotDog42]

Its from 2014........

[@rudrasingh6354]

@@LegDayLas Google Lens has built in QR code scanning. Xiaomi phones have inbuilt apps for qr codes. (My experience is in stock android and Xiaomi phones but im sure other companies have built in stuff like this too. And if not, downloading an app isnt that hard. Besides you can still click a photo and run it through google photos app on your phone which also has google lens built in)

[@LegDayLas]

@@rudrasingh6354 Sure. But why tag me with that? I know they all have qr code scanning capability, all I said was with android it's not as cut and dry as using the camera app right out of the box, and the user needs to actually enable it somewhere. Yes it's not hard for a competent person to do this, but that's not a very common trait people have.

[@SurrealShade]

So... if you know their name, you know where they live basically... and you have their keys? I wouldn't trust this one bit.

[@Netrole]

Last thing i want on a lost key is the location of the door it belongs to

[@noarmsally2628]

Netrole why? if you have your address on the keys, they can leave the keys inside so that they don’t get stolen again.

[@kineticblues2766]

NoArmSally funny guy. 😏

[@KennethT32505]

Yep

[@jasonleejames_official]

The smart thing would be only leave your phone number but w/e.

[@PorkYoSelf]

Everyone mentioning how every camera can scan QR codes now is forgetting just how many people didn't know this. With the rise of QR based menus during COVID, a lot of people were discovering this feature for the first time.

[@herefortheshrimp1469]

Thank you. Me and my entire group of friends had no idea that our phones could do that before the pandemic. It wasn’t common to need to use it until recently!

[@benhaney9629]

“I don’t have a QR scanner...” Yes. Yes you do...

[@JesusisJesus]

I’ve been trying to take a photo of every QR code everywhere I go for 6 months and all it does is tell the government where I’ve been not spreading Covid.

[@Tooamazin]

So many idiots posting saying she does, while she MAY have had it you have no idea. This was filmed in 2017, her phone is easily 6+ years old. Phones in 2016 or earlier did not all come with built in QR scanners.

[@infiltr80r]

@@Tooamazin Mine is from 2019 and doesn't have one.

[@Forslimjims]

@@Tooamazin Hate to break it to you champ but she's a multi-millionaire, she doesn't have a 6+ year old phone.

[@Tooamazin]

@@Forslimjims Hate to break it to you but this was filmed in between 2015-2017, so yes she did.

[@indyjones1173]

I'm pretty sure that's the reason Bingo was invented, so old people don't get bored and do stupid things

[@wallstreetbro2915]

Do you call your mom old with that mouth

[@ohheyezz3046]

@@wallstreetbro2915 ???????

[@crazyspace6792]

@@wallstreetbro2915 Do you say dumb stuff to your mom with that mouth?

[@cynthiamckenzie8451]

You are so rude. Lots of older people are tech savvy

[@ebonimom6964]

Never have I agreed with something that I was so offended by

[@tomburns5231]

This is so simple to make. How did she spend $200k on it? And the hacking problem can be fixed with one simple pivot: make the QR code/number direct to a secure messaging service that has no personal details but which sends the message to the owner.

[@MikeStrongman]

my thoughts exactly

[@MsLax45]

Bc someone took advantage of the fact that she was old and not too tech savvy unfortunately 😣😓 happens all the time.

[@Jomskylark]

I doubt it's even a serious hacking issue. This is the guy who took 90 seconds to scan a qr code because he was holding the thing too close to the phone. I doubt that guy knows much about encrypted info exploitability

[@shawnmyers6571]

@@Jomskylark ironically hes been an internet tech, inventor, etc. He knows the engineering side and the tech side. Which surprises me lol.

[@johndorian4078]

Work for government sometime, you'll see how easy it is to waste 200k and get nothing in return :) The am ount spend doesnt mean it was spent well. And yeah just put the phone number on there would be a much smarter idea. It would make a lot more sense to scan it and it take you to a page that does the e-mail and all that for you. And maybe now they learned

[@mahshidmhd8732]

I just want to give her a hug and cry with her because of how much she sacrificed for a not only unsuccessful but dangerous service

[@Jomskylark]

Dangerous? How is it dangerous? This is no different than writing your phone and email on a key tag. If someone gets your keys they have your contact info... to do what exactly? Send cat facts? Most people are fine giving a little contact info in order to increase chances of getting their stuff back

[@riturajupadhyay3692]

After watching this I also felt bad for the lady but I found out that She doing good with her new business Telltale bags now, so feeling good. Even some newspaper of Australia covered her story.

[@robmckennie4203]

It's a privacy concern, but really worst case scenario is winding up on a spammers call list, I wouldn't say dangerous

[@DrakeOola]

@@Jomskylark Except this is worse because anyone can go to the website and scrape the data of every single user in a couple minutes... Chances of someone nefarious finding your keys when you lose them is low but companies would pay top dollar for a database with user information like this. All it takes is one slightly tech savvy person to visit your website and suddenly you're being sued left and right for leaking information of a hundred thousand people. One phone number, email address, etc... is useless but having thousands of them in a nice compiled list with no security is asking for problems.

[@Tazmazy]

The company is worth millions now...

[@jonathanmarvens]

Oof. When she said that she sold her house for this, my jaw just dropped. That’s insane. I’m a software engineer and I could build all of this in a weekend, tops. This poor woman allowed herself to effectively be scammed out of everything that she has for nothing. Wow!

[@NoName-fm2cy]

200k? Lol, shes just tryna get her money back, so she can break even.

[@MrJamberee]

Yeah, I think she would head for the hills if she got her 200k back.

[@lightningadam6064]

She made 6.6 million from it

[@JRHainsworth]

Is anything stopping these people from getting the money then just closing the business?

[@jbac5767]

Literally for the sale of her house....Best of luck to her.

[@snq8068]

@@lightningadam6064 how do you know?

[@angrydevilentertainment7456]

This could have easily been done as college or University project..... She messed up paying for this

[@compactcow]

This could be done as a one day project by highschool students

[@lightningadam6064]

No she didn’t the company is worth 6.6 million today

[@tonydarcy7475]

Lightning Adam Where did you get that from?

[@ItzBlazeofficial]

@@compactcow easy

[@marinagaul]

@@BugattiBoy01 The tractag website gives a 404.

[@mspatches22]

What’s funny is I work at a vets office that literally gives owners tags exactly like this to put on their pets collar 🤣🤣

[@Jomskylark]

Yeah... for a pet. If you need a dozen for various items the vet isn't gonna help you out lol

[@LegDayLas]

@@Jomskylark you know you don't need to get dog tags from vets right? It's not a controlled item. Regardless, all you really need is some sticker paper to write your info on, and you can put it on anything the same way this works. as for keys, they already sell plastic paper holders that can act as a dog tag (or just put a dog tag on the keys)

[@nahfam360]

For those wondering, her business had $1million in revenue last year. Good for her!

[@NGMonocrom]

She's delusional. I feel sorry for her. I genuinely do. Very soon she's going to have a moment of horrified realization when she gets hit with the fact that she sold her house to fund something that's basically worthless.

[@Jomskylark]

Her business is worth over 6 million, but nice try at being a total prick for no reason. The product isn't for everyone but that doesn't mean it's garbage

[@choerrim7745]

@@Jomskylark it’s not worth 6 million where’d you get that from?

[@brentkranda4422]

@@Jomskylark it’s not worth anything basically helping me rob here house by giving me the address to the door her keys go to knfaoooo

[@brentkranda4422]

@@choerrim7745 he got it from nowhere lmfao it’s worthless as shit

[@ChronicNewb]

Yeah. If you're an entrepreneur with a family, you gotta know where to draw your limits

[@bojanbilic1959]

Any piece of feedback: "Yep." Literally any question ever: "Yep." Did you keep your day job: "Nope."

[@jrenee1040]

I was thinking this too. Those short answers just seemed so dismissive and almost rude. As if she didn't even want to be there and participate.

[@morganmxavier]

no one: absolutely nobody: her: yep

[@Nicky_T]

5:55 I think there should be a feature on the app that only reveals information if the tag has been labeled as ‘missing’ by the owner

[@robmckennie4203]

According to the website that is how it works, at least now

[@mostlypeacefulrowan8747]

Yep she got robbed

[@ridef0rlife]

Yep

[@zionsky7761]

Seriously Robbed though

[@arctyze]

*YEP*

[@AdrianCalinescu]

She did not get robbed. She wrote out a spec and a software developer took her money based on the spec she had. She did not understand the business

[@drakebentley1190]

She robbed herself. She essentially went to an ATM and put a gun to her own head and took money from herself, went home and burned it.

[@alecshrad]

She paid $200,000 for a website, IP_addresses, and a Internet technician ? Could have paid 500$ for this if she knew a thing about the internet

[@sucram1018]

The problem is that some old people don't care to learn about the internet despite it being a necessity in today's age and the last 15 to 20 years. Some old people are fine not knowing anything about the internet if they don't need anything that requires the internet's involvement.

[@craiginzana]

We help people turn their ideas into software and this would not cost that much to do. But unfortunately we see this happen so much where people get in with unethical or overly complicated dev companies that take everything they have.

[@bogbog]

How is anyone making fun of Steve for actually looking into the privacy of the data? That's actually a major downside of the product!

[@stevensanders6696]

Not just a downside, it's a legal liability. Even with just 300 costumers, that's 100% of your customer base impacted by a data leak with a really simple program. Forget the 200k she has already invested, she could be broke for life just off the lawsuits

[@ItsAsparageese]

To be fair, it would be trivial to tweak the model by simply making a database where users register their information alongside the unique tag ID, and the tag service itself intermediates the communication for security/safety. That's precisely how pet microchips work. And it would reduce friction for the end user trying to return an item, because the code scan could take them directly to a page with a single form field to enter their own contact info (or "it's at the Blahdeeblah police station" or whatever) and a single button to send that found-alert to the owner, rather than the finder being expected to secondarily contact the owner themselves. But I do agree with the criticism itself even though the fix would be fairly simple. And even with the above said/with the simple fix, people tend to really struggle to understand how pet microchips properly work and fail to register their information/keep it updated because they think the chip itself just directly says their address, so there's already a well-established effectiveness hurdle to that model as well.

[@SexySnopeyYT]

Well yes she does have a QR scanner on her phone 😂 she just sucks with technology

[@Matthew_M11]

over opinionated yes just point your camera at it and it'll come up automatically

[@EnricoBM]

over opinionated yes

[@BrutalBeast666]

@@Matthew_M11 Not on Samsung A8 (2018) at least. I know since that is the phone I got from work. A hateful phone.

[@gnack420]

Yep, any modern phone (< 2-3 years old) has QR scanning as a built in feature.

[@timmywh]

Many android devices camera app doesn’t recognize QR code you just sucks with technology

[@MrJamberee]

Oh, my. A complicated tag instead of just a phone number. She’s gonna be homeless soon.

[@iforgot1135]

bitterman co pretty sure they’re grown and live on their own, she never said they lived with her

[@SoaringEmbers]

@@iforgot1135 except she literally did... At 5:46.

[@A12008X]

@bitterman co well she said she sold her home and moved in with her son but still shes broke af and her idea is way bad

[@rhys9957]

there is an advantage to having that layer of abstraction there. you can update your details on the site and any of your lost items will refer any finders to your new details. thats the only redeeming quality

[@A12008X]

@bitterman co yea not the brightest idea, I think in another comment I said that idea only works if the person who found the items is going to return it I mean alot of people who find cameras phones etc would peel that sticker right off and keep it.

[@allanjohnkemp]

Little did Janine know that in 2020 everyone would be a qr code expert

[@wondergirl2642]

I was looking for this comment

[@mikedx42]

This show taught me: if I think about selling my house, I'm about to be an idiot

[@bas_kar_na_yar]

should have just outsourced it on a freelancer website.. could have got the whole system for $300

[@herogebrial]

It's all it cost? Which site?

[@compactcow]

@@herogebrial it's built on previous technology, QR codes. I could write this in a weekend, and I'm a slight programming noob.

[@invictuz4803]

@@herogebrial Sites like Fivver.

[@abhishekm3752]

300 is a lot. People can be paid in exposure😂 Thats the trend in tech world these days

[@shubham___gupta]

Can develop this under 100$ 😂

[@vambo13257]

Your business sucks Marie: "lovely"

[@hugoroberts6064]

Yep

[@leeshanpillay1253]

@@hugoroberts6064 This "Yep" is underrated 🤣

[@boombang903]

"Thank you"

[@kimberlyskits7241]

fair enough

[@johnnybrown7810]

""Yes"" ""yep""

[@SkillLevel0]

“You need to have a QR scanner on your phone?” “Yes” “Well I don’t have that” Your phone doesn’t have a camera?

[@alexandriathomas5877]

Not all phone cameras are equipped with it

[@kickwriteteach2313]

it goes to show how out of touch the owner is. she should have known that all iphones and androids read QR codes by default.

[@christopherrichardson6646]

yeah bothered me too. I only imagined her using a 1980's brick phone

[@alexandriathomas5877]

Not all androids have it by default. At least mine didn't lol

[@mrqwert1989]

If your phone is less than 5 years old it most definitely has a QR reader. You probably just don't have it enabled or don't know how to use it. Maybe the 30 dollar prepaid phones don't have it, but the 100 dollar samsungs do.

[@golling3334]

I feel the security issue could be pretty easily solved. Just make it so instead of displaying the person's contact info you could have your website allow you to send a message to the owner, and said owner would have been able to set up in their account where they would like messages forwarded. I feel like this is a small speed bump that's getting blown out of proportion. Also don't most phones these days have QR code scanners integrated in the stock camera app?

[@AquosFrost]

the episode was released before qr code was integreated into stockc amera app

[@VPCh.]

No. That's still a security breach. You would need to store usernames and passwords securely for the messaging features. It would need to almost be rebuilt from the ground up to fix that issue. Tom Scott has a lot of good videos where he explains more about the weakness of it.

[@MuffledSword]

That requires more back end programming work. Where's she going to get another house to pay for that?

[@DrakeOola]

@@VPCh. wrong

[@MB-wl9qr]

That's got to be a world record 9000 yeps in 9min

[@tobiasgoldman]

In the end she wasn't even taking it in, she was just letting it fly past her to save herself from the pain, ducking it. Poor thing

[@Off3er]

She prob understood she fukked up baaaaaad

[@racingrivals8934]

Yep

[@dakadoodle6295]

Take a shot everytime she says “yep”

[@josephgamba6513]

Dakota Kuczenski do you want us to die mate?

[@maxcooper8843]

@@josephgamba6513 lmao

[@michaelrogers7386]

I tried this with a sip of beer and now I've had almost 4 in 8 minutes

[@charlesvallieres154]

@@josephgamba6513 yep

[@KnoxByNight]

Came here to say this 🤣

[@tylertheswagking5391]

I genuinely feel really bad for her. She has invested everything into something she is clearly putting her all in to but because she lacks so much knowledge in the field she Is getting in to she basically burned her 200k

[@xhyhbdka]

Besides the idea being absolutely ridiculous, that app would have been made in a day and cost $500. She certainly did not consult with a trusted party on this...

[@12347414]

When she said I sold my house for money, look at the face of Steve he really felt that and knew about the struggle she might get through

[@drewmott9443]

8:16 I hope your 200 thousand isn’t lost. “Yep” 😂shes got to stop with those yeps

[@troyd4235]

Deep down, she knows they're right, but she is too stubborn to admit it, so she just blows off what they say by saying "yep" because she doesn't want to hear what she knows is the truth.

[@xXxOmarSanchezxXx]

Needs to make it so that the track tag item can get sent to an office that uses the track tag to locate the customer and return the item to them. Mark the item as lost and the second it gets scanned marks it as found. Use RFID on top of QR code. Can setup lost and found stations that customer can place the item into. Can give customers the option to make rewards for lost items to encourage people to bring them to the stations.

[@Lommy9999]

It can work if the QR code would lead to a service that doesn't reveal any personal contact details but connects you to that person or updates the person that the item was found and provides location for the owner. It can work as a service to keep your details private and could work on items that usually don't have a tag on like camera, keys, jewelry, phone, even post items.

[@A12008X]

That's if they decide they want to return your lost items

[@Kaser]

I like this comment but I don't liked it because 69 :P

[@putridvomit]

@@Kaser No one cares

[@bojanbilic1959]

The "Lovely, thank you~" at 7:44 and 8:24 are the same clips.

[@willywakka7830]

Lmfao you're right! They really chop these negotiations down for KZbin

[@jps200010]

Oof

[@Kaser]

How the F did you notice ? Watch out, they're gonna come to your house to erase you !

[@avoidthis3912]

Didn't think millionaires need to stretch out videos

[@ssj3raditzkingofallhair248]

@@Kaser na he didn't drop his keys with this bs code on it 😂

[@nathanhood2415]

“I don’t have a QR scanner” yes you do. It’s build in to every modern smartphone’s camera. Just simply hold it over a QR code.

[@FoxRiots]

This show is 5 years old

[@emmalance1644]

Wow.. I probably could've coded her entire system in a week and I'm still a student. Lmao would love to get paid 200k for it

[@mdtaha8907]

Same here mate

[@CarlaHanson68]

I'm guessing the majority of the comments are going to be about how many times she said "yep" 😁

[@LongHuII]

Yep..

[@mustardpikachu3597]

Yep

[@nano11alexischile]

Such a frustrating personality. "I'm out." "Lovely, thank you!"

[@shanvino5154]

Yep

[@FrozenSkullVFX]

Fair enough

[@saqibmudabbar]

It's weird that she spent so much money on something that can be literally done for free without any back end encoding. All you have to do is to the encode the data directly into the QR code instead of creating a web link. (So there's no data at any central location and it'd work every time). Problem solved. And yes it's better than just writing your information on a paper because in that case anyone can read your information all the time. Whereas with a QR code they can only read it when they scan it and in that case it's probably lost. I think it's a great idea poorly executed and there is a better way to do it. And now a days all phones can scan QR codes directly from the camera.

[@EvoKeKurlz]

Exactly why people who are out of touch with technology i.e more older people, shouldn't try and invent new tech or apps etc. Or at least if they do they do their research beforehand, she was just to stupid or something to do the research and wanted to a make a quick buck at first but invested too much and just wanted to break even at that point and hope it worked

[@LegDayLas]

Here's a "genius" solution to your "everyone can read it at all times" problem. There are paper tag holders that people put on keychains (they are basically dog tags). Just write your info on the back of the paper, and on the visible side write "If found please read back of paper" or something similar. This solution would be just as effective at preventing anyone from seeing the info as the qr code is. Sure, someone can flip the paper and get your info if they have hands on your keys, but they can do exactly that with a qr code if they have hands on your keys. This just prevents people from seeing info at a glance.

[@robmckennie4203]

@@LegDayLas arguably that would be even better privacy than the QR code, it wouldn't be much harder to catch a scan of a qr code than it would be to read someone's details written on a tag, and that's if you're terrifically worried about some random person knowing your phone number. I'm just as into unnecessary technological widgets as the next mid 20s computer nerd, but sometimes the dead simple solution really is the best

[@LegDayLas]

@@robmckennie4203 well you're not wrong.

[@ohokcool]

Why do we need a barcode? It's just a middleman to the info we're looking for. I would return your keys but I don't have a QR app LOL (thx Janine)

[@Timthevapeman44]

Someone needs to tell Janine that shes got a gun wrapper stuck on her arm.

[@mrgoober8805]

Shit man. That's legit scary. I just got to the scanning of the tag... You have the person's keys and now you have their information? Even knowing the name of person scares me as you can just look them up and find where they live.

[@domlipski5226]

Steve could've said: You've got big problem here... transistorised intergalactic CPU sludge. Janine: oohhh of course , transistorised intergalactic CPU sludge.

[@Scronkc]

Every profession has their own version of the 'blinker fluid'

[@BIGMANLOGJAM]

“Yep”

[@alib1919]

This woman seems completely bonkers! 🙄 She sold her house, yep, and seems completely oblivious to any of the issues the sharks are raising...... yep. 'I'm out' - 'yep.' Nutso.

[@Legitti]

Yes. It was not just me.

[@tor13128]

no, i think she came on here to just get her money back, because she did realize she was in deep sh1t, she just didn't know why. now they listed everything wrong, and she was like yep yep yep, i knew something was wrong.

[@TeamOdiffat]

Nice Lego dragster

[@GirlycarDawn]

@@tor13128 Naw she doesn't realize anything. If she did then she wouldn't have gotten is deep shit to begin with. She's clueless.

[@MsLax45]

@@tor13128 no, more like she felt stupid and was being defensive. I get it man, I would have felt humiliated too.

[@yaphetb5717]

The idea was good but this is a very simple wep app that can be implemented in just one day. The problem that steve mentioned can be easily fixed by avoiding the use of sequential id(with fairly long size) and limiting requests per second to prevent brute force. Note:there is a more technical approaches for this problem but for simple web app like this it's enough

[@user-uh3bs1bl3u]

I love how after every single one of the sharks say they are out shes all like "k thx" "lovely thank u" "yep"

[@justinyang6521]

Hackers right now: **intense breathing**

[@DioD3]

Shark: I'm out Marie: Lovely

[@arunfurtado469]

Her target customers should be 1.Big corporates- to track their assets within the group. 2.Major courier companies- to track if any packages are misplaced. 3.Defense - To track their assets or weapons , even minor but important material. It is possible with little bit of improvement. Nothing is silly business in this world - People sell water and make millions..!!

[@froquede]

the data privacy problem for who doesn't understand it was that the "code" of the tag is a limited length number id and the site doesn't have any verification for scripts / bots, so what you can do is just try every combination of id and store every valid result with their users information checked out the actual site and they put at least a recaptcha now, but if it doesn't verify it on the server side the problem is still there their site is made in asp.net

[@wjatube]

Wow she linked a qr code to web-enabled database.

[@ericomfg]

How is that bad?

[@drakesavory2019]

@@ericomfg It's bad when you lose your house doing it.

[@PetsKitties]

@@drakesavory2019 lol damn

[@TheSLOCAT]

Don't forget she sold her house to do it

[@ChannelReuploads9451]

@@ericomfg A web enabled database, where the database is not needed because the details are in the QR Code itself. She gave away her house for this project, where the code is FREELY available on the Internet. Steve used his QR Reader on his phone and got her details. imgur.com/a/ZuebNRC

[@bumponalog5001]

It's not even hacking, she's practically handing it out for free.

[@EvoKeKurlz]

Well its not that he found the info she put on there, he was able to find even more personal info based off just the number she put on the tag.

[@vesperianstar]

The numbers are probably consecutive. That's really a rookie mistake.

[@brianvandy4002]

She'd need logistics behind it. Simply have the tag take them somewhere to register that they found the object. The company then checks with the owner if the owner will pay shipping for the item's return. If the owner agrees, the company provides the finder with a code to take to a shipping store that allows for packing and shipping pre-paid. That way there is no Privacy Data shared with the finder.

[@KnezAlex]

Thanks god they got Steve in this group, noone else actually realised this is a dox me easy app

[@ms1_77]

Literally could make her website with $8 hosting ...

[@Venom69696]

lol, I agree. I think cant figure out where she spent 200k.

[@jacklawrence2557]

Aadish Gautam it seems like in her mind blowing heaps of cash on something means “progress” but really she just took 100 steps backwards by selling her fkn house

[@stevenmaddock494]

The more I think about this the worse it becomes. I suspect the coders lied to her about what was possible to make their job easy. The best solution is for the website to make the calls/send the emails. But even then, the tags would wear out quickly and become unscanable

[@taliaperumal5661]

Q

[@ZevHoover]

Never have I heard more pain in a “lovely, thank you” Ouch

[@eliseerickson5994]

A better idea would be a QR code that automatically sends the location of the phone that scans to the tag-owner's app so they can find it!

[@ShaneWinston]

I could develope this in one day. This could have been perfect if she did a peer to peer messaging platform. That way they can chat and negotiate a reward, then send a printable shipping label.

[@SebM-Python-JXeNuddg]

Make it then!

[@TheSLOCAT]

@@SebM-Python-JXeNuddg I don't have a house to sell to make this app 🙃

[@DracoRemixer]

@@SebM-Python-JXeNuddg "Make it then", lol. But why would we when we probably already have? This is another variant of your textbook university assignment for the first or second course of programming. This is basically what I was assigned to make in my first programming course. Some very basic code in i.e. java and sql and you're done, basically. This really is an easy system to build that takes very little skill. It's a system containing two parts: the database and a program (such as a website). The program grabs and displays the data in the database, and the data to read is specified by the ID on the tag. Shane and many of us here don't say this in a self-righteous, "oh, I could become a billionaire too, like Bill Gates, if I wanted to/had the time" comments. This is facts. It's an easy system to replicate. You don't need to be (or have the cash to afford) an Einstein to program this lol.

[@SebM-Python-JXeNuddg]

@@DracoRemixer dude lol I just dealt with making a FiveM server(Grand Theft Auto V) and I had to create a simple MariaDB SQL database to store values of players that played on my server. Pretty easy shit and its how pretty much the entire internet operates..

[@chuckjohnson3013]

@@SebM-Python-JXeNuddg Make it then!

[@parkermadsen6998]

The way they can fix the privacy thing is by putting a code on the sticker for them to a operator who would then contact the person and then there can be like a place for them to drop the items off, like a department store post office etc. that way it gets rid of the privacy issue and makes it easier for people to turn it in

[@kingm3llo]

Parker Madsen or you can take 30seconds out of your day and just call them from a phone number placed on the tag (if their smart enough to put one)

[@katiedangelo404]

on the tag, if they acted as a temp contact to forward the finder to the owner with out giving personal info. it could generate a temp phone number, that is a forwarding number to the private number

[@d00b3rt]

Steve was really overblowing the "hackers" angle. All that information is already available online with a phone number, email address, and/or name. You could just as easily add home address, employer, and date of birth to that list (amongst other things.)

[@cresabear7594]

Why wouldn't the device just alert the company where her property is. Someone could scan the code and write where the person can find their property. Then the company send that info to the customer instead of revealing the customers contact information.

[@superemzone]

Thats a more solid idea in my eyes.

[@Tayboxer879]

Not bad cresabear, you should pitch her that idea for 5% of equity. Lol

[@MrJamberee]

Jason Grab Exceot that she is too broke to do anything now. And she’s not going to get less broke any time soon.

[@cresabear7594]

@@MrJamberee unfortunately true

[@defaultHandle1110]

This is a simple yet next level idea. What other ideas do you have ?

[@timemasterhms]

People don't return lost electronics, they resell them once they've removed that QR code sticker!

[@michalwalks]

Her side business is selling sticker removal fluid for this purpose.

[@maxschmidt666]

Disagree with that. Depends on the finder but not everybody is an a**hole.

[@kerrymti1151]

Yeah, a better item to sell would be a little tag that had a tracker in it so you could go find it yourself...there are many of those on the market already though.

[@timemasterhms]

​@@maxschmidt666Most people aren't arseholes, but most people like free things or a bit of extra cash.

[@timemasterhms]

​@@kerrymti1151 Agreed. Or better yet, just take care of your things?

[@N8riz]

You can create your own QR code of whatever you want to say and print it out. It can be static and not dynamic (no domain/internet needed for the scanner).

[@SirDistic]

What if, instead of providing the person who lost its personal info, it could provide the finder with numeric code and notify the person who lost it via text message (All personal data hidden from each other) with a text message saying that someone found your item? And then they could connect through the app to meet up or ship it.

[@zeitgeist9971]

This is a waste of time, a QR code - or - just write your phone number on it or email address, a needless service and she spent 200k.

[@amaze2n]

True. The added complexity and security risk of a website storing the contact information is completely unnecessary.

[@MissFoxification]

Or just print your own QR code with the details you want on it. No website needed.

[@antoniomargallo5317]

So, instead of having a tag with my contact, there's a QR code, that you have to read with a mobile phone, with an app for QR, and then you have to check on some internet registry database to get my contact... it makes my life so much easier. What a great idea, worth a house.

[@Jomskylark]

Lol you pull out your phone, turn on the camera, point it at the thing. Done. Takes 10 seconds. If your phone doesn't work with QR codes then you load up the site and put in the code. Done. Takes 20 seconds. Yes a tag is faster but takes up more room and you can't exactly hook a tag onto a laptop or coffee mug. $3/month gets you 50 stickers to put wherever

[@4evertrue830]

This may not be a lost business after all. It may not be a successful business at the domestic/household level, but it is a business that can be successful at an industrial, or at a commercial level. Tagtrack application for tracking goods/cargo on route, locally or internationally could make it easy to know the location of goods/cargo anywhere in a state, country or overseas and so be a game changer.

[@AmanRaiAgrawal]

In general not a bad idea, specially if it became mainstream. in order to resolve the privacy issue, I would just add a simple authentication process so that the owner of the lost article need to approve the sharing of their contact detail with the person who found it. Or you can just scrap out the contact sharing part and talk over the platform with the owner in a chat, you can also send a tip over platform to the person who found it.

[@1319944]

Imagine her and Dave Hester from storage wars in the same room ‘yeeep’.

[@jblvxk]

Hahaha

[@ianlister7333]

well this is still going, cant speak for how much money is made. However if im paying money to a 3rd party, part of that, would be for the lost items to be returned to them, not for my address etc, given out to any random person

[@damienminter1999]

No one mentioned address?

[@marcrobert4499]

"QR codes are too complicated" bruh... 😂😂

[@markfuston2714]

I like the idea kinda, but I feel like something like RFID tags would be better, or NFC or something, something that could be scanned more easily. Then provide some sort of in app incentive for people that return people's lost items. I think there's already something kiiinda like it that works off nearby phones with the app pinging the location of the lost item, but I can't remember the name.

[@purplelotus531]

“As simple as scaning a tag” I mean the idea is not that bad, but I can just put the details on a tag, no internet required, no camara, no scan. Also yeah scammers can just go and put random codes on the website and get any info to scam someone.

[@KennethT32505]

She would make much more money as an auctioneer "YEP"

[@kariamber99]

Apple does tags like these but they’re moreso trackers so you can attach it to anything like your keys, wallet, car, etc and if it gets stolen/lost, you can track it on another device. I think they’re awesome! If trac tag went in that direction originally I’d be all for it.

[@AryanKumar-jo1pz]

Ok nice idea Let me add a little more Make it so that when someone reports that they lodt something in an area, the cops then scans everything with the tag so that if it was stolen, the owner could get it back and the thieft would get caught Its would be like leaving a mall with an un-purchansed item, for a thief