Hacker News Reader

Comment by colinbartlett | Hacker News Reader

It scares me to think all of these requests run over unencrypted HTTP.

Why? it's just pizza

Pizza has been used as a tool of harassment in the past. People order lots of pizza from different places for the victim, who then has to deal with a bunch of angry pizza drivers and being black-listed from those pizza places.

Pizza drivers are often the victims of crime. Not only for the small amounts of cash that they carry, but sometimes just for the pizzas.

edit: I should say that my comment here was a kneejerk reaction to "it's just pizza", and has nothing to do with how eatabit.com deals with this kind of harassment. i agree with other commenters that blog posts like these are a great way to promote the company.

How are you going to exploit the fact that these pizza orders aren't encrypted to achieve either of those things?

PIZZA IS SRS BSNS

Encrypt the pizzas.

that's the wrong question to ask.

We're not (all) in the "think-of-things-to-do-with-stolen-information" business like so many others are; but many of us are we're in the "encrypt-all-the-things-so-that-information-isn't-stolen" business.

We use Twilio so we know our customer's phone numbers. If there were ever an issue like this, we could easily assist with a request by law enforcement.

Something something $1 SIM card from eBay.

Yes, it's just pizza - no ccards or personal information is transmitted - except your choice of toppings. Could that be used to profile you? "...paging Dr. Freud"

But aren't the API credentials are transmitted there as well? You don't care if your API is compromised?

Reply on news.ycombinator.com