After watching this I felt bad for the lady but I found out that She is doing good with her new business Telltale bags now, so feeling good. Even some newspaper of Australia covered her story.
As a software developer I saw so many people like her that spend tons of money to outsource a software that can be done just in one day 🤦♂️ I'm really sorry for her
@@goodkisser8591 I don't think a person that has 0 coding experience could write such thing after a week of a youtube tutorial, hosting, domain, database, php, javascript, html & css, sql queries etc.
@@KuzkayDev She could've had a uni student build it for her for $20k. The website and functionality is far easier to deploy than you make it out to be.
Right. The QR code just links to their site with a unique code, which can also be entered manually. You can then enumerate the stored details by changing the numeric id in the URL. Contact details generally aren't shown and the site can contact the owner, though presumably they were when steve tried. Looks like only a few hundred tags were ever registered. Plenty of ASP errors, such as clicking the news page, entering a non-number for the item details ID or viewing contact details for a tag that isn't registered. Signup confirmation has an http rather than https URL. Grammatical errors in some of the website text. Tag ID's with O and 0 characters. Sadly very typical standard for many outsourcing outfits.
The exploit the shark found was almost certainly that the app used sequential ID's in the link, so you could change from /0000001 to /0000002 and get a different customer's info. So when he says he could script it in two minutes, he's not exaggerating.
@@harryjey8830 I’m so bad with technology and I could easily make these within like an hour. I’m floored it took her $200k and she doesn’t even have an app to show for it.
@@carolinegallegos_ If I blew 200k on a QR code I'd simply end it. She really thought she did something. Glad to see she's doing well for herself now, I've heard.
The way this should work is instead of showing the "finder" the owner's info, they should have a button that just says "send notification to owner" with a text field to put the address, and the app will let the owner know where they can pick up their item
Oooh, that's actually a good innovation on the idea. I don't know if it saves it, but if we can get her hooked up with programmers that aren't scam artists she could implement it for a couple hundred dollars at most. Heck, I can write the web front and back end if someone who knows mobile better can write app side.
@@StratospheralNurse it doesnt have to be your address. The establishment where the device was found would be fine, or the police station you'll be dropping it off at
I'm pretty sure she hired freelance workers. I doubt they knew how much money she was sinking in the business. They were given a brief. They did their job.
You have to feel for her. She literally spent every last dime and didn’t realize it’s the exact same as a 50 cent dog tag that you write your number/email on. Only her product makes whoever found it do more work. Not to mention the data issue...
Why would I feel sorry for her? I feel sorry for her kids that she's throwing away her boomer money on this bullshit instead of supporting her children.
I feel like I should feel sympathy towards her but then again she sold her house for a product that overcomplicates the process and to add insult to injury theres a privacy problem, if theres any sympathy for her its sympathy cause shes that incredibly dumb
This is why old people don’t need to do anything, she could’ve made her website for $12-$15 with a website builder, shopify can place a QR code on a piece of paper for your business and you can implement it to your website. She didn’t do enough research.
If people really wanted to use a QR code you could just get a QR code that says if found call this number and then a phone number. There is no reason for her product to exist at all. It just adds a bunch of pointless steps to getting a return address
JewTube Yea It’s great I get all these girls messaging me on my email asking for a good time for some money! Haven’t met any yet and down a few hundred but I’m sure I’ll meet one soon!
Its not just for keys though. It's for anything the customer is dumb enough to think someone would return to them just because they felt like being nice.
There’s also inexpensive bluetooth keychains that exist that are literally just small tracking devices so you can keep track of keys/wallet.. Knowing that exists, buying a subscription to have a tag that you’re depending on someone else to find and give you your keys/device back does not make any sense at all. None the less without even considering the awful privacy concern.
Gotta feel for her though... she literally spent ever dollar she had and didn’t realize this until she was on shark tank. She had no response for that.
Same, lol... wtf?? Clearly this is when people who no knowledge of software/computers ask someone who is meant to have the knowledge and then gets scammed by them and taken for a ride...
@@killler240 qr codes were already ubiquitous in east asia by then. i really don't know what this woman is selling, i guess it's just a printing or merchandise service as the qr itself is free to generate but can't be written by hand like a phone number. turning it into a subscription service by renting out webpages only makes the proposition less attractive as i can already link to any and all of my socials for free.
Here’s the security concern that Steve is talking about - every time you scan a tag it takes you to a url. That url has a number id instead of a tag id attached to it, meaning that anyone could just increase this number id by 1 and re load the url to find a new item they weren’t supposed to see. This would effectively allow anyone to search the entire sites database as they could just keep increasing this number by 1 to find new items and the contact details of their owners. The fix is simple - just attach the tag id to the url instead of a number id - or better yet (so that the google recaptcha thing the site has has a purpose, use an entirely different ID that isn’t number based for the url, and just return a 404 error if the that id is invalid)
You can have an even better solution that is easy to implement: On the website there is only a form for you to text the person, no private information at all.
Exactly. This is a huge security flaw that's so easy to fix I've even seen successful businesses do this. A recent company I ordered from partnered with a local logistics company for shipment and their tracking code was the company's initials followed by four digits. You can bet I checked the codes before me and yes, I saw the name, address, order, etc.
The issue is not just with url but with website itself. You can write a simple script to enter different numbers and iteratively get data out of her website. The fix from website site should be limiting number of attempts per browser, per ip traffic
I know exactly what Steve found, yes it's a naive programming mistake, but even still it shows that the dude really knows his shit. Yeah I know he worked mostly with tech companies and telecomms, a renowned tech guy, but it's just nice to see a business man using his "tech-guy" skills;
Yeah, it's definitely nice to see someone who's generally just in moneybags roles actually demonstrating some specific applied useful knowledge about how something actually works. I know plenty of investors and business leaders out there got to their positions by knowing real trades well, but too many don't really understand the ground floor of their industries.
@@colmarek Lol you want to elaborate? Steve was absolutely right. If the company has changed practices now then good on them, but the problem was simple and straightforward and is also all too common
@@ItsAsparageese Changed practices? lol. How would they have changed a QR code that's been printed, recorded in a video then uploaded? Scan the tag at 2:25 and you'll notice that it's not a numerical ID, as people are assuming (and not bothering to confirm). They also have rate limiting, which Steve wouldn't have been able to determine at that time. I've watched enough Shark Tank to know they sometimes say things that are absolute nonsense, sometimes even contradicting their own lives.
@@colmarek They don't need to change QR Code to change the webpage's function. The URL on the QR code stays the same but the admin can change the webpage at anytime. Unless the QR Code does not contain an URL but instead just contains the information (Phone Number, Email), then yes, you cannot change that information without changing the QR Code.
Dangerous? How is it dangerous? This is no different than writing your phone and email on a key tag. If someone gets your keys they have your contact info... to do what exactly? Send cat facts? Most people are fine giving a little contact info in order to increase chances of getting their stuff back
After watching this I also felt bad for the lady but I found out that She doing good with her new business Telltale bags now, so feeling good. Even some newspaper of Australia covered her story.
@@Jomskylark Except this is worse because anyone can go to the website and scrape the data of every single user in a couple minutes... Chances of someone nefarious finding your keys when you lose them is low but companies would pay top dollar for a database with user information like this. All it takes is one slightly tech savvy person to visit your website and suddenly you're being sued left and right for leaking information of a hundred thousand people. One phone number, email address, etc... is useless but having thousands of them in a nice compiled list with no security is asking for problems.
This is so simple to make. How did she spend $200k on it? And the hacking problem can be fixed with one simple pivot: make the QR code/number direct to a secure messaging service that has no personal details but which sends the message to the owner.
I doubt it's even a serious hacking issue. This is the guy who took 90 seconds to scan a qr code because he was holding the thing too close to the phone. I doubt that guy knows much about encrypted info exploitability
Work for government sometime, you'll see how easy it is to waste 200k and get nothing in return :) The am ount spend doesnt mean it was spent well. And yeah just put the phone number on there would be a much smarter idea. It would make a lot more sense to scan it and it take you to a page that does the e-mail and all that for you. And maybe now they learned
Oof. When she said that she sold her house for this, my jaw just dropped. That’s insane. I’m a software engineer and I could build all of this in a weekend, tops. This poor woman allowed herself to effectively be scammed out of everything that she has for nothing. Wow!
@@Jomskylark based on how little she was shown to know about technology, I highly doubt she knew that. Hell a multi millionaire business investor is saying "my phone doesn't have a qr code scanner". Yes, her phone obviously does, she just doesn't know about it. You would be shocked how many people still don't know how to access a qr code from their phone. When all restaurants switched to qr code menus thanks to covid it was a nightmare for servers, as they needed to explain step by step how to access the menu. (this mostly applies to android users, as apple users it's simple enough to explain "just use your camera app and click on the popup (this was still confusing to many old people))" but most android need qr code scanner access turned on in settings, as factory settings has it turned off on the camera.
@@LegDayLas Google Lens has built in QR code scanning. Xiaomi phones have inbuilt apps for qr codes. (My experience is in stock android and Xiaomi phones but im sure other companies have built in stuff like this too. And if not, downloading an app isnt that hard. Besides you can still click a photo and run it through google photos app on your phone which also has google lens built in)
@@rudrasingh6354 Sure. But why tag me with that? I know they all have qr code scanning capability, all I said was with android it's not as cut and dry as using the camera app right out of the box, and the user needs to actually enable it somewhere. Yes it's not hard for a competent person to do this, but that's not a very common trait people have.
I’ve been trying to take a photo of every QR code everywhere I go for 6 months and all it does is tell the government where I’ve been not spreading Covid.
So many idiots posting saying she does, while she MAY have had it you have no idea. This was filmed in 2017, her phone is easily 6+ years old. Phones in 2016 or earlier did not all come with built in QR scanners.
She's delusional. I feel sorry for her. I genuinely do. Very soon she's going to have a moment of horrified realization when she gets hit with the fact that she sold her house to fund something that's basically worthless.
Her business is worth over 6 million, but nice try at being a total prick for no reason. The product isn't for everyone but that doesn't mean it's garbage
@@Jomskylark Their website says "Over 200,000" they charge $2 for them, literally by their admission it's $400K, just a tad away from 6 million. It also appears as though it's been entirely outsourced to the Netherlands.
@@Jomskylark you know you don't need to get dog tags from vets right? It's not a controlled item. Regardless, all you really need is some sticker paper to write your info on, and you can put it on anything the same way this works. as for keys, they already sell plastic paper holders that can act as a dog tag (or just put a dog tag on the keys)
there is an advantage to having that layer of abstraction there. you can update your details on the site and any of your lost items will refer any finders to your new details. thats the only redeeming quality
@bitterman co yea not the brightest idea, I think in another comment I said that idea only works if the person who found the items is going to return it I mean alot of people who find cameras phones etc would peel that sticker right off and keep it.
Needs to make it so that the track tag item can get sent to an office that uses the track tag to locate the customer and return the item to them. Mark the item as lost and the second it gets scanned marks it as found. Use RFID on top of QR code. Can setup lost and found stations that customer can place the item into. Can give customers the option to make rewards for lost items to encourage people to bring them to the stations.
I feel the security issue could be pretty easily solved. Just make it so instead of displaying the person's contact info you could have your website allow you to send a message to the owner, and said owner would have been able to set up in their account where they would like messages forwarded. I feel like this is a small speed bump that's getting blown out of proportion. Also don't most phones these days have QR code scanners integrated in the stock camera app?
No. That's still a security breach. You would need to store usernames and passwords securely for the messaging features. It would need to almost be rebuilt from the ground up to fix that issue. Tom Scott has a lot of good videos where he explains more about the weakness of it.
The problem is that some old people don't care to learn about the internet despite it being a necessity in today's age and the last 15 to 20 years. Some old people are fine not knowing anything about the internet if they don't need anything that requires the internet's involvement.
We help people turn their ideas into software and this would not cost that much to do. But unfortunately we see this happen so much where people get in with unethical or overly complicated dev companies that take everything they have.
Deep down, she knows they're right, but she is too stubborn to admit it, so she just blows off what they say by saying "yep" because she doesn't want to hear what she knows is the truth.
It can work if the QR code would lead to a service that doesn't reveal any personal contact details but connects you to that person or updates the person that the item was found and provides location for the owner. It can work as a service to keep your details private and could work on items that usually don't have a tag on like camera, keys, jewelry, phone, even post items.
The way they can fix the privacy thing is by putting a code on the sticker for them to a operator who would then contact the person and then there can be like a place for them to drop the items off, like a department store post office etc. that way it gets rid of the privacy issue and makes it easier for people to turn it in
It's weird that she spent so much money on something that can be literally done for free without any back end encoding. All you have to do is to the encode the data directly into the QR code instead of creating a web link. (So there's no data at any central location and it'd work every time). Problem solved. And yes it's better than just writing your information on a paper because in that case anyone can read your information all the time. Whereas with a QR code they can only read it when they scan it and in that case it's probably lost. I think it's a great idea poorly executed and there is a better way to do it. And now a days all phones can scan QR codes directly from the camera.
Exactly why people who are out of touch with technology i.e more older people, shouldn't try and invent new tech or apps etc. Or at least if they do they do their research beforehand, she was just to stupid or something to do the research and wanted to a make a quick buck at first but invested too much and just wanted to break even at that point and hope it worked
Here's a "genius" solution to your "everyone can read it at all times" problem. There are paper tag holders that people put on keychains (they are basically dog tags). Just write your info on the back of the paper, and on the visible side write "If found please read back of paper" or something similar. This solution would be just as effective at preventing anyone from seeing the info as the qr code is. Sure, someone can flip the paper and get your info if they have hands on your keys, but they can do exactly that with a qr code if they have hands on your keys. This just prevents people from seeing info at a glance.
@@LegDayLas arguably that would be even better privacy than the QR code, it wouldn't be much harder to catch a scan of a qr code than it would be to read someone's details written on a tag, and that's if you're terrifically worried about some random person knowing your phone number. I'm just as into unnecessary technological widgets as the next mid 20s computer nerd, but sometimes the dead simple solution really is the best
Steve could've said: You've got big problem here... transistorised intergalactic CPU sludge. Janine: oohhh of course , transistorised intergalactic CPU sludge.
I could develope this in one day. This could have been perfect if she did a peer to peer messaging platform. That way they can chat and negotiate a reward, then send a printable shipping label.
@@SebM-Python-JXeNuddg "Make it then", lol. But why would we when we probably already have? This is another variant of your textbook university assignment for the first or second course of programming. This is basically what I was assigned to make in my first programming course. Some very basic code in i.e. java and sql and you're done, basically. This really is an easy system to build that takes very little skill. It's a system containing two parts: the database and a program (such as a website). The program grabs and displays the data in the database, and the data to read is specified by the ID on the tag. Shane and many of us here don't say this in a self-righteous, "oh, I could become a billionaire too, like Bill Gates, if I wanted to/had the time" comments. This is facts. It's an easy system to replicate. You don't need to be (or have the cash to afford) an Einstein to program this lol.
@@DracoRemixer dude lol I just dealt with making a FiveM server(Grand Theft Auto V) and I had to create a simple MariaDB SQL database to store values of players that played on my server. Pretty easy shit and its how pretty much the entire internet operates..
I genuinely feel really bad for her. She has invested everything into something she is clearly putting her all in to but because she lacks so much knowledge in the field she Is getting in to she basically burned her 200k
The idea was good but this is a very simple wep app that can be implemented in just one day. The problem that steve mentioned can be easily fixed by avoiding the use of sequential id(with fairly long size) and limiting requests per second to prevent brute force. Note:there is a more technical approaches for this problem but for simple web app like this it's enough
This woman seems completely bonkers! 🙄 She sold her house, yep, and seems completely oblivious to any of the issues the sharks are raising...... yep. 'I'm out' - 'yep.' Nutso.
no, i think she came on here to just get her money back, because she did realize she was in deep sh1t, she just didn't know why. now they listed everything wrong, and she was like yep yep yep, i knew something was wrong.
@@ericomfg A web enabled database, where the database is not needed because the details are in the QR Code itself. She gave away her house for this project, where the code is FREELY available on the Internet. Steve used his QR Reader on his phone and got her details. imgur.com/a/ZuebNRC
Not just a downside, it's a legal liability. Even with just 300 costumers, that's 100% of your customer base impacted by a data leak with a really simple program. Forget the 200k she has already invested, she could be broke for life just off the lawsuits
To be fair, it would be trivial to tweak the model by simply making a database where users register their information alongside the unique tag ID, and the tag service itself intermediates the communication for security/safety. That's precisely how pet microchips work. And it would reduce friction for the end user trying to return an item, because the code scan could take them directly to a page with a single form field to enter their own contact info (or "it's at the Blahdeeblah police station" or whatever) and a single button to send that found-alert to the owner, rather than the finder being expected to secondarily contact the owner themselves. But I do agree with the criticism itself even though the fix would be fairly simple. And even with the above said/with the simple fix, people tend to really struggle to understand how pet microchips properly work and fail to register their information/keep it updated because they think the chip itself just directly says their address, so there's already a well-established effectiveness hurdle to that model as well.
the data privacy problem for who doesn't understand it was that the "code" of the tag is a limited length number id and the site doesn't have any verification for scripts / bots, so what you can do is just try every combination of id and store every valid result with their users information checked out the actual site and they put at least a recaptcha now, but if it doesn't verify it on the server side the problem is still there their site is made in asp.net
So, instead of having a tag with my contact, there's a QR code, that you have to read with a mobile phone, with an app for QR, and then you have to check on some internet registry database to get my contact... it makes my life so much easier. What a great idea, worth a house.
Lol you pull out your phone, turn on the camera, point it at the thing. Done. Takes 10 seconds. If your phone doesn't work with QR codes then you load up the site and put in the code. Done. Takes 20 seconds. Yes a tag is faster but takes up more room and you can't exactly hook a tag onto a laptop or coffee mug. $3/month gets you 50 stickers to put wherever
I have checked the tractag. I can even use their service without paying a dime. I just made up a random QR tag code, and it work flawlessly in their system
She'd need logistics behind it. Simply have the tag take them somewhere to register that they found the object. The company then checks with the owner if the owner will pay shipping for the item's return. If the owner agrees, the company provides the finder with a code to take to a shipping store that allows for packing and shipping pre-paid. That way there is no Privacy Data shared with the finder.
Aadish Gautam it seems like in her mind blowing heaps of cash on something means “progress” but really she just took 100 steps backwards by selling her fkn house
Why wouldn't the device just alert the company where her property is. Someone could scan the code and write where the person can find their property. Then the company send that info to the customer instead of revealing the customers contact information.
The more I think about this the worse it becomes. I suspect the coders lied to her about what was possible to make their job easy. The best solution is for the website to make the calls/send the emails. But even then, the tags would wear out quickly and become unscanable
on the tag, if they acted as a temp contact to forward the finder to the owner with out giving personal info. it could generate a temp phone number, that is a forwarding number to the private number
well this is still going, cant speak for how much money is made. However if im paying money to a 3rd party, part of that, would be for the lost items to be returned to them, not for my address etc, given out to any random person
These Australian shows are amazing. They're sooooo casual about anything mixed with trying to stir up emotions with comments like "I sold my house" and then when a 'shark' says "I'm out" they just nod their heads as if they didn't give a toss and say "Oh thankyou" with a big smile on their face while thinking "You two faced bastard" ...... Their great fun to watch :-) and the idea of using a QR code instead of a name tag ....... where did that come from ? Where's the added value ? WHats the advantage ?
There is already GPS tags to do the same thing. No middle man, no privacy breaches and most people would prefer that as they are the only one involved in finding and you haven't got to go to a middle person or site to rely on someone else to get it back.
You can use an online QR code generator to fill your details. It takes 30 seconds, it costs the price of the stickers to make, you can sell it for 1 dollar, it’s more secure, and you don’t have to pay monthly.
Yeah, a better item to sell would be a little tag that had a tracker in it so you could go find it yourself...there are many of those on the market already though.
“As simple as scaning a tag” I mean the idea is not that bad, but I can just put the details on a tag, no internet required, no camara, no scan. Also yeah scammers can just go and put random codes on the website and get any info to scam someone.
Besides the idea being absolutely ridiculous, that app would have been made in a day and cost $500. She certainly did not consult with a trusted party on this...
You can create your own QR code of whatever you want to say and print it out. It can be static and not dynamic (no domain/internet needed for the scanner).
The IDEA was that it lets people more easily return lost items to you. Like, if your dog is lost, instead of a big hefty tag with all your info? It's just a small little QR code. ...The problem being, that it's not much more useful then a good sized tag, people won't know how to use it...and, you know...HACKERS.
@@MitchellTF I am sorry if I was unclear and any confusion it may have caused. This so-called "service" relies on QR codes which is an open standard that anyone can make as many as they want for free already. They are literally charging a monthly fee for nothing. Further I suggested they actually take care of returning the item instead of just sharing personal contact information. That would actually be a service. The monthly fee could cover any shipping and handling if a lost item is found as well as some sort of reward for the finder.
@@MrNateSPF She is charging for holding your data on a database, and providing the tags, which is actually a service. The issue is that anyone can run an algorithm to use a brute force attack to search the database for everybody's details and download the whole database, meaning there is no data security whatsoever. In order secure it she would have to add a password to the tag, which is pretty easy to do, that would prevent anyone running random codes in the database to find peoples details. The problem is once you start adding passwords to the tag, you may as well have just had a tag with your details on it, so then yes she would have to offer something more than holding details on a database. I think if she started offering rewards and handling and shipping she might be straying into the insurance sector which is highly regulated.
@@DC-fo3bn You're still telling me that what she is doing is not as good as what you can do on your own for free, so it's still a pointless service. My whole point is she's adding steps and making things harder (while charging you and exposing your data), while my suggestion of making things easier would actually have value. I am not sure the laws in your country but a subscription service like this wouldn't be insurance in the US.
@@DC-fo3bn I mean, you could create a hash of the tag id and use that as a random URL, but then the usability of putting a human readable URL in the tag for those without wanting to use a qr code is gone. What did she spend the 200k on is my question...
Her target customers should be 1.Big corporates- to track their assets within the group. 2.Major courier companies- to track if any packages are misplaced. 3.Defense - To track their assets or weapons , even minor but important material. It is possible with little bit of improvement. Nothing is silly business in this world - People sell water and make millions..!!
Shit man. That's legit scary. I just got to the scanning of the tag... You have the person's keys and now you have their information? Even knowing the name of person scares me as you can just look them up and find where they live.
If your phone is less than 5 years old it most definitely has a QR reader. You probably just don't have it enabled or don't know how to use it. Maybe the 30 dollar prepaid phones don't have it, but the 100 dollar samsungs do.
This may not be a lost business after all. It may not be a successful business at the domestic/household level, but it is a business that can be successful at an industrial, or at a commercial level. Tagtrack application for tracking goods/cargo on route, locally or internationally could make it easy to know the location of goods/cargo anywhere in a state, country or overseas and so be a game changer.
Apple does tags like these but they’re moreso trackers so you can attach it to anything like your keys, wallet, car, etc and if it gets stolen/lost, you can track it on another device. I think they’re awesome! If trac tag went in that direction originally I’d be all for it.
I don’t know if this was recorded before 2016 but the sharks send shivers down my spine about how little they know about mobile technology… they’re super wrong about a lot of these points. Also the “privacy” thing can be solved reeeally easily. Turn the one code into two. 4 digit tracker code, 4 digit access code. This product deserves an expert to be able to live up to it’s potential and not those sharks.
What sent shivers down my spine is not the privacy issue, but how this lady probably ruined her life. I really feel sorry for her.
After watching this I felt bad for the lady but I found out that She is doing good with her new business Telltale bags now, so feeling good. Even some newspaper of Australia covered her story.
@@riturajupadhyay3692 thank you, I am much happier now
Jesus christ is coming back, people look to God put him first read your bible and pray Jesus loves you"
@@combsbrushes777 Wowi! Jesus! coming back after all these years? What date? I'll set it in my calendar.
@@combsbrushes777 nah come back from where? Popout from virgina?
As a software developer I saw so many people like her that spend tons of money to outsource a software that can be done just in one day 🤦♂️ I'm really sorry for her
Knowing she sold her house for some software that she could learn to code with a week of TH-cam tutorials is painful
@@goodkisser8591 I don't think a person that has 0 coding experience could write such thing after a week of a youtube tutorial, hosting, domain, database, php, javascript, html & css, sql queries etc.
Same here. I feel sorry for her.
@@KuzkayDev She could've had a uni student build it for her for $20k. The website and functionality is far easier to deploy than you make it out to be.
Right. The QR code just links to their site with a unique code, which can also be entered manually. You can then enumerate the stored details by changing the numeric id in the URL. Contact details generally aren't shown and the site can contact the owner, though presumably they were when steve tried. Looks like only a few hundred tags were ever registered. Plenty of ASP errors, such as clicking the news page, entering a non-number for the item details ID or viewing contact details for a tag that isn't registered. Signup confirmation has an http rather than https URL. Grammatical errors in some of the website text. Tag ID's with O and 0 characters. Sadly very typical standard for many outsourcing outfits.
Steve was so distracted by data privacy, he forgot to ask where she was from.
He knew he would find out where she is from from her QR code
He knows she is from the local mental hospital.
@@MrJamberee dead 😂😂😂😂😂😂
suchthefool88 you were so distracted that you forgot your comment isn’t original.
Dean M he would probably say “Noice” first
The exploit the shark found was almost certainly that the app used sequential ID's in the link, so you could change from /0000001 to /0000002 and get a different customer's info. So when he says he could script it in two minutes, he's not exaggerating.
Either that or its random DB IDs such as EFSFGB434DF where you could literally just bruteforce the system
But it’s so easily solvable though… just put a 4 digit access code on the tags
@@rtxf Make it infinitely more secure by allowing any Unicode character in the code and 8 characters long
It should be a two key system, a single key system is really poor
Wasn't that like a super big exploit for a bank or government website. I remember hearing something about that.
She spent 200k on software thats easier than some projects I did in AP Comp Sci
"than some projects I did in AP Comp Sci" mate a 10 year old child could make this for free.
@@harryjey8830 Yeah, even unborn fetuses could do it and pay YOU at the same time!
@Lea Firebender okay people calm down. She spent that money on kids who made that website and app. Grandma herself didn't made those
@@harryjey8830 I’m so bad with technology and I could easily make these within like an hour. I’m floored it took her $200k and she doesn’t even have an app to show for it.
@@carolinegallegos_ If I blew 200k on a QR code I'd simply end it. She really thought she did something. Glad to see she's doing well for herself now, I've heard.
This app is great! Steve can finally find out where everyone is from!
winner!
AHAHAHAHAH
Lmaoo you binge watch these too 👌🤣
HAHA YEA
🤣😂👌🏻
6:16 the way she said “oooooooh *loud whisper* Hackers!”, that’s such a mum reaction 😂😂😂
😂😂😂😭😭😭
Hahaha yeah I literally laughed out loud at that. What a dumb ass.
Now you know who not to take money from if you're a tech company haha.
Thats not even the right word lol
Nick Coad yeah dumbass that probably has 10x the next worth of your family
The way this should work is instead of showing the "finder" the owner's info, they should have a button that just says "send notification to owner" with a text field to put the address, and the app will let the owner know where they can pick up their item
Oooh, that's actually a good innovation on the idea. I don't know if it saves it, but if we can get her hooked up with programmers that aren't scam artists she could implement it for a couple hundred dollars at most. Heck, I can write the web front and back end if someone who knows mobile better can write app side.
@@EloquentTroll 🥺🥺
Who wants to give their address to a random individual who they’re never met?
@@StratospheralNurse it doesnt have to be your address. The establishment where the device was found would be fine, or the police station you'll be dropping it off at
@@EloquentTroll "for a couple hundred dollars at most" living up to your name.
This lady is the example of how dangerous it can be not knowing anything about technology.
It's also an example of how lacking common sense and critical thinking skills is dangerous.
@@ericag4908 It's not dangerous, it's immensely profitable. Her company is making a butchering.
The dangers of feminism
The people that took her money to "develop" this, should be ashamed.
Nah, she should.
I dont even know what they „developed“. This is a QR code backed with information you can scan. Every child could do that…..
Why, those are developers not lawyers. They do the product and do not publish it.
It is not like they developed an mobile artillary system for iraq.
I'm pretty sure she hired freelance workers. I doubt they knew how much money she was sinking in the business. They were given a brief. They did their job.
@@inverovenevectum6857 Maybe today, but not so much back then.
You have to feel for her. She literally spent every last dime and didn’t realize it’s the exact same as a 50 cent dog tag that you write your number/email on. Only her product makes whoever found it do more work. Not to mention the data issue...
Why would I feel sorry for her? I feel sorry for her kids that she's throwing away her boomer money on this bullshit instead of supporting her children.
Nick Coad
Did you just use boomer unironically?
I feel like I should feel sympathy towards her but then again she sold her house for a product that overcomplicates the process and to add insult to injury theres a privacy problem, if theres any sympathy for her its sympathy cause shes that incredibly dumb
Also she decided to SELL her house instead of refinance it out (so she has the house and up to 75% of the houses value), so there's no backing out
And a code that will take an afternoon to make
This is why old people don’t need to do anything, she could’ve made her website for $12-$15 with a website builder, shopify can place a QR code on a piece of paper for your business and you can implement it to your website.
She didn’t do enough research.
If people really wanted to use a QR code you could just get a QR code that says if found call this number and then a phone number. There is no reason for her product to exist at all. It just adds a bunch of pointless steps to getting a return address
@@FloppydriveMaestro yeah, she sold her house for such a dumb product that actually overcomplicates the process, yikes
She should have just test the idea and the market response before investing a dollar in developping. 20k is too much for a test.
@@macealvaro2 200k it is!
She still got 200 people to pay her $30 a year for this service. Even using static web hosting is way too much time and effort for most people.
Why would you ever subscribe monthly to this service when you can buy keychains with paper inserts for less than a dollar, and write your number...
well, you're also paying to put your details on a public webpage that everyone can see.
JewTube Yea It’s great I get all these girls messaging me on my email asking for a good time for some money! Haven’t met any yet and down a few hundred but I’m sure I’ll meet one soon!
Its not just for keys though. It's for anything the customer is dumb enough to think someone would return to them just because they felt like being nice.
There’s also inexpensive bluetooth keychains that exist that are literally just small tracking devices so you can keep track of keys/wallet.. Knowing that exists, buying a subscription to have a tag that you’re depending on someone else to find and give you your keys/device back does not make any sense at all. None the less without even considering the awful privacy concern.
Gotta feel for her though... she literally spent ever dollar she had and didn’t realize this until she was on shark tank. She had no response for that.
When the investor doesn’t realize every smartphone has a qr scanner now. You don’t need to download an app
What's more incredible is the website is still up
This was made 2012
Yeah she’s fucking stupid, does ur phone have a camera? Or do you use a flip phone
@@keenannelson-barer307 no. Steve was using samsung s7 edge. Maybe in 2016-17
You mean the investee?
Honestly, the saddest part is she spent 200,000 and I could've made this myself with 15 bucks and a laptop lol
She should have hired a comp sci college kid strapped for cash. Spent like max 1k all said and done
lol she sold her house for a piece of software that i can write in any short weekend.
its quite simple ye. i dont see how you can spend 200k on qr codes tbh. absurd amount of money
Same, lol... wtf?? Clearly this is when people who no knowledge of software/computers ask someone who is meant to have the knowledge and then gets scammed by them and taken for a ride...
This was likely from a few years ago, when knowledge was not as well spread
@@killler240 No, even a fairly new software engineer can program something very similar in a week tops.
@@killler240 qr codes were already ubiquitous in east asia by then. i really don't know what this woman is selling, i guess it's just a printing or merchandise service as the qr itself is free to generate but can't be written by hand like a phone number. turning it into a subscription service by renting out webpages only makes the proposition less attractive as i can already link to any and all of my socials for free.
"QR codes are hard to scan"
Damn, it must suck being old.
millionnaire but still got a potato camera on his phone lmao
yeah man, it took him 90 sec . how ?
I'm pretty sure these videos came from older episodes.
@@nicolo7789 they come from 2016-17 episodes from what I've seen
They are annoying sometimes...
Here’s the security concern that Steve is talking about - every time you scan a tag it takes you to a url. That url has a number id instead of a tag id attached to it, meaning that anyone could just increase this number id by 1 and re load the url to find a new item they weren’t supposed to see. This would effectively allow anyone to search the entire sites database as they could just keep increasing this number by 1 to find new items and the contact details of their owners. The fix is simple - just attach the tag id to the url instead of a number id - or better yet (so that the google recaptcha thing the site has has a purpose, use an entirely different ID that isn’t number based for the url, and just return a 404 error if the that id is invalid)
You can have an even better solution that is easy to implement: On the website there is only a form for you to text the person, no private information at all.
Exactly. This is a huge security flaw that's so easy to fix I've even seen successful businesses do this. A recent company I ordered from partnered with a local logistics company for shipment and their tracking code was the company's initials followed by four digits. You can bet I checked the codes before me and yes, I saw the name, address, order, etc.
IDOR
The issue is not just with url but with website itself. You can write a simple script to enter different numbers and iteratively get data out of her website. The fix from website site should be limiting number of attempts per browser, per ip traffic
Depending on the length that's fallible also. Can just brute force it to get the details.
I know exactly what Steve found, yes it's a naive programming mistake, but even still it shows that the dude really knows his shit. Yeah I know he worked mostly with tech companies and telecomms, a renowned tech guy, but it's just nice to see a business man using his "tech-guy" skills;
Yeah, it's definitely nice to see someone who's generally just in moneybags roles actually demonstrating some specific applied useful knowledge about how something actually works. I know plenty of investors and business leaders out there got to their positions by knowing real trades well, but too many don't really understand the ground floor of their industries.
What did you find? Because I looked into it and what I found made what he (Steve) said wrong.
@@colmarek Lol you want to elaborate? Steve was absolutely right. If the company has changed practices now then good on them, but the problem was simple and straightforward and is also all too common
@@ItsAsparageese Changed practices? lol. How would they have changed a QR code that's been printed, recorded in a video then uploaded? Scan the tag at 2:25 and you'll notice that it's not a numerical ID, as people are assuming (and not bothering to confirm). They also have rate limiting, which Steve wouldn't have been able to determine at that time.
I've watched enough Shark Tank to know they sometimes say things that are absolute nonsense, sometimes even contradicting their own lives.
@@colmarek They don't need to change QR Code to change the webpage's function. The URL on the QR code stays the same but the admin can change the webpage at anytime. Unless the QR Code does not contain an URL but instead just contains the information (Phone Number, Email), then yes, you cannot change that information without changing the QR Code.
I just want to give her a hug and cry with her because of how much she sacrificed for a not only unsuccessful but dangerous service
Dangerous? How is it dangerous? This is no different than writing your phone and email on a key tag. If someone gets your keys they have your contact info... to do what exactly? Send cat facts? Most people are fine giving a little contact info in order to increase chances of getting their stuff back
After watching this I also felt bad for the lady but I found out that She doing good with her new business Telltale bags now, so feeling good. Even some newspaper of Australia covered her story.
It's a privacy concern, but really worst case scenario is winding up on a spammers call list, I wouldn't say dangerous
@@Jomskylark Except this is worse because anyone can go to the website and scrape the data of every single user in a couple minutes... Chances of someone nefarious finding your keys when you lose them is low but companies would pay top dollar for a database with user information like this. All it takes is one slightly tech savvy person to visit your website and suddenly you're being sued left and right for leaking information of a hundred thousand people. One phone number, email address, etc... is useless but having thousands of them in a nice compiled list with no security is asking for problems.
The company is worth millions now...
This is so simple to make. How did she spend $200k on it? And the hacking problem can be fixed with one simple pivot: make the QR code/number direct to a secure messaging service that has no personal details but which sends the message to the owner.
my thoughts exactly
Bc someone took advantage of the fact that she was old and not too tech savvy unfortunately 😣😓 happens all the time.
I doubt it's even a serious hacking issue. This is the guy who took 90 seconds to scan a qr code because he was holding the thing too close to the phone. I doubt that guy knows much about encrypted info exploitability
@@Jomskylark ironically hes been an internet tech, inventor, etc. He knows the engineering side and the tech side. Which surprises me lol.
Work for government sometime, you'll see how easy it is to waste 200k and get nothing in return :)
The am ount spend doesnt mean it was spent well.
And yeah just put the phone number on there would be a much smarter idea.
It would make a lot more sense to scan it and it take you to a page that does the e-mail and all that for you.
And maybe now they learned
So... if you know their name, you know where they live basically... and you have their keys? I wouldn't trust this one bit.
Last thing i want on a lost key is the location of the door it belongs to
Netrole why? if you have your address on the keys, they can leave the keys inside so that they don’t get stolen again.
NoArmSally funny guy. 😏
Yep
The smart thing would be only leave your phone number but w/e.
Any piece of feedback:
"Yep."
Literally any question ever:
"Yep."
Did you keep your day job:
"Nope."
I was thinking this too. Those short answers just seemed so dismissive and almost rude. As if she didn't even want to be there and participate.
How does one spend 200K developing what is pretty much just a typical exercise done in a 1 hour web development class?
If you're not familiar with How back end internet work it's an easy situation to take advantage of, unfortunately
Oof. When she said that she sold her house for this, my jaw just dropped. That’s insane. I’m a software engineer and I could build all of this in a weekend, tops. This poor woman allowed herself to effectively be scammed out of everything that she has for nothing. Wow!
That she literally didn't immediately tell Janine that any cell phone from the last few years reads QR codes in their camera apps was a huge miss.
These shows are super edited and usually a lot longer, I wouldn't be surprised if she told her
@@Jomskylark based on how little she was shown to know about technology, I highly doubt she knew that. Hell a multi millionaire business investor is saying "my phone doesn't have a qr code scanner". Yes, her phone obviously does, she just doesn't know about it.
You would be shocked how many people still don't know how to access a qr code from their phone. When all restaurants switched to qr code menus thanks to covid it was a nightmare for servers, as they needed to explain step by step how to access the menu. (this mostly applies to android users, as apple users it's simple enough to explain "just use your camera app and click on the popup (this was still confusing to many old people))" but most android need qr code scanner access turned on in settings, as factory settings has it turned off on the camera.
Its from 2014........
@@LegDayLas Google Lens has built in QR code scanning. Xiaomi phones have inbuilt apps for qr codes. (My experience is in stock android and Xiaomi phones but im sure other companies have built in stuff like this too. And if not, downloading an app isnt that hard. Besides you can still click a photo and run it through google photos app on your phone which also has google lens built in)
@@rudrasingh6354 Sure. But why tag me with that? I know they all have qr code scanning capability, all I said was with android it's not as cut and dry as using the camera app right out of the box, and the user needs to actually enable it somewhere. Yes it's not hard for a competent person to do this, but that's not a very common trait people have.
This could have easily been done as college or University project.....
She messed up paying for this
This could be done as a one day project by highschool students
No she didn’t the company is worth 6.6 million today
Lightning Adam Where did you get that from?
@@compactcow easy
@@BugattiBoy01 The tractag website gives a 404.
Your business sucks
Marie: "lovely"
Yep
@@hugoroberts6064 This "Yep" is underrated 🤣
"Thank you"
fair enough
""Yes"" ""yep""
5:55 I think there should be a feature on the app that only reveals information if the tag has been labeled as ‘missing’ by the owner
According to the website that is how it works, at least now
“I don’t have a QR scanner...”
Yes. Yes you do...
I’ve been trying to take a photo of every QR code everywhere I go for 6 months and all it does is tell the government where I’ve been not spreading Covid.
So many idiots posting saying she does, while she MAY have had it you have no idea. This was filmed in 2017, her phone is easily 6+ years old. Phones in 2016 or earlier did not all come with built in QR scanners.
@@Tooamazin Mine is from 2019 and doesn't have one.
@@Tooamazin Hate to break it to you champ but she's a multi-millionaire, she doesn't have a 6+ year old phone.
@@Forslimjims Hate to break it to you but this was filmed in between 2015-2017, so yes she did.
I'm pretty sure that's the reason Bingo was invented, so old people don't get bored and do stupid things
Do you call your mom old with that mouth
@@wallstreetbro2915 ???????
@@wallstreetbro2915 Do you say dumb stuff to your mom with that mouth?
You are so rude. Lots of older people are tech savvy
Never have I agreed with something that I was so offended by
200k? Lol, shes just tryna get her money back, so she can break even.
Yeah, I think she would head for the hills if she got her 200k back.
She made 6.6 million from it
Is anything stopping these people from getting the money then just closing the business?
Literally for the sale of her house....Best of luck to her.
@@lightningadam6064 how do you know?
She's delusional. I feel sorry for her. I genuinely do. Very soon she's going to have a moment of horrified realization when she gets hit with the fact that she sold her house to fund something that's basically worthless.
Her business is worth over 6 million, but nice try at being a total prick for no reason. The product isn't for everyone but that doesn't mean it's garbage
@@Jomskylark it’s not worth 6 million where’d you get that from?
@@Jomskylark it’s not worth anything basically helping me rob here house by giving me the address to the door her keys go to knfaoooo
@@choerrim7745 he got it from nowhere lmfao it’s worthless as shit
@@Jomskylark Their website says "Over 200,000" they charge $2 for them, literally by their admission it's $400K, just a tad away from 6 million. It also appears as though it's been entirely outsourced to the Netherlands.
For those wondering, her business had $1million in revenue last year. Good for her!
What’s funny is I work at a vets office that literally gives owners tags exactly like this to put on their pets collar 🤣🤣
Yeah... for a pet. If you need a dozen for various items the vet isn't gonna help you out lol
@@Jomskylark you know you don't need to get dog tags from vets right? It's not a controlled item. Regardless, all you really need is some sticker paper to write your info on, and you can put it on anything the same way this works. as for keys, they already sell plastic paper holders that can act as a dog tag (or just put a dog tag on the keys)
Yep she got robbed
Yep
Seriously Robbed though
*YEP*
She did not get robbed. She wrote out a spec and a software developer took her money based on the spec she had. She did not understand the business
@@AdrianCalinescu no, she wrote a spec and a toxic dev charged her 10x the cost.
When she said I sold my house for money, look at the face of Steve he really felt that and knew about the struggle she might get through
Oh, my. A complicated tag instead of just a phone number. She’s gonna be homeless soon.
bitterman co pretty sure they’re grown and live on their own, she never said they lived with her
@@iforgot1135 except she literally did... At 5:46.
@bitterman co well she said she sold her home and moved in with her son but still shes broke af and her idea is way bad
there is an advantage to having that layer of abstraction there.
you can update your details on the site and any of your lost items will refer any finders to your new details. thats the only redeeming quality
@bitterman co yea not the brightest idea, I think in another comment I said that idea only works if the person who found the items is going to return it I mean alot of people who find cameras phones etc would peel that sticker right off and keep it.
Needs to make it so that the track tag item can get sent to an office that uses the track tag to locate the customer and return the item to them. Mark the item as lost and the second it gets scanned marks it as found. Use RFID on top of QR code. Can setup lost and found stations that customer can place the item into. Can give customers the option to make rewards for lost items to encourage people to bring them to the stations.
I feel the security issue could be pretty easily solved. Just make it so instead of displaying the person's contact info you could have your website allow you to send a message to the owner, and said owner would have been able to set up in their account where they would like messages forwarded. I feel like this is a small speed bump that's getting blown out of proportion. Also don't most phones these days have QR code scanners integrated in the stock camera app?
the episode was released before qr code was integreated into stockc amera app
No. That's still a security breach. You would need to store usernames and passwords securely for the messaging features.
It would need to almost be rebuilt from the ground up to fix that issue. Tom Scott has a lot of good videos where he explains more about the weakness of it.
That requires more back end programming work. Where's she going to get another house to pay for that?
@@VPCh. wrong
should have just outsourced it on a freelancer website.. could have got the whole system for $300
It's all it cost? Which site?
@@herogebrial it's built on previous technology, QR codes. I could write this in a weekend, and I'm a slight programming noob.
@@herogebrial Sites like Fivver.
300 is a lot. People can be paid in exposure😂 Thats the trend in tech world these days
Can develop this under 100$ 😂
She paid $200,000 for a website, IP_addresses, and a Internet technician ?
Could have paid 500$ for this if she knew a thing about the internet
The problem is that some old people don't care to learn about the internet despite it being a necessity in today's age and the last 15 to 20 years. Some old people are fine not knowing anything about the internet if they don't need anything that requires the internet's involvement.
That's got to be a world record 9000 yeps in 9min
In the end she wasn't even taking it in, she was just letting it fly past her to save herself from the pain, ducking it. Poor thing
She prob understood she fukked up baaaaaad
Yep
no one:
absolutely nobody:
her: yep
We help people turn their ideas into software and this would not cost that much to do. But unfortunately we see this happen so much where people get in with unethical or overly complicated dev companies that take everything they have.
Take a shot everytime she says “yep”
Dakota Kuczenski do you want us to die mate?
@@josephgamba6513 lmao
I tried this with a sip of beer and now I've had almost 4 in 8 minutes
@@josephgamba6513 yep
Came here to say this 🤣
8:16 I hope your 200 thousand isn’t lost. “Yep” 😂shes got to stop with those yeps
Deep down, she knows they're right, but she is too stubborn to admit it, so she just blows off what they say by saying "yep" because she doesn't want to hear what she knows is the truth.
The "Lovely, thank you~" at 7:44 and 8:24 are the same clips.
Lmfao you're right! They really chop these negotiations down for TH-cam
Oof
How the F did you notice ? Watch out, they're gonna come to your house to erase you !
Didn't think millionaires need to stretch out videos
@@Kaser na he didn't drop his keys with this bs code on it 😂
It can work if the QR code would lead to a service that doesn't reveal any personal contact details but connects you to that person or updates the person that the item was found and provides location for the owner. It can work as a service to keep your details private and could work on items that usually don't have a tag on like camera, keys, jewelry, phone, even post items.
This show taught me: if I think about selling my house, I'm about to be an idiot
The way they can fix the privacy thing is by putting a code on the sticker for them to a operator who would then contact the person and then there can be like a place for them to drop the items off, like a department store post office etc. that way it gets rid of the privacy issue and makes it easier for people to turn it in
Parker Madsen or you can take 30seconds out of your day and just call them from a phone number placed on the tag (if their smart enough to put one)
It's weird that she spent so much money on something that can be literally done for free without any back end encoding. All you have to do is to the encode the data directly into the QR code instead of creating a web link. (So there's no data at any central location and it'd work every time).
Problem solved. And yes it's better than just writing your information on a paper because in that case anyone can read your information all the time. Whereas with a QR code they can only read it when they scan it and in that case it's probably lost.
I think it's a great idea poorly executed and there is a better way to do it.
And now a days all phones can scan QR codes directly from the camera.
Exactly why people who are out of touch with technology i.e more older people, shouldn't try and invent new tech or apps etc. Or at least if they do they do their research beforehand, she was just to stupid or something to do the research and wanted to a make a quick buck at first but invested too much and just wanted to break even at that point and hope it worked
Here's a "genius" solution to your "everyone can read it at all times" problem. There are paper tag holders that people put on keychains (they are basically dog tags). Just write your info on the back of the paper, and on the visible side write "If found please read back of paper" or something similar.
This solution would be just as effective at preventing anyone from seeing the info as the qr code is. Sure, someone can flip the paper and get your info if they have hands on your keys, but they can do exactly that with a qr code if they have hands on your keys. This just prevents people from seeing info at a glance.
@@LegDayLas arguably that would be even better privacy than the QR code, it wouldn't be much harder to catch a scan of a qr code than it would be to read someone's details written on a tag, and that's if you're terrifically worried about some random person knowing your phone number. I'm just as into unnecessary technological widgets as the next mid 20s computer nerd, but sometimes the dead simple solution really is the best
@@robmckennie4203 well you're not wrong.
Why do we need a barcode? It's just a middleman to the info we're looking for. I would return your keys but I don't have a QR app LOL (thx Janine)
I'm guessing the majority of the comments are going to be about how many times she said "yep" 😁
Yep..
Yep
Such a frustrating personality.
"I'm out."
"Lovely, thank you!"
Yep
Fair enough
Little did Janine know that in 2020 everyone would be a qr code expert
I was looking for this comment
Never have I heard more pain in a “lovely, thank you”
Ouch
That's if they decide they want to return your lost items
I like this comment but I don't liked it because 69 :P
@@Kaser No one cares
Steve could've said: You've got big problem here... transistorised intergalactic CPU sludge.
Janine: oohhh of course , transistorised intergalactic CPU sludge.
Every profession has their own version of the 'blinker fluid'
“Yep”
I could develope this in one day. This could have been perfect if she did a peer to peer messaging platform. That way they can chat and negotiate a reward, then send a printable shipping label.
Make it then!
@@SebM-Python-JXeNuddg I don't have a house to sell to make this app 🙃
@@SebM-Python-JXeNuddg "Make it then", lol. But why would we when we probably already have? This is another variant of your textbook university assignment for the first or second course of programming. This is basically what I was assigned to make in my first programming course. Some very basic code in i.e. java and sql and you're done, basically. This really is an easy system to build that takes very little skill. It's a system containing two parts: the database and a program (such as a website). The program grabs and displays the data in the database, and the data to read is specified by the ID on the tag. Shane and many of us here don't say this in a self-righteous, "oh, I could become a billionaire too, like Bill Gates, if I wanted to/had the time" comments. This is facts. It's an easy system to replicate. You don't need to be (or have the cash to afford) an Einstein to program this lol.
@@DracoRemixer dude lol I just dealt with making a FiveM server(Grand Theft Auto V) and I had to create a simple MariaDB SQL database to store values of players that played on my server. Pretty easy shit and its how pretty much the entire internet operates..
@@SebM-Python-JXeNuddg Make it then!
I genuinely feel really bad for her. She has invested everything into something she is clearly putting her all in to but because she lacks so much knowledge in the field she Is getting in to she basically burned her 200k
The idea was good but this is a very simple wep app that can be implemented in just one day. The problem that steve mentioned can be easily fixed by avoiding the use of sequential id(with fairly long size) and limiting requests per second to prevent brute force.
Note:there is a more technical approaches for this problem but for simple web app like this it's enough
This woman seems completely bonkers! 🙄
She sold her house, yep, and seems completely oblivious to any of the issues the sharks are raising...... yep.
'I'm out' - 'yep.'
Nutso.
Yes. It was not just me.
no, i think she came on here to just get her money back, because she did realize she was in deep sh1t, she just didn't know why. now they listed everything wrong, and she was like yep yep yep, i knew something was wrong.
Nice Lego dragster
@@Viewer13128 Naw she doesn't realize anything. If she did then she wouldn't have gotten is deep shit to begin with. She's clueless.
@@Viewer13128 no, more like she felt stupid and was being defensive. I get it man, I would have felt humiliated too.
Shark: I'm out
Marie: Lovely
Wow she linked a qr code to web-enabled database.
How is that bad?
@@ericomfg It's bad when you lose your house doing it.
@@drakesavory2019 lol damn
Don't forget she sold her house to do it
@@ericomfg A web enabled database, where the database is not needed because the details are in the QR Code itself.
She gave away her house for this project, where the code is FREELY available on the Internet.
Steve used his QR Reader on his phone and got her details.
imgur.com/a/ZuebNRC
How is anyone making fun of Steve for actually looking into the privacy of the data? That's actually a major downside of the product!
Not just a downside, it's a legal liability. Even with just 300 costumers, that's 100% of your customer base impacted by a data leak with a really simple program. Forget the 200k she has already invested, she could be broke for life just off the lawsuits
To be fair, it would be trivial to tweak the model by simply making a database where users register their information alongside the unique tag ID, and the tag service itself intermediates the communication for security/safety. That's precisely how pet microchips work. And it would reduce friction for the end user trying to return an item, because the code scan could take them directly to a page with a single form field to enter their own contact info (or "it's at the Blahdeeblah police station" or whatever) and a single button to send that found-alert to the owner, rather than the finder being expected to secondarily contact the owner themselves.
But I do agree with the criticism itself even though the fix would be fairly simple. And even with the above said/with the simple fix, people tend to really struggle to understand how pet microchips properly work and fail to register their information/keep it updated because they think the chip itself just directly says their address, so there's already a well-established effectiveness hurdle to that model as well.
the data privacy problem for who doesn't understand it was that the "code" of the tag is a limited length number id and the site doesn't have any verification for scripts / bots, so what you can do is just try every combination of id and store every valid result with their users information
checked out the actual site and they put at least a recaptcha now, but if it doesn't verify it on the server side the problem is still there
their site is made in asp.net
This is a waste of time, a QR code - or - just write your phone number on it or email address, a needless service and she spent 200k.
True. The added complexity and security risk of a website storing the contact information is completely unnecessary.
Or just print your own QR code with the details you want on it. No website needed.
So, instead of having a tag with my contact, there's a QR code, that you have to read with a mobile phone, with an app for QR, and then you have to check on some internet registry database to get my contact... it makes my life so much easier. What a great idea, worth a house.
Lol you pull out your phone, turn on the camera, point it at the thing. Done. Takes 10 seconds. If your phone doesn't work with QR codes then you load up the site and put in the code. Done. Takes 20 seconds. Yes a tag is faster but takes up more room and you can't exactly hook a tag onto a laptop or coffee mug. $3/month gets you 50 stickers to put wherever
Hackers right now: **intense breathing**
I have checked the tractag. I can even use their service without paying a dime. I just made up a random QR tag code, and it work flawlessly in their system
She'd need logistics behind it. Simply have the tag take them somewhere to register that they found the object. The company then checks with the owner if the owner will pay shipping for the item's return. If the owner agrees, the company provides the finder with a code to take to a shipping store that allows for packing and shipping pre-paid. That way there is no Privacy Data shared with the finder.
Literally could make her website with $8 hosting ...
lol, I agree. I think cant figure out where she spent 200k.
Aadish Gautam it seems like in her mind blowing heaps of cash on something means “progress” but really she just took 100 steps backwards by selling her fkn house
Why wouldn't the device just alert the company where her property is. Someone could scan the code and write where the person can find their property. Then the company send that info to the customer instead of revealing the customers contact information.
Thats a more solid idea in my eyes.
Not bad cresabear, you should pitch her that idea for 5% of equity. Lol
Jason Grab Exceot that she is too broke to do anything now. And she’s not going to get less broke any time soon.
@@MrJamberee unfortunately true
This is a simple yet next level idea. What other ideas do you have ?
The more I think about this the worse it becomes.
I suspect the coders lied to her about what was possible to make their job easy.
The best solution is for the website to make the calls/send the emails.
But even then, the tags would wear out quickly and become unscanable
Q
on the tag, if they acted as a temp contact to forward the finder to the owner with out giving personal info. it could generate a temp phone number, that is a forwarding number to the private number
Thanks god they got Steve in this group, noone else actually realised this is a dox me easy app
well this is still going, cant speak for how much money is made. However if im paying money to a 3rd party, part of that, would be for the lost items to be returned to them, not for my address etc, given out to any random person
No one mentioned address?
It's not even hacking, she's practically handing it out for free.
Well its not that he found the info she put on there, he was able to find even more personal info based off just the number she put on the tag.
The numbers are probably consecutive. That's really a rookie mistake.
These Australian shows are amazing. They're sooooo casual about anything mixed with trying to stir up emotions with comments like "I sold my house" and then when a 'shark' says "I'm out" they just nod their heads as if they didn't give a toss and say "Oh thankyou" with a big smile on their face while thinking "You two faced bastard" ......
Their great fun to watch :-) and the idea of using a QR code instead of a name tag ....... where did that come from ? Where's the added value ? WHats the advantage ?
There is already GPS tags to do the same thing. No middle man, no privacy breaches and most people would prefer that as they are the only one involved in finding and you haven't got to go to a middle person or site to rely on someone else to get it back.
You can use an online QR code generator to fill your details. It takes 30 seconds, it costs the price of the stickers to make, you can sell it for 1 dollar, it’s more secure, and you don’t have to pay monthly.
People don't return lost electronics, they resell them once they've removed that QR code sticker!
Her side business is selling sticker removal fluid for this purpose.
Disagree with that. Depends on the finder but not everybody is an a**hole.
Yeah, a better item to sell would be a little tag that had a tracker in it so you could go find it yourself...there are many of those on the market already though.
@@maxschmidt666Most people aren't arseholes, but most people like free things or a bit of extra cash.
@@kerrymti1151 Agreed.
Or better yet, just take care of your things?
Imagine her and Dave Hester from storage wars in the same room ‘yeeep’.
Hahaha
“As simple as scaning a tag”
I mean the idea is not that bad, but I can just put the details on a tag, no internet required, no camara, no scan.
Also yeah scammers can just go and put random codes on the website and get any info to scam someone.
Besides the idea being absolutely ridiculous, that app would have been made in a day and cost $500.
She certainly did not consult with a trusted party on this...
You can create your own QR code of whatever you want to say and print it out. It can be static and not dynamic (no domain/internet needed for the scanner).
5:13 Steve was so in pain knowing the fact that it is not worth to sell her house.
“I don’t have a QR scanner” yes you do. It’s build in to every modern smartphone’s camera. Just simply hold it over a QR code.
This show is 5 years old
What is the point of the service? This is literally nothing. If they "middle-manned" it that would be something.
The IDEA was that it lets people more easily return lost items to you. Like, if your dog is lost, instead of a big hefty tag with all your info? It's just a small little QR code.
...The problem being, that it's not much more useful then a good sized tag, people won't know how to use it...and, you know...HACKERS.
@@MitchellTF I am sorry if I was unclear and any confusion it may have caused.
This so-called "service" relies on QR codes which is an open standard that anyone can make as many as they want for free already. They are literally charging a monthly fee for nothing.
Further I suggested they actually take care of returning the item instead of just sharing personal contact information. That would actually be a service. The monthly fee could cover any shipping and handling if a lost item is found as well as some sort of reward for the finder.
@@MrNateSPF She is charging for holding your data on a database, and providing the tags, which is actually a service. The issue is that anyone can run an algorithm to use a brute force attack to search the database for everybody's details and download the whole database, meaning there is no data security whatsoever. In order secure it she would have to add a password to the tag, which is pretty easy to do, that would prevent anyone running random codes in the database to find peoples details. The problem is once you start adding passwords to the tag, you may as well have just had a tag with your details on it, so then yes she would have to offer something more than holding details on a database. I think if she started offering rewards and handling and shipping she might be straying into the insurance sector which is highly regulated.
@@DC-fo3bn You're still telling me that what she is doing is not as good as what you can do on your own for free, so it's still a pointless service. My whole point is she's adding steps and making things harder (while charging you and exposing your data), while my suggestion of making things easier would actually have value. I am not sure the laws in your country but a subscription service like this wouldn't be insurance in the US.
@@DC-fo3bn I mean, you could create a hash of the tag id and use that as a random URL, but then the usability of putting a human readable URL in the tag for those without wanting to use a qr code is gone. What did she spend the 200k on is my question...
Her target customers should be
1.Big corporates- to track their assets within the group.
2.Major courier companies- to track if any packages are misplaced.
3.Defense - To track their assets or weapons , even minor but important material.
It is possible with little bit of improvement.
Nothing is silly business in this world - People sell water and make millions..!!
Shit man. That's legit scary. I just got to the scanning of the tag... You have the person's keys and now you have their information? Even knowing the name of person scares me as you can just look them up and find where they live.
She would make much more money as an auctioneer "YEP"
“You need to have a QR scanner on your phone?”
“Yes”
“Well I don’t have that”
Your phone doesn’t have a camera?
Not all phone cameras are equipped with it
it goes to show how out of touch the owner is. she should have known that all iphones and androids read QR codes by default.
yeah bothered me too. I only imagined her using a 1980's brick phone
Not all androids have it by default. At least mine didn't lol
If your phone is less than 5 years old it most definitely has a QR reader. You probably just don't have it enabled or don't know how to use it. Maybe the 30 dollar prepaid phones don't have it, but the 100 dollar samsungs do.
I love her attitude about the feedback, feel sorry for her predicament.
I love how after every single one of the sharks say they are out shes all like
"k thx"
"lovely thank u"
"yep"
This may not be a lost business after all. It may not be a successful business at the domestic/household level, but it is a business that can be successful at an industrial, or at a commercial level.
Tagtrack application for tracking goods/cargo on route, locally or internationally could make it easy to know the location of goods/cargo anywhere in a state, country or overseas and so be a game changer.
Wow.. I probably could've coded her entire system in a week and I'm still a student. Lmao would love to get paid 200k for it
Same here mate
The US Shark Tank would have loved she sold her house for her commitment to the product and practically invested on that alone.
Mark Dillon nah i think they would’ve been out much sooner tbh
they would be much harsher imo
“Yup” “Fair enough” “Lovely”
Apple does tags like these but they’re moreso trackers so you can attach it to anything like your keys, wallet, car, etc and if it gets stolen/lost, you can track it on another device.
I think they’re awesome! If trac tag went in that direction originally I’d be all for it.
I don’t know if this was recorded before 2016 but the sharks send shivers down my spine about how little they know about mobile technology… they’re super wrong about a lot of these points. Also the “privacy” thing can be solved reeeally easily. Turn the one code into two. 4 digit tracker code, 4 digit access code. This product deserves an expert to be able to live up to it’s potential and not those sharks.