2 ms·
So when the user is tricked into scanning an arbitrary QR code, they are authorizing the attacker's copy of WhatsApp (or whatever) as an additional device tied
by daveloyall 11y ago
So when the user is tricked into scanning an arbitrary QR code, they are authorizing the attacker's copy of WhatsApp (or whatever) as an additional device tied to the users account, right?
That makes sense. Sounds like the solution is a warning message in the app. "Do you really want to grant full account access to a new device or service right now?"