4 ms·
> QR code readers ... could have malicious codes for misrepresenting the URL in specific cases. So could an HR code reader. It could just as well, when it scan
by TheDong 7y ago
> QR code readers ... could have malicious codes for misrepresenting the URL in specific cases.
So could an HR code reader. It could just as well, when it scans a google.com HR code, prompt "do you want to go to google.com" and then open "phishing.free.hax"
That specific threat is ridiculous.
In addition, talk of exploiting strange looking QR codes seems silly too. HR code readers could also have bugs in their OCR code which would result in memory corruption or such.
Any type of encoding can have interpreting tools that contain security bugs or malicious behaviour. The only way to remove that is to create something that is not intended to be processed by any tools at all (e.g. a paper that users have to manually copy the text from by hand).