3 ms·

This is a pretty disingenuous article - it heavily implies that by scanning a QR code your device gets infected, as if with a virus, but the QR code is just a l

This is a pretty disingenuous article - it heavily implies that by scanning a QR code your device gets infected, as if with a virus, but the QR code is just a link to a malicious app - of course if you download an app then it has access to send you push notifications or do other things.

joshmlewis 5y ago
Yeah especially when it's hosted on a website chock full of ads and other spam. Pot meet kettle.
ehsankia 5y ago
Not only that, they clearly show that Android is giving you a list of all the permission the app has, which would look quite sketchy to most people > Access to the device's camera was also gained Again, that's impossible without an explicit notification on your phone requesting camera access. All of these would be fairly obvious to the user, assuming they even go as far as installing your app. By default you can't even install apps not from the play store without going through a couple step, which I highly doubt average users would.
deleted 5y ago
[deleted]
akomtu 5y ago
If you scan a unique QR code on your table, and that code takes you to a URL full of ads and FB/G trackers, those trackers will be able to attach to your profile the fact you've visited the restaurant and perhaps get a more accurate picture of your finances or even your diet, if the restaurant shares this data. Later this info can be bought by insurance providers or some doordash type of services.
- SV_BubbleTime 5y ago
  That’s well understood by the audience here. It’s also a LONG way from: >"As soon as I scanned the QR code, a sum of Rs 32,000 was withdrawn from my account. Then the caller switched off his phone and was unreachable thereafter," The article is mostly BS I’m pretty sure. A bunch of possible but not plausible Android hacking anecdotes that may or may not have happened that mislead by pretending this is a QR or restaurant problem.
bithaze 5y ago
> of course if you download an app then it has access to send you push notifications or do other things. It has the access you give it, but the article shows an example leaving every permission allowed. So the QR code really does seem immaterial here.

joshmlewis 5y ago

Yeah especially when it's hosted on a website chock full of ads and other spam. Pot meet kettle.

ehsankia 5y ago

Not only that, they clearly show that Android is giving you a list of all the permission the app has, which would look quite sketchy to most people > Access to the device's camera was also gained Again, that's impossible without an explicit notification on your phone requesting camera access. All of these would be fairly obvious to the user, assuming they even go as far as installing your app. By default you can't even install apps not from the play store without going through a couple step, which I highly doubt average users would.

deleted 5y ago

[deleted]

akomtu 5y ago

If you scan a unique QR code on your table, and that code takes you to a URL full of ads and FB/G trackers, those trackers will be able to attach to your profile the fact you've visited the restaurant and perhaps get a more accurate picture of your finances or even your diet, if the restaurant shares this data. Later this info can be bought by insurance providers or some doordash type of services.

SV_BubbleTime 5y ago
That’s well understood by the audience here. It’s also a LONG way from: >"As soon as I scanned the QR code, a sum of Rs 32,000 was withdrawn from my account. Then the caller switched off his phone and was unreachable thereafter," The article is mostly BS I’m pretty sure. A bunch of possible but not plausible Android hacking anecdotes that may or may not have happened that mislead by pretending this is a QR or restaurant problem.

bithaze 5y ago

> of course if you download an app then it has access to send you push notifications or do other things. It has the access you give it, but the article shows an example leaving every permission allowed. So the QR code really does seem immaterial here.