3 ms·
One way to exploit this is to send the QR code through email or messaging app. When I open the email or see the message, the image may be downloaded, scan start
by hamasho 4y ago
One way to exploit this is to send the QR code through email or messaging app.
When I open the email or see the message, the image may be downloaded, scan starts,
and it makes requests which expose my information, including IP, without realizing it.
- zimpenfish 4y agoThat's expected, I think, because people want link previews (and I'd put money on what's happened in this case because it's the iMessages bot that fetched the URL rather than anything else like photosd or spotlight.)