I couldn't agree more. Though, just because we haven't heard of widespread cases doesn't mean it hasn't or isn't happening. > There's just no way for laypeopl

I couldn't agree more. Though, just because we haven't heard of widespread cases doesn't mean it hasn't or isn't happening. > There's just no way for laypeople to evaluate the provenance of random QR codes. Arguably, even seasoned veterans may have difficulty confirming the validity. Too often, it's a patchwork of random third parties before the order is completed. > The restaurant industry often uses random third-party sites for their menus, so even that is a poor signal. Which makes this all that worse, as it's contrary to all of the "verify" messaging we've been preaching from the security world.