4 ms·

One of the primary concerns regarding QR codes is their security. How can we ensure that malicious individuals are unable to place stickers containing QR codes

• nocsi 3y ago
  It’s the same threat space as those placing card skimming machines. It’s not like people are falling for this at a large scale. The ones that should care are the restaurants, since customers will just report the fraud and get refunded. In that case, restaurants will have staff validate each QR code anyways
• throwaway290 3y ago
  Worse than accidentally paying a wrong vendor, with the right zero-click zero-day remote execution sploit visiting a malicious link can lead to pwnage of your device. This is why it's better to never click links in emails or scan QRs. I remember an Airbnb listing that mandated extra "check in" via scanning some QR and denied stay otherwise... sorry but no way.
• jstarfish 3y ago
  The FBI put out an advisory about this very concern recently.
• tln 3y ago
  This is way overblown. How do you see this heist going down exactly? Someone targets a restaurant, gets QR stickers made, replicates the restaurant ordering system, replaces them on tables, hopes the servers and customers don't notice, people order, somehow the food comes? Or they order from the waiter and then pay, and somehow the bill on the faked site is correct? Then the customer leaves, and the restaurant doesn't even notice and let's this keep happening. Oceans 14 we have your plot right here!