3 ms·
The camera app shows you what URL the QR code is going to before you click it. I don't think it's really much of a risk because an attacker has to not only go
by dangus 2y ago
The camera app shows you what URL the QR code is going to before you click it.
I don't think it's really much of a risk because an attacker has to not only go to a physical location and replace the QR code, but they need to make some kind of replacement website that looks genuine to fool someone.
It's actually harder to pull off than a credit card skimmer.
Example: QR codes at a restaurant, I need to put the QR codes on every single menu (how am I going to do that discreetly without visiting the restaurant multiple times?) and then I also have to create a functioning website that mimics the restaurant's website. And then what happens when the customer doesn't get any food when the order via QR code and the server doesn't see any order being placed? Everyone involved would be immediately suspicious.
- Yawrehto 2y agoFirst of all, yes, restaurants would be a bit harder than typical. Second of all, I was thinking more along the lines of gas stations, where the QR codes can be applied in one visit and it could be as simple as having them fill out data and then redirecting them to the correct website. I doubt that gas station employees are regularly checking and ensuring the QR codes are accurate. And given the fairly muted, simple, design of many websites that require you to enter financial data, and the lack of information on what it should look like, then it would be relatively easy to create a website that mimics the correct website.