3 ms·
Sorry, that's utter bobbins. QR codes can contain a limited set of data. There's no possibility of a buffer-overflow or malicious program. Every QR reader I'v
by edent 2y ago
Sorry, that's utter bobbins.
QR codes can contain a limited set of data. There's no possibility of a buffer-overflow or malicious program.
Every QR reader I've seen shows you the destination before taking you there.
It might be a scam website - but that's no different to seeing an poster and manually typing in the address.
Yes, QR codes can contain an auto-generated email or premium SMS. But they won't send automatically. The user remains in control.
- jy14898 2y ago> QR codes can contain a limited set of data. There's no possibility of a buffer-overflow or malicious program. Source?
- jillesvangurp 2y agohttps://en.wikipedia.org/wiki/QR_code https://en.wikipedia.org/wiki/QR_code
- gregmac 2y ago> It might be a scam website - but that's no different to seeing an poster and manually typing in the address. Disagree, because: * QR codes are opaque to humans. You can't visually tell if one is legit or not. * QR codes often use URL shorteners, so that the URL contained is just https://exam.ple/4pTF6x4M9 https://exam.ple/4pTF6x4M9 is not unusual. Someone can replace a QR code with a sticker overlay and link to a phishing site. Replacing a URL on a poster is also possible, of course, but harder to make look convincing in the first place and significantly simpler to detect.
- edent 2y ago* Printed URls are also opaque. How do you know if the correct website is whatever .com or whatever .org? * Printed URls often contain shortened links. I'd argue that most QR sticker overlays are also pretty inept. See a sample at https://shkspr.mobi/blog/2024/07/qr-code-hijacking-attempts-are-pretty-inept/ https://shkspr.mobi/blog/2024/07/qr-code-hijacking-attempts-...