Dear people who have recently discovered QR codes,
QR codes can be very useful. They are particularly useful when they are printed out and stuck around the place. Or even on a slide on a presentation so people can access the info on their personal device.
QR codes are NOT useful on a social media post or a website that people access on their own device because if you are looking at it on your phone you cannot scan it with your phone. Just post the bloody link!
@ShadSterling In its case, it would be unlikely (but not impossible, indeed): its owner is strict with security (no tracking, no JS unless it’s really necessary and just what is needed, every tool he made is coded by and for himself first, local storage only…).
@TritTriton @urbanfoxe if it’s just one guy I wouldn’t expect him to put enough attention into it to stay secure if and when the site becomes a target. It might help to have external monitoring, but if the attackers can identify requests from the monitors they can make sure to respond correctly to those.
But the problem isn’t the security, it’s the targeting; any popular QR code decoder could be leveraged to direct people to scam sites, so if it’s popular they’ll try
Jenny Fx
Trit’
ShadSterling