Dear people who have recently discovered QR codes,

QR codes can be very useful. They are particularly useful when they are printed out and stuck around the place. Or even on a slide on a presentation so people can access the info on their personal device.

QR codes are NOT useful on a social media post or a website that people access on their own device because if you are looking at it on your phone you cannot scan it with your phone. Just post the bloody link!

@urbanfoxe I don't know how often I've had to explain that to people. 🤦

@psneeze @urbanfoxe One of the few good things that Google has done recently is to make it very easy to visually search for anything on your screen*, including QR codes.

* Anything on your screen that is not in a streaming video app which does not allow screenshots because streaming platforms want to keep you from easily talking about their programs for some stupid reason.

@mikemccaffrey @psneeze but it still doesn't take you to where it points unless they add the link to the image.
@urbanfoxe @mikemccaffrey @psneeze With Google Lens or Google's Circle to Search, it actually does! Probably not a good idea to assume everyone has access to or knows to use them, though.
@mitchellmebane @mikemccaffrey @psneeze I'd assume Lens would just take you to a place to buy qr code makers 😀
@urbanfoxe When I used my Galaxy Fold in the open mode to read a QR code it could not read because of the "crease" across the screen. Closed & used in that position & was fine. Anyone else have this problem?
@urbanfoxe well my phone can scan them in images but not all of them can because why the hell would you want to

@urbanfoxe

And when a QR code is printed and stuck up on posters or in presentations *also add a URL* that gets printed below or beside the QR code.

Not all of us have/want QR code scanners.

@bobjonkman preferably a tiny url!
@urbanfoxe @bobjonkman
Incidentally you don't need to use a URL shortener on Mastodon as it does it automatically, internally.
@DenOfEarth @urbanfoxe @bobjonkman on a printed media, it is far more accessible to use shortened URLs
@orange_lux @DenOfEarth @urbanfoxe @bobjonkman Depends. If it's www . recognizable word . domain, I highly prefer that over tinyurl . com / letter soup

@project1enigma @DenOfEarth @urbanfoxe @bobjonkman of course, but that means a custom system to shorten urls.

I meant that I encountered several times urls that were meant to be retranscripted and that were over fifty characters.

@orange_lux @DenOfEarth @urbanfoxe @bobjonkman Yeah I understand. www . own-domain / short-keyword can be nice.

@urbanfoxe

Yes, the URL printed with a QR code should be short, easy to type, and easily remembered.

But use a short URL on your own domain, like an alias or a redirect. Stay away from third-party URL shorteners; you never know how long they'll exist, or if the expired domain is picked up by a domain squatter your short URL gets redirected to the most profitable spam site.

Honestly, I'm surprised that shorl.com, notlong.com, and ur1.ca still exist.

@urbanfoxe For such cases, you can save the picture and decode it on this site:
https://lehollandaisvolant.net/tout/tools/rqrcode/
Lire un QRcode™ - le hollandais volant

Un lecteur de QR Code en Javascript et HTML. Il fonctionne avec la Webcam (avec WebRTC) et avec un fichier d’entrée.

@TritTriton that's useful thank you!

No one should ever assume their audience will take any extra steps though!

@urbanfoxe And it’s the same thing for when people use “shortened” links such as bit.ly and co, or mobile versions… I have to retrieve the original link with unshorten.it first and it’s so annoying! 😒
@TritTriton @urbanfoxe until that site gets compromised and lies about the decoding

@ShadSterling In its case, it would be unlikely (but not impossible, indeed): its owner is strict with security (no tracking, no JS unless it’s really necessary and just what is needed, every tool he made is coded by and for himself first, local storage only…).

@urbanfoxe

@TritTriton @urbanfoxe if it’s just one guy I wouldn’t expect him to put enough attention into it to stay secure if and when the site becomes a target. It might help to have external monitoring, but if the attackers can identify requests from the monitors they can make sure to respond correctly to those.

But the problem isn’t the security, it’s the targeting; any popular QR code decoder could be leveraged to direct people to scam sites, so if it’s popular they’ll try

@urbanfoxe

if you are looking at it on your phone you cannot scan it with your phone

screenshot → share → Google Lens. for degoogled phones, share to this app instead. for linux phones, this app detects a qr code directly on a screenshot immediately (or you could just pick an image out of downloads). for iphones, idk ask siri or something, i dont have any iphones to try this on.

its the matter of tools really. are you ready for everyone to throw qr codes at you? if your phone has a qr code decoder on it, theres an 80% chance that said decoder can handle a jpeg instead of your camera feed.

QR Scanner (PFA) | F-Droid - Repositorio de apps de código abierto para Android

(SECUSO) Escáner QR respetuoso con la privacidad y con permisos mínimos

@gravitos @urbanfoxe yes, but every time I use this trick I blaming all people, who decided to use QR code without a link. Instead of just clicking to link I forced to:

- switch to main screen / list of opened apps

- open QR code scanner / Google Lens

- Select image and scan it

- And finally return to browser 😭

@evgandr @urbanfoxe i mean theres also FooView, which just kinda floats there on your screen, permanently, providing you useful tools like on-screen text translation (with OCR, so you can play japanese visual novellas and understand whats happening), floating pop-up browser, a way to launch apps in system floating window mode for extra multitasking, and - would you look at that - a QR code scanner. it really is just the matter of tools
@gravitos I have never met a QR code worth that effort.

@urbanfoxe They can be very useful to some. For everyone else, though, human-readable links are probably safer.

https://www.bbc.co.uk/news/articles/clddyp7y0nko

Scammers put fake QR codes on Lytham St Annes parking machines - council

One driver says she was scammed out of £1,500 by using the bogus codes when parking in Lytham.

BBC News

@wibble @urbanfoxe

wondering if there are scams where e-QR codes are 'hijacked' like printed ones by scammers.

great topic and discussion thank you 🖖🏾

@BeTongLen @urbanfoxe I can well believe it. There are a lot of online "QR creator" sites out there, and I wouldn't be too confident that all of them are quite what they seem.

Anyone can check a QR (or a shortened URL) and see where it goes, so they might seem safe enough. But would anyone notice if it went via a redirect that, at any time in future, changed?

@wibble @urbanfoxe

i never use QRs for these reasons. Thank you.

@urbanfoxe I usually screenshot it and it detects the link. Used to be infuriating before that...
@urbanfoxe

Good points.
Equally, as someone else states in replies, there are workarounds.
But I trust QRCs as much as I trust links in emails - not at all.
Please use KeyWords and / or Hashtags.
I prefer to make my own search string in MY choice of search engine
If it can't find it, it isn't that important.
@urbanfoxe ...and if for time/budget reasons you are, for example, using the same design for printed flyers and to post as image online for people to re-post on social media, write the URL the QR code links to right next to the code...
@urbanfoxe we have one in the bulletin box beside the church door, and I've seen people use it to get to the website!
@urbanfoxe but this one doesn’t print as well as it works on a device. Yes the QR code does work.
@urbanfoxe this is good advice, but also I hadn’t thought about using a QR code on a presentation to make it easy to obtain slides and notes by participants… which probably says more about the last time I went to a presentation more than anything 
@urbanfoxe Most QR scanner apps allow you to scan the code displayed on-screen too, but you are right - it's social media, so just post the link
@urbanfoxe Related: printing the Instagram or Facebook logo on your menu, business card, or front window doesn't really help.
@urbanfoxe you can scan it with your phone or another device, also they can be risky because hackers can use QR codes to send to bogus websites and as soon as you scan it, they’ve got all your information
@urbanfoxe And unfortunately malicious actors have been abusing them too. Be *very* careful with links... (Sorry to hijack but I have not seen this warning anywhere else)
Alastair McKinstry (@[email protected])

Attached: 1 image Parking machine scam, Ireland.

mastodon.ie
@urbanfoxe
Hoping this will elicit responses of people posting links to (preferably free) PC software that can read images of QR and bar codes and connect to them.
Alastair McKinstry (@[email protected])

Attached: 1 image Parking machine scam, Ireland.

mastodon.ie
@urbanfoxe @simon QR codes can also cause accessibility problems for some people who don’t see that they exist, or make it more difficult for some blind people to scan them even if they know, more or less, where they exist.
@urbanfoxe definitely sharing your post with my wife who feels QR code usage has gotten ridiculous
@urbanfoxe ok the iPhone you can save the image and then open it in photos and touch the QR code
@urbanfoxe
QR codes are used in this context because the game on social media is shameless attention seeking so adding a QR code in their minds makes them cooler than the other kids