SoylentNews is people
SoylentNews
QR code use grows in popularity but poses hidden risks:
The use of QR codes has risen during the pandemic as they offer a perfect solution to contactless interaction. But many employees are also using their mobile devices to scan QR codes for personal use, putting themselves and enterprise resources at risk.
A new study from security platform MobileIron shows that 84 percent of people have scanned a QR code before, with 32 percent having done so in the past week and 26 percent in the past month.
In the last six months, 38 percent of respondents say they have scanned a QR code at a restaurant, bar or café, 37 percent at a retailer and 32 percent on a consumer product. It's clear that codes are popular and 53 percent of respondents want to see them used more broadly in the future. 43 percent plan to use a QR code as a payment method in the near future and 40 percent of people would be willing to vote using a QR code received in the mail, if it was an option.
However, QR codes are a tempting attack route for hackers too as the mobile user interface prompts users to take immediate actions, while limiting the amount of information available before, for example, visiting a website.
Have any Soylentils done anything interesting with QR codes?
(Score: 4, Interesting) by Rosco P. Coltrane on Tuesday September 22 2020, @10:21PM (6 children)
I don't know. The QR code scan app I use tells me it found a URL, shows the URL and I have to accept to get the browser to go there. Seems pretty safe to me, if you haven't been living under a rock and you know a legit-looking URL that point to a server that matches whichever venue you scanned the QR code in from a random .ru address.
(Score: 1, Interesting) by Anonymous Coward on Wednesday September 23 2020, @03:26AM (2 children)
Most people though, scan and have their device just defaulting to opening the link. For those checking links, Google are trying their level best to kill showing URLs and then you have komradsky making a fake site using cyrillic letters that look almost identical. QRs in the wild are a dangerous nightmare.
(Score: 4, Insightful) by Mykl on Wednesday September 23 2020, @04:02AM
A few QR stickers posted up in public places that link to Goatse should fix users' carelessness
(Score: 3, Informative) by hendrikboom on Thursday September 24 2020, @01:24AM
Some of those Cyrillic characters look identical, not just almost identical.
(Score: 2) by gringer on Wednesday September 23 2020, @03:29AM (2 children)
If your QR code app is showing the website title, it means it has visited the link. I've experimented with a barcode app I have on my phone and have noticed that I can create a link in a QR code that logs QR code use to my web server without any user authorisation (apart from using the app to look at the code).
Ask me about Sequencing DNA in front of Linus Torvalds [youtube.com]
(Score: 3, Informative) by Rosco P. Coltrane on Wednesday September 23 2020, @09:48AM (1 child)
It shows the URL, not the website's content. As in "This QR code has this URL encoded in it: tap here if you want to open it".
(Score: 2) by gringer on Sunday September 27 2020, @09:20AM
Good. Your app is different from mine then - as well as the URL, mine shows the title, which requires visiting the site to work out, which means that parameters encoded into the URL can be used for storing information about use of the QR code.
Ask me about Sequencing DNA in front of Linus Torvalds [youtube.com]