• SturgiesYrFase@lemmy.ml
      1·
      1 month ago

      My phone’s camera app just doesn’t scan qr codes. It’s actually really frustrating. I refuse to install a specific qr scanner, but I’d still like the ability to scan a menu code at restaurants or to get the WiFi connection at a hotel…

    • zurohki@aussie.zoneEnglish
      1·
      1 month ago

      When my phone’s barcode reader app sees a web link, it fetches the page’s title to display next to the actual link. So it is going to that web server and fetching resources by itself. Even though it isn’t actually rendering the page and running javascript, it might be exploitable.

      • LovableSidekick@lemmy.worldEnglish
        0·
        1 month ago

        But that’s the barcode app - is it always running, looking for barcodes in all the photos you take? Because there are already shirt with giant barcodes on them - presumably just artistic with no meaning, but who knows?

        • Malfeasant@lemm.ee
          01·
          1 month ago

          I have a shirt with a QR code that goes to a Rick roll. It doesn’t work nearly as well as I’d hoped. Even people trying to scan it have a hard time, forget about anyone scanning it unknowingly. Mr. Astley did in fact let me down.

  • bstix@feddit.dk
    1·
    1 month ago

    The largest QR code can hold up to 3 kb of data, which is more than enough to write a nasty virus in an injectable script if aimed at specific devices/apps. The main hurdle is breaking the app to execute the code instead of treating it as a string. It’s the Drop Bobby Tables joke. Developers hopefully don’t fall for this anymore.

    Anyway. Making a shitty link and leading people there isn’t a new idea. You don’t even need a t-shirt. Hackers already place their own printed QR labels on top of otherwise real codes, and the user might not even notice, because they’ll be redirected to the right site after the dirty deed is done dirt cheap.