Groups | Search | Server Info | Login | Register


Groups > comp.mobile.android > #149609

Re: Recognising (or not) QR codes

From ram@zedat.fu-berlin.de (Stefan Ram)
Newsgroups comp.mobile.android
Subject Re: Recognising (or not) QR codes
Date 2025-07-04 18:30 +0000
Organization Stefan Ram
Message-ID <codes-20250704193000@ram.dialup.fu-berlin.de> (permalink)
References (6 earlier) <1043hls$1kvvg$2@solani.org> <slrn106ctaj.1c51.trepidation@vps.jonz.net> <104678i$1mopc$1@solani.org> <1046sld.7gk.1@ID-201911.user.individual.net> <10492hk$1joq$1@nnrp.usenet.blueworldhosting.com>

Show all headers | View raw


Marion <marion@facts.com> wrote or quoted:
>To them, if one QR code is malicious, all QR codes are malicious.

  If just one QR code out of a hundred is bad, that means you
  have a one percent shot at running into a malicious one.

  Security is all about checking everything in a group, since
  you never know which ones might be sketchy. Like, here in
  Berlin, if you show up to a concert with a bag, some guy is
  going to look through it. Even if hardly any bags have anything
  they shouldn't, they still have to check every single one.

  I really don't have any hands-on experience with QR codes, and
  I barely know how they work, but I figure they just hold URIs
  that get opened up. That would make them active content. 

  Letting stuff run without the user doing anything is risky,
  kind of like letting macros go off in a doc file as soon as you
  open it. Imagine if every time you downloaded an exe, it just ran
  right away. That would be a nightmare! 

  So, if that's actually how QR codes work, that needs to be
  fixed. When you scan a QR, it should just show you the text
  and let you copy it if you want. If you decide to open it
  as a URI, that should be your call.

Back to comp.mobile.android | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

Recognising (or not) QR codes Chris Green <cl@isbd.net> - 2025-07-01 15:15 +0100
  Re: Recognising (or not) QR codes Andy Burns <usenet@andyburns.uk> - 2025-07-01 15:39 +0100
    Re: Recognising (or not) QR codes Marion <marion@facts.com> - 2025-07-01 14:57 +0000
      Re: Recognising (or not) QR codes Andy Burns <usenet@andyburns.uk> - 2025-07-01 16:12 +0100
        Re: Recognising (or not) QR codes Marion <marion@facts.com> - 2025-07-01 15:25 +0000
        Re: Recognising (or not) QR codes Theo <theom+news@chiark.greenend.org.uk> - 2025-07-01 18:07 +0100
  Re: Recognising (or not) QR codes VanguardLH <V@nguard.LH> - 2025-07-01 11:24 -0500
  Re: Recognising (or not) QR codes Arno Welzel <usenet@arnowelzel.de> - 2025-07-01 20:20 +0200
    Re: Recognising (or not) QR codes Chris Green <cl@isbd.net> - 2025-07-01 19:55 +0100
      Re: Recognising (or not) QR codes "Carlos E.R." <robin_listas@es.invalid> - 2025-07-01 21:15 +0200
      Re: Recognising (or not) QR codes VanguardLH <V@nguard.LH> - 2025-07-01 20:03 -0500
        Re: Recognising (or not) QR codes Chris Green <cl@isbd.net> - 2025-07-02 07:09 +0100
          Re: Recognising (or not) QR codes Jörg Lorenz <hugybear@gmx.net> - 2025-07-02 08:48 +0200
            Re: Recognising (or not) QR codes Chris Green <cl@isbd.net> - 2025-07-02 08:07 +0100
              Re: Recognising (or not) QR codes Andy Burns <usenet@andyburns.uk> - 2025-07-02 09:00 +0100
                Re: Recognising (or not) QR codes Yusuf Khan <yusuf.khan.nospam@ptcl.net.pk> - 2025-07-02 22:03 +0500
                Re: Recognising (or not) QR codes Andy Burns <usenet@andyburns.uk> - 2025-07-02 18:41 +0100
              Re: Recognising (or not) QR codes Jörg Lorenz <hugybear@gmx.net> - 2025-07-02 10:05 +0200
              Re: Recognising (or not) QR codes "Carlos E.R." <robin_listas@es.invalid> - 2025-07-02 12:38 +0200
                Re: Recognising (or not) QR codes Jörg Lorenz <hugybear@gmx.net> - 2025-07-02 17:00 +0200
                Re: Recognising (or not) QR codes Frank Slootweg <this@ddress.is.invalid> - 2025-07-02 15:31 +0000
                Re: Recognising (or not) QR codes Jörg Lorenz <hugybear@gmx.net> - 2025-07-03 15:54 +0200
          Re: Recognising (or not) QR codes Andy Burns <usenet@andyburns.uk> - 2025-07-02 08:11 +0100
            Re: Recognising (or not) QR codes Marion <marion@facts.com> - 2025-07-02 17:08 +0000
            Re: Recognising (or not) QR codes Arno Welzel <usenet@arnowelzel.de> - 2025-07-03 17:24 +0200
          Re: Recognising (or not) QR codes VanguardLH <V@nguard.LH> - 2025-07-02 08:24 -0500
            Re: Recognising (or not) QR codes Jörg Lorenz <hugybear@gmx.net> - 2025-07-02 17:02 +0200
              Re: Recognising (or not) QR codes Andy Burns <usenet@andyburns.uk> - 2025-07-02 18:40 +0100
              Re: Recognising (or not) QR codes "Carlos E.R." <robin_listas@es.invalid> - 2025-07-02 20:11 +0200
                Re: Recognising (or not) QR codes Frank Slootweg <this@ddress.is.invalid> - 2025-07-03 13:41 +0000
                Re: Recognising (or not) QR codes "Carlos E.R." <robin_listas@es.invalid> - 2025-07-03 20:13 +0200
                Re: Recognising (or not) QR codes Frank Slootweg <this@ddress.is.invalid> - 2025-07-03 19:31 +0000
                Re: Recognising (or not) QR codes "Carlos E.R." <robin_listas@es.invalid> - 2025-07-03 22:35 +0200
                Re: Recognising (or not) QR codes Arno Welzel <usenet@arnowelzel.de> - 2025-07-06 12:50 +0200
              Re: Recognising (or not) QR codes Allodoxaphobia <trepidation@example.net> - 2025-07-03 12:19 +0000
                Re: Recognising (or not) QR codes Jörg Lorenz <hugybear@gmx.net> - 2025-07-03 17:22 +0200
                Re: Recognising (or not) QR codes Arno Welzel <usenet@arnowelzel.de> - 2025-07-03 17:26 +0200
                Re: Recognising (or not) QR codes Jörg Lorenz <hugybear@gmx.net> - 2025-07-03 18:17 +0200
                Re: Recognising (or not) QR codes Arno Welzel <usenet@arnowelzel.de> - 2025-07-06 12:52 +0200
                Re: Recognising (or not) QR codes Frank Slootweg <this@ddress.is.invalid> - 2025-07-03 19:28 +0000
                Re: Recognising (or not) QR codes Marion <marion@facts.com> - 2025-07-04 17:20 +0000
                Re: Recognising (or not) QR codes ram@zedat.fu-berlin.de (Stefan Ram) - 2025-07-04 18:30 +0000
                Re: Recognising (or not) QR codes Andy Burns <usenet@andyburns.uk> - 2025-07-04 19:47 +0100
                Re: Recognising (or not) QR codes Marion <marion@facts.com> - 2025-07-04 23:59 +0000
                Re: Recognising (or not) QR codes Marion <marion@facts.com> - 2025-07-04 18:51 +0000
                Re: Recognising (or not) QR codes "Carlos E.R." <robin_listas@es.invalid> - 2025-07-05 20:10 +0200
                Re: Recognising (or not) QR codes Arno Welzel <usenet@arnowelzel.de> - 2025-07-06 12:55 +0200
            Re: Recognising (or not) QR codes Frank Slootweg <this@ddress.is.invalid> - 2025-07-02 15:44 +0000
              Re: Recognising (or not) QR codes Marion <marion@facts.com> - 2025-07-02 17:16 +0000
              Re: Recognising (or not) QR codes VanguardLH <V@nguard.LH> - 2025-07-02 22:18 -0500
                Re: Recognising (or not) QR codes "Carlos E.R." <robin_listas@es.invalid> - 2025-07-03 11:24 +0200
                Re: Recognising (or not) QR codes Frank Slootweg <this@ddress.is.invalid> - 2025-07-03 19:08 +0000
        Re: Recognising (or not) QR codes Andy Burns <usenet@andyburns.uk> - 2025-07-02 08:05 +0100
          Re: Recognising (or not) QR codes Jörg Lorenz <hugybear@gmx.net> - 2025-07-02 10:29 +0200
          Re: Recognising (or not) QR codes "Carlos E.R." <robin_listas@es.invalid> - 2025-07-02 12:43 +0200
            Re: Recognising (or not) QR codes Andy Burns <usenet@andyburns.uk> - 2025-07-02 11:53 +0100
              Re: Recognising (or not) QR codes Marion <marion@facts.com> - 2025-07-02 17:49 +0000
          Re: Recognising (or not) QR codes Marion <marion@facts.com> - 2025-07-02 17:32 +0000
            Re: Recognising (or not) QR codes Andy Burns <usenet@andyburns.uk> - 2025-07-03 00:34 +0100
      Re: Recognising (or not) QR codes Arno Welzel <usenet@arnowelzel.de> - 2025-07-03 17:22 +0200

csiph-web