08-29-2024, 06:51 PM
(08-29-2024, 06:41 PM)M T Wrote:(08-29-2024, 05:06 PM)BostonCard Wrote: Now you can donate your favorite professional college football player by scanning a QR code on his helmet.
I can see it now, "Hey, buddy, can you spare a click?" with QR code signs on street corners.
Kitten videos with embedded QRs.
Seriously, everyone, you should realize that QR codes (and shortened (bitly, etc) links) are inherently dangerous. From its appearance, you have no idea where it is going to take you. Clicking on one can be as dangerous as clicking on a link in a phishing email. In England, bad guys are putting (matching) stickers over legitimate QR codes with their own. You may think you are clicking to get a transit bus's schedule, but the QR code first goes to a bad guy's site to install software or do pop-ups or whatever they think of next.
Oh yeah, they could also take you to a forged proxy site. You think you're connected to MyBank/MyCharity/MyStore but instead you're connected to a bad guy's site that is displaying everything (windows, video, ...) from MyBank/MyCharity/MyStore and feeding everything you type or click back to the real site, except maybe with some changes along the way. (Note that this bypasses the extra protection given by two-factor authentication.)
scammers are putting fake QR codes on parking meters here in SoCal.
Cal delenda est