en.osm.town is one of the many independent Mastodon servers you can use to participate in the fediverse.
An independent, community of OpenStreetMap people on the Fediverse/Mastodon. Funding graciously provided by the OpenStreetMap Foundation.

Server stats:

248
active users

#qrcodes

0 posts0 participants0 posts today
ResearchBuzz: Firehose<p>Boing Boing: Doom in a QR code. “Backdooms is a Doom-like game that fits inside a QR code. That’s to say, the code of the game is so concise that it can be represented by a legit QR code, which offers a maximum of 3 kilobytes of data.”</p><p><a href="https://rbfirehose.com/2025/04/20/boing-boing-doom-in-a-qr-code/" class="" rel="nofollow noopener noreferrer" target="_blank">https://rbfirehose.com/2025/04/20/boing-boing-doom-in-a-qr-code/</a></p>
Calishat<p><a href="https://researchbuzz.masto.host/tags/DOOM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DOOM</span></a> <a href="https://researchbuzz.masto.host/tags/VideoGames" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>VideoGames</span></a> <a href="https://researchbuzz.masto.host/tags/QRCodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRCodes</span></a> <a href="https://researchbuzz.masto.host/tags/stunting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>stunting</span></a> <a href="https://researchbuzz.masto.host/tags/lmao" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>lmao</span></a> </p><p>'Backdooms is a Doom-like game that fits inside a QR code. That's to say, the code of the game is so concise that it can be represented by a legit QR code, which offers a maximum of 3 kilobytes of data.'</p><p><a href="https://boingboing.net/2025/04/18/doom-in-a-qr-code.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">boingboing.net/2025/04/18/doom</span><span class="invisible">-in-a-qr-code.html</span></a></p>
sebsauvage<p><a href="https://framapiaf.org/tags/QRCodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRCodes</span></a> <br>Comme l'outils "Camera" de Windows 10 est tout pourri et qu'il met 3 plombes à décoder un QR-Code, est-ce que vous auriez une page qui permette de faire ça avec la webcam ?</p><p>J'ai trouvé ça : <a href="https://scanapp.org/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">scanapp.org/</span><span class="invisible"></span></a><br>mais c'est pas encore super-réactif.</p><p>EDIT: Ah j'avais oublié LHV: <br><a href="https://lehollandaisvolant.net/tout/tools/rqrcode/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">lehollandaisvolant.net/tout/to</span><span class="invisible">ols/rqrcode/</span></a> (<a href="https://github.com/mebjas/html5-qrcode" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">github.com/mebjas/html5-qrcode</span><span class="invisible"></span></a>)<br>Simple, efficace, rapide.</p>
Flippin' 'eck, Tucker!<p><span class="h-card" translate="no"><a href="https://mastodon.social/@glynmoody" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>glynmoody</span></a></span> Like so many things it's not really the technology that's at fault. QR codes are a convenient way of encoding &amp; transmitting information.</p><p>The problems are that (a) most phones are configured to automatically load the webpage pointed at by a QR Code (assuming it encodes a URL) and (b) the persistent problem behind almost all online scams -- users are not given the tools or knowledge to help them detect a fraud.</p><p>I use <a href="https://secuso.aifb.kit.edu/english/" rel="nofollow noopener noreferrer" target="_blank">the SECUSO QR Scanner app</a> on my phone which not only displays the URL before launching it, but requires the user to check a confirmation box forcing you to think a bit more about what's about to happen.</p><p>Of course that only solves problem (a) above.</p><p><a href="https://social.chatty.monster/tags/QRcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRcodes</span></a></p>
Glyn Moody<p>QR code '<a href="https://mastodon.social/tags/quishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>quishing</span></a>' scams up 14-fold in five years - <a href="https://www.bbc.com/news/articles/cq6yznmv3gzo" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">bbc.com/news/articles/cq6yznmv</span><span class="invisible">3gzo</span></a> this is why I hate <a href="https://mastodon.social/tags/QRcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRcodes</span></a>, and avoid using them...</p>
Peter Nimmo<p>Well, duh...<br>"National Car Parks, which runs 800 car parking sites across the <a href="https://mastodon.scot/tags/UK" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>UK</span></a>, is considering removing QR codes from its signage".<br>At one point, I thought of creating one for my <a href="https://mastodon.scot/tags/church" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>church</span></a> notice board, but decided against when alerted to the gaping security <a href="https://mastodon.scot/tags/problem" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>problem</span></a>!<br><a href="https://mastodon.scot/tags/CarParks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CarParks</span></a><br><a href="https://mastodon.scot/tags/crime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>crime</span></a><br><a href="https://mastodon.scot/tags/qrcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>qrcodes</span></a> odes <br><a href="https://www.bbc.co.uk/news/articles/cq6yznmv3gzo" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">bbc.co.uk/news/articles/cq6yzn</span><span class="invisible">mv3gzo</span></a></p>
Andy<p><a href="https://mastodon.scot/tags/Fraud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Fraud</span></a> <a href="https://mastodon.scot/tags/QRCodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRCodes</span></a> <a href="https://mastodon.scot/tags/Parking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Parking</span></a> <a href="https://mastodon.scot/tags/Scam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Scam</span></a> <a href="https://mastodon.scot/tags/Fraudulent" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Fraudulent</span></a> <a href="https://mastodon.scot/tags/Scams" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Scams</span></a> <a href="https://mastodon.scot/tags/ScamsAndFraud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ScamsAndFraud</span></a> <a href="https://mastodon.scot/tags/Technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Technology</span></a> <a href="https://mastodon.scot/tags/SmartPhones" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SmartPhones</span></a> <a href="https://mastodon.scot/tags/quishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>quishing</span></a> <a href="https://mastodon.scot/tags/quishingScam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>quishingScam</span></a> <a href="https://mastodon.scot/tags/QRCodeFraud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRCodeFraud</span></a> <a href="https://mastodon.scot/tags/Cyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cyber</span></a> <a href="https://mastodon.scot/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurity</span></a> <a href="https://mastodon.scot/tags/cybersecuritynews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecuritynews</span></a> <br>Always worth a post when so many scams are out there. Beware QR codes!!!</p><p>Organised gangs behind rise in QR 'quishing' scams <a href="https://www.bbc.com/news/articles/cq6yznmv3gzo" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">bbc.com/news/articles/cq6yznmv</span><span class="invisible">3gzo</span></a></p>
Abhiseck Paira :gnu:<p>Nowadays I see a lot of QR code thrown everywhere around me. ATM machine stalls to newspaper ads. Not to mention, almost all the stores have UPI ids displayed as QR codes.</p><p>What I'm saying is, please also include the text of the QR code. Not all of us carry snooping devices. So, there's no way for us to scan it.</p><p>I'd like to send the above message to the editor of my local newspaper. But I've tried many times before on different topics and perse always ignores me. 🤷‍♂️ </p><p><a href="https://social.linux.pizza/tags/FreeSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FreeSoftware</span></a> <a href="https://social.linux.pizza/tags/QRCodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRCodes</span></a></p>
Andrii Mishkovskyi 🇺🇦<p>QR codes? QR codes! <a href="https://hachyderm.io/tags/qrcode" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>qrcode</span></a> <a href="https://hachyderm.io/tags/qrcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>qrcodes</span></a> <a href="https://hachyderm.io/tags/kewahrcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kewahrcodes</span></a> <a href="https://hachyderm.io/tags/kubecon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kubecon</span></a> <a href="https://hachyderm.io/tags/qrcon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>qrcon</span></a></p>
AI6YR Ben<p>Apparently someone is sticking fake "Parking Payment" QR codes on parking meters in Manhattan Beach (California). </p><p><a href="https://m.ai6yr.org/tags/qrcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>qrcodes</span></a> <a href="https://m.ai6yr.org/tags/scam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>scam</span></a> </p><p>2025-04-01 13:26:52 PDT</p><p>The City warns residents and visitors about a scam involving unauthorized QR codes for parking payments. Currently, there are no QR codes for online payments at parking meters or pay stations.</p><p>Please avoid using any QR codes you come across, as they may lead to fraudulent sites. Only use official payment methods.</p><p>Report any suspicious activity to our Police Department. Stay safe and vigilant!</p><p>If you see a QR Code on a parking meter, do not scan it. Contact Manhattan Beach Police at (310) 545-4566.</p><p><a href="https://member.everbridge.net/311578402488335/notif/YuHHaxdfx" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">member.everbridge.net/31157840</span><span class="invisible">2488335/notif/YuHHaxdfx</span></a></p>
Terence Eden’s Blog<p><strong>A Recursive QR Code</strong></p><p><a href="https://shkspr.mobi/blog/2025/03/a-recursive-qr-code/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">shkspr.mobi/blog/2025/03/a-rec</span><span class="invisible">ursive-qr-code/</span></a></p><p></p><p>I've been thinking about fun little artistic things to do with QR codes. What if each individual pixel were a QR code?</p><p>There's two fundamental problems with that idea. Firstly, a QR code needs whitespace around it in order to be scanned properly.</p><p>So I focussed on the top left positional marker. There's plenty of whitespace there.</p><p>Secondly, because QR codes contain a lot of white pixels inside them, scaling down the code usually results in a grey square - which is unlikely to be recognised as a black pixel when scanning.</p><p>So I cheated! I made the smaller code transparent and gradually increased its opacity as it grows larger.</p><p>I took a Version 2 QR code - which is 25px wide. With a 2px whitespace border around it, that makes 29px * 29px.</p><p>Blow it up to 2900px * 2900px. That will be the base image.</p><p>Take the original 25px code and blow it up to the size of the new marker, 300px * 300px. Place it on a new transparent canvas the size of the base image, and place it where the marker is - 400px from the top and left.</p><p>Next step is creating the image sequence for zooming in. The aim is to move in to the target area, then directly zoom in.</p><p>The whole code, if you want to build one yourself, is:</p><pre><code>#!/bin/bash# Input fileinput="25.png"# Add a whitespace borderconvert "$input" -bordercolor white -border 2 29.png# Upscaled image sizeupscaled_size=2900# Scale it up for the baseconvert 29.png -scale "${upscaled_size}x${upscaled_size}"\! base.png# Create the overlayconvert -size "${upscaled_size}x${upscaled_size}" xc:none canvas.pngconvert "$input" -scale 300x300\! 300.pngconvert canvas.png 300.png -geometry +400+400 -composite overlay.png# Start crop size (full image) and end crop size (target region)start_crop=$upscaled_sizeend_crop=350# Zoom-in target position (top-left corner)target_x=375target_y=375# Start with a completely opaque imageoriginal_opacity=0# Number of intermediate imagessteps=100for i in $(seq 0 $((steps - 1))); do # Calculate current crop size crop_size=$(echo "$start_crop - ($start_crop - $end_crop) * $i / ($steps - 1)" | bc) crop_size=$(printf "%.0f" "$crop_size") # Round to nearest integer # Keep zoom centered on the target crop_x_offset=$(echo "$target_x - ($crop_size - $end_crop) / 2" | bc) crop_y_offset=$(echo "$target_y - ($crop_size - $end_crop) / 2" | bc) # Once centred, zoom in normally if (( crop_x_offset &lt; 0 )); then crop_x_offset=0; fi if (( crop_y_offset &lt; 0 )); then crop_y_offset=0; fi # Generate output filenames background_file=$(printf "%s_%03d.png" "background" "$i") overlay_file=$(printf "%s_%03d.png" "overlay" "$i") combined_file=$(printf "%s_%03d.png" "combined" "$i") # Crop and resize the base convert "base.png" -crop "${crop_size}x${crop_size}+${crop_x_offset}+${crop_y_offset}" \ -resize "${upscaled_size}x${upscaled_size}" \ "$background_file" # Transparancy for the overlay opacity=$(echo "$original_opacity + 0.01 * $i" | bc) # Crop and resize the overlay convert "overlay.png" -alpha on -channel A -evaluate multiply "$opacity" \ -crop "${crop_size}x${crop_size}+${crop_x_offset}+${crop_y_offset}" \ -resize "${upscaled_size}x${upscaled_size}" \ "$overlay_file" # Combine the two files convert "$background_file" "$overlay_file" -composite "$combined_file"done# Create a 25fps video, scaled to 1024pxffmpeg -framerate 25 -i combined_%03d.png -vf "scale=1024:1024" -c:v libx264 -crf 18 -preset slow -pix_fmt yuv420p recursive.mp4</code></pre><p><a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://shkspr.mobi/blog/tag/art/" target="_blank">#art</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://shkspr.mobi/blog/tag/qr/" target="_blank">#qr</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://shkspr.mobi/blog/tag/qr-codes/" target="_blank">#QRCodes</a></p>
Terence Eden<p>🆕 blog! “A Recursive QR Code”</p><p>I've been thinking about fun little artistic things to do with QR codes. What if each individual pixel were a QR code?</p><p>There's two fundamental problems with that idea. Firstly, a QR code needs whitespace around it in order to be scanned properly.</p><p>So I focussed on the top left positional marker. There's plenty of whitespace there.</p><p>Secondly, because QR codes…</p><p>👀 Read more: <a href="https://shkspr.mobi/blog/2025/03/a-recursive-qr-code/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">shkspr.mobi/blog/2025/03/a-rec</span><span class="invisible">ursive-qr-code/</span></a><br>⸻<br><a href="https://mastodon.social/tags/art" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>art</span></a> <a href="https://mastodon.social/tags/qr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>qr</span></a> <a href="https://mastodon.social/tags/QRCodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRCodes</span></a></p>
Elyse M Grasso<p>I have seen article claiming that <a href="https://historians.social/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Google</span></a> is going to switch to requiring use of <a href="https://historians.social/tags/QRcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRcodes</span></a> (which I loathe) in order to use <a href="https://historians.social/tags/gmail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>gmail</span></a>, sometime in the not too distant future. The other email that I have used in the past gradually became useless in recent years (I suspect Gmail of blocking smaller mail servers) so I have just finished migrating everything to my gmail address, but it looks like I now need to migrate elsewhere. </p><p>Can people recommend a reliable email service?</p>
Terence Eden’s Blog<p><strong>Why are QR Codes with capital letters smaller than QR codes with lower-case letters?</strong></p><p><a href="https://shkspr.mobi/blog/2025/02/why-are-qr-codes-with-capital-letters-smaller-than-qr-codes-with-lower-case-letters/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">shkspr.mobi/blog/2025/02/why-a</span><span class="invisible">re-qr-codes-with-capital-letters-smaller-than-qr-codes-with-lower-case-letters/</span></a></p><p>Take a look at these two QR codes. Scan them if you like, I promise there's nothing dodgy in them.</p> <p>&nbsp;&nbsp;&nbsp;</p> <p>Left is upper-case <code>HTTPS://EDENT.TEL/</code> and right is lower-case <code>https://edent.tel/</code></p><p>You can clearly see that the one on the left is a "smaller" QR as it has fewer bits of data in it. Both go to the same URl, the only difference is the casing.</p><p>What's going on?</p><p>Your first thought might be that there's a different level of error-correction. QR codes can have increasing levels of redundancy in order to make sure they can be scanned when damaged. But, in this case, they both have <strong>L</strong>ow error correction.</p><p>The smaller code is "Type 1" - it is 21px * 21px. The larger is "Type 2" with 25px * 25px.</p><p>The <a href="https://www.qrcode.com/en/about/version.html" rel="nofollow noopener noreferrer" target="_blank">official specification</a> describes the versions in more details. The smaller code should be able to hold 25 alphanumeric character. But <code>https://edent.tel/</code> is only 18 characters long. So why is it bumped into a larger code?</p><p>Using a decoder like <a href="https://zxing.org/" rel="nofollow noopener noreferrer" target="_blank">ZXING</a> it is possible to see the raw bytes of each code.</p><p>UPPER</p><pre><code>20 93 1a a6 54 63 dd 28 35 1b 50 e9 3b dc 00 ec11 ec 11 </code></pre><p>lower:</p><pre><code>41 26 87 47 47 07 33 a2 f2 f6 56 46 56 e7 42 e746 56 c2 f0 ec 11 ec 11 ec 11 ec 11 ec 11 ec 11ec 11 </code></pre><p>You might have noticed that they both end with the same sequence: <code>ec 11</code> Those are "padding bytes" because the data needs to completely fill the QR code. But - hang on! - not only does the UPPER one safely contain the text, it also has some spare padding?</p><p>The answer lies in the first couple of bytes.</p><p>Once the raw bytes have been read, a QR scanner needs to know exactly what sort of code it is dealing with. <a href="https://www.thonky.com/qr-code-tutorial/data-encoding#step-3-add-the-mode-indicator" rel="nofollow noopener noreferrer" target="_blank">The first four <em>bits</em> tell it the mode</a>. Let's convert the hex to binary and then split after the first four bits:</p>TypeHEXBINSplitUPPER<code>20 93</code><code>00100000 10010011</code><code>0010 000010010011</code>lower<code>41 26</code><code>01000001 00100110</code><code>0100 000100100110</code><p>The UPPER code is <code>0010</code> which indicates it is Alphanumeric - the standard says the next <strong>9</strong> bits show the length of data.</p><p>The lower code is <code>0100</code> which indicates it is Byte mode - the standard says the next <strong>8</strong> bits show the length of data.</p>TypeHEXBINSplitUPPER<code>20 93</code><code>00100000 10010011</code><code>0010 0000 10010</code>lower<code>41 26</code><code>01000001 00100110</code><code>0100 000 10010</code><p>Look at that! They both have a length of <code>10010</code> which, converted to binary, is 18 - the exact length of the text.</p><p>Alphanumeric users 11 bits for every two characters, Byte mode uses (you guessed it!) 8 bits per single character.</p><p>But why is the lower-case code pushed into Byte mode? Isn't it using letters and number?</p><p>Well, yes. But in order to store data efficiently, Alphanumeric mode only has <a href="https://www.thonky.com/qr-code-tutorial/alphanumeric-table" rel="nofollow noopener noreferrer" target="_blank">a limited subset of characters available</a>. Upper-case letters, and a handful of punctuation symbols: <code>space $ % * + - . / :</code></p><p>Luckily, that's enough for a protocol, domain, and path. Sadly, no GET parameters.</p><p>So, there you have it. If you want the smallest possible <em>physical</em> size for a QR code which contains a URl, make sure the text is all in capital letters.</p> <p>This blog post was exhibited at <a href="https://qrshow.nyc/retrospective.html" rel="nofollow noopener noreferrer" target="_blank">QR Show, NYC</a></p><p><a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://shkspr.mobi/blog/tag/qr/" target="_blank">#qr</a> <a rel="nofollow noopener noreferrer" class="hashtag u-tag u-category" href="https://shkspr.mobi/blog/tag/qr-codes/" target="_blank">#QRCodes</a></p>
Terence Eden<p>🆕 blog! “Why are QR Codes with capital letters smaller than QR codes with lower-case letters?”</p><p>Take a look at these two QR codes. Scan them if you like, I promise there's nothing dodgy in them.</p><p>👀 Read more: <a href="https://shkspr.mobi/blog/2025/02/why-are-qr-codes-with-capital-letters-smaller-than-qr-codes-with-lower-case-letters/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">shkspr.mobi/blog/2025/02/why-a</span><span class="invisible">re-qr-codes-with-capital-letters-smaller-than-qr-codes-with-lower-case-letters/</span></a><br>⸻<br><a href="https://mastodon.social/tags/qr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>qr</span></a> <a href="https://mastodon.social/tags/QRCodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRCodes</span></a></p>
PrivacyDigest<p>A <a href="https://mas.to/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Signal</span></a> Update Fends Off a <a href="https://mas.to/tags/Phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Phishing</span></a> Technique Used in <a href="https://mas.to/tags/Russian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Russian</span></a> <a href="https://mas.to/tags/Espionage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Espionage</span></a> <br> <br><a href="https://mas.to/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Google</span></a> warns that <a href="https://mas.to/tags/hackers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>hackers</span></a> tied to <a href="https://mas.to/tags/Russia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Russia</span></a> are tricking <a href="https://mas.to/tags/Ukrainian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Ukrainian</span></a> soldiers with fake <a href="https://mas.to/tags/QRcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRcodes</span></a> for Signal group invites that let <a href="https://mas.to/tags/spies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>spies</span></a> steal their messages. Signal has pushed out new <a href="https://mas.to/tags/safeguards" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>safeguards</span></a>.<br><a href="https://mas.to/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>privacy</span></a> <a href="https://mas.to/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>security</span></a></p><p><a href="https://www.wired.com/story/russia-signal-qr-code-phishing-attack/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">wired.com/story/russia-signal-</span><span class="invisible">qr-code-phishing-attack/</span></a></p>
Erik van Straten<p><span class="h-card" translate="no"><a href="https://socialserver.science/@miekeroth" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>miekeroth</span></a></span> : naast alle genoemde nadelen zou het ook een privacy- en security-drama worden: <a href="https://infosec.exchange/@ErikvanStraten/113925356312627159" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">infosec.exchange/@ErikvanStrat</span><span class="invisible">en/113925356312627159</span></a>.</p><p>Tip: de Alt tekst onder onderstaande plaatjes bevat uitleg voor wat u ziet.</p><p><a href="https://infosec.exchange/tags/QR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QR</span></a> <a href="https://infosec.exchange/tags/QRcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRcodes</span></a> <a href="https://infosec.exchange/tags/Supermarkt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Supermarkt</span></a></p>
Erik van Straten<p>QR-codes: privacy/security-drama</p><p>Minister Beljaarts is niet goed bij zijn hoofd (<a href="https://nos.nl/artikel/2553994-minister-steunt-qr-plan-van-supermarkten-nederlands-etiket-niet-heilig" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">nos.nl/artikel/2553994-ministe</span><span class="invisible">r-steunt-qr-plan-van-supermarkten-nederlands-etiket-niet-heilig</span></a>). Marketingmensen willen dit niet, niet iedereen heeft een smartphone of wil QR-codes scannen, en bovendien zijn URL-QR-codes een privacy- en security-drama. </p><p>QR-codes op de meeste producten in de supermarkt wijzen namelijk naar websites van derde partijen en/of gebruiken URL-verkorters (die zijn zeker van derde parijen).</p><p>Ook zijn er veel QR-codes met een http- (in plaats van https-link) of geheel zonder protocolaanduiding (wat browsers nog steeds als http interpreteren. Waarom dat een risico is leest u in mijn antwoord op deze toot.</p><p>Voorbeelden van hufterige QR-codes (ik heb steeds een spatie tussen // en de domeinnaam gevoegd zodat Mastodon de http/https informatie niet verstopt).</p><p>Prodent tandpasta<br>🔗 https:// dl.ulcp.io/01/3014230002601</p><p>Calvé pindakaas<br>🔗 https:// qr.ulcp.io/W5NKZMFC</p><p>Crystal Clear framboos/bosbes<br>🔗 https:// qrco.de/crystalclear_3</p><p>Flesje Coke Zero<br>🔗 https:// cokeurl.com/srn5000112646702</p><p>Bus Pringles<br>🚨 http:// pringles.eu/1w9vz52</p><p>Lassie Bio Zilvervliesrijst<br>🚨 http:// l.ead.me/462ZILVER</p><p>Merk op dat *elke* "doorstuurwebsite vanalles over u te weten kan komen en cookies kan zetten. Ook kan een "doorstuurder" door een criminele partij worden overgenomen, en uw browser naar een andere website sturen dan de maker van het product bedoelde. Op zo'n nepsite kunt u vervolgens worden opgelicht.</p><p>Maar ook maken maketeers, die graag aanrommelen met QR-codes, fouten - zoals (in 2015) Heinz met ketchupflessen (<a href="https://id.nl/huis-en-entertainment/computer-en-gaming/software/qr-code-op-ketchupfles-verwijst-per-ongeluk-naar-pornosite" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">id.nl/huis-en-entertainment/co</span><span class="invisible">mputer-en-gaming/software/qr-code-op-ketchupfles-verwijst-per-ongeluk-naar-pornosite</span></a>).</p><p>🧵 1/2</p><p><a href="https://infosec.exchange/tags/QR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QR</span></a> <a href="https://infosec.exchange/tags/QRcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRcodes</span></a> <a href="https://infosec.exchange/tags/Phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Phishing</span></a> <a href="https://infosec.exchange/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Privacy</span></a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a> <a href="https://infosec.exchange/tags/SecurityAwareness" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecurityAwareness</span></a> <a href="https://infosec.exchange/tags/Awareness" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Awareness</span></a> <a href="https://infosec.exchange/tags/CyberSecurityAwareness" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurityAwareness</span></a></p>
Shantell Powell<p>Someone posts an image on social media containing a QR code for an event, but they don't include a link in the accompanying text. When I ask that person what the link for their event is, they say to scan the QR code. </p><p>How do I scan a QR code I'm seeing on my phone with the same phone?</p><p>What am I missing here? Is there some thing that everyone gets but me? Is there a way I can open a code I'm viewing on a device with that same device? <a href="https://c.im/tags/QRCodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRCodes</span></a></p>
Anonymous 🐈️🐾☕🍵🏴🇵🇸 :af:<p>Mandiant has identified a novel method to bypass browser isolation technology and achieve command-and-control operations through QR codes. <a href="https://kolektiva.social/tags/CyberAttack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberAttack</span></a> <a href="https://kolektiva.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurity</span></a> <a href="https://kolektiva.social/tags/QRcodes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>QRcodes</span></a> <a href="https://www.bleepingcomputer.com/news/security/qr-codes-bypass-browser-isolation-for-malicious-c2-communication/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">bleepingcomputer.com/news/secu</span><span class="invisible">rity/qr-codes-bypass-browser-isolation-for-malicious-c2-communication/</span></a></p>