Re: Recognising (or not) QR codes

Liste des GroupesRevenir à cm android 
Sujet : Re: Recognising (or not) QR codes
De : usenet (at) *nospam* arnowelzel.de (Arno Welzel)
Groupes : comp.mobile.android
Date : 06. Jul 2025, 11:50:35
Autres entêtes
Message-ID : <mcv2npF7rf1U1@mid.individual.net>
References : 1 2 3 4 5 6 7 8 9 10 11
Frank Slootweg, 2025-07-03 21:31:

Carlos E.R. <robin_listas@es.invalid> wrote:
On 2025-07-03 15:41, Frank Slootweg wrote:
[...]
   So QR codes are multi-purpose, *some* are dangerous, but others
*enhance* security/safety/privacy/<whatever>! :-)
>
And AFAIK, the danger is only when opening an URL without pausing.
 
  Indeed. VanguardLH sort of implied that there are QR scanning apps (or
QR scanning parts of camera, etc. apps), which directly open the URL
without pausing, but didn't give details, so for the moment that's FUD.

An URL itself is never "dangerous" - because if you assume that, that
*all* links in the web are dangerous as well, if you do not check, where
the link will bring you, before clicking it.

In fact the danger comes from trusting an URL to be a known website,
where you usually enter your account details to get access to your
e-mail account, bank account or similar. That's one of the reasons why
you should never open the website for online banking using a provided
third party QR code since you can never know, if the URL is trustworthy.
And since we have unicode nowadays and IDN domains, it may be possible
to substitude single letters by very similar looking unicode symbols, so
the URL still looks legit, even though it brings you to a fake phishing
website.

So the better approach is to enter the URL of your bank account or
webmail always manually or use a bookmark for that which you have
created on your own before. The problem of phishing on the other hand is
at least partly mitigated by using 2FA, TOTP (time-based one-time
password) or Passkey - in this case the username and password and not
enough, since you still need the second factor, the TOTP or the browser
needs to provide a valid key for the Passkey authentication. And Passkey
won't work at all on fake websites since the authentication with Passkey
is only registered for the original website and won't work on a fake
website with a different domain.


--
Arno Welzel
https://arnowelzel.de

Date Sujet#  Auteur
1 Jul 25 * Recognising (or not) QR codes60Chris Green
1 Jul 25 +* Re: Recognising (or not) QR codes5Andy Burns
1 Jul 25 i`* Re: Recognising (or not) QR codes4Marion
1 Jul 25 i `* Re: Recognising (or not) QR codes3Andy Burns
1 Jul 25 i  +- Re: Recognising (or not) QR codes1Marion
1 Jul 25 i  `- Re: Recognising (or not) QR codes1Theo
1 Jul 25 +- Re: Recognising (or not) QR codes1VanguardLH
1 Jul 25 `* Re: Recognising (or not) QR codes53Arno Welzel
1 Jul 25  `* Re: Recognising (or not) QR codes52Chris Green
1 Jul 25   +- Re: Recognising (or not) QR codes1Carlos E.R.
2 Jul 25   +* Re: Recognising (or not) QR codes49VanguardLH
2 Jul 25   i+* Re: Recognising (or not) QR codes41Chris Green
2 Jul 25   ii+* Re: Recognising (or not) QR codes10Jörg Lorenz
2 Jul 25   iii`* Re: Recognising (or not) QR codes9Chris Green
2 Jul 25   iii +* Re: Recognising (or not) QR codes3Andy Burns
2 Jul 25   iii i`* Re: Recognising (or not) QR codes2Yusuf Khan
2 Jul 25   iii i `- Re: Recognising (or not) QR codes1Andy Burns
2 Jul 25   iii +- Re: Recognising (or not) QR codes1Jörg Lorenz
2 Jul 25   iii `* Re: Recognising (or not) QR codes4Carlos E.R.
2 Jul 25   iii  +- Re: Recognising (or not) QR codes1Jörg Lorenz
2 Jul 25   iii  +- Re: Recognising (or not) QR codes1Frank Slootweg
3 Jul 25   iii  `- Re: Recognising (or not) QR codes1Jörg Lorenz
2 Jul 25   ii+* Re: Recognising (or not) QR codes3Andy Burns
2 Jul 25   iii+- Re: Recognising (or not) QR codes1Marion
3 Jul 25   iii`- Re: Recognising (or not) QR codes1Arno Welzel
2 Jul 25   ii`* Re: Recognising (or not) QR codes27VanguardLH
2 Jul 25   ii +* Re: Recognising (or not) QR codes21Jörg Lorenz
2 Jul 25   ii i+- Re: Recognising (or not) QR codes1Andy Burns
2 Jul 25   ii i+* Re: Recognising (or not) QR codes6Carlos E.R.
3 Jul 25   ii ii`* Re: Recognising (or not) QR codes5Frank Slootweg
3 Jul 25   ii ii `* Re: Recognising (or not) QR codes4Carlos E.R.
3 Jul 25   ii ii  `* Re: Recognising (or not) QR codes3Frank Slootweg
3 Jul 25   ii ii   +- Re: Recognising (or not) QR codes1Carlos E.R.
6 Jul 25   ii ii   `- Re: Recognising (or not) QR codes1Arno Welzel
3 Jul 25   ii i`* Re: Recognising (or not) QR codes13Allodoxaphobia
3 Jul 25   ii i `* Re: Recognising (or not) QR codes12Jörg Lorenz
3 Jul 25   ii i  +* Re: Recognising (or not) QR codes3Arno Welzel
3 Jul 25   ii i  i`* Re: Recognising (or not) QR codes2Jörg Lorenz
6 Jul 25   ii i  i `- Re: Recognising (or not) QR codes1Arno Welzel
3 Jul 25   ii i  `* Re: Recognising (or not) QR codes8Frank Slootweg
4 Jul 25   ii i   `* Re: Recognising (or not) QR codes7Marion
4 Jul 25   ii i    `* Re: Recognising (or not) QR codes6Stefan Ram
4 Jul 25   ii i     +* Re: Recognising (or not) QR codes2Andy Burns
5 Jul 25   ii i     i`- Re: Recognising (or not) QR codes1Marion
4 Jul 25   ii i     +- Re: Recognising (or not) QR codes1Marion
5 Jul 25   ii i     +- Re: Recognising (or not) QR codes1Carlos E.R.
6 Jul 25   ii i     `- Re: Recognising (or not) QR codes1Arno Welzel
2 Jul 25   ii `* Re: Recognising (or not) QR codes5Frank Slootweg
2 Jul 25   ii  +- Re: Recognising (or not) QR codes1Marion
3 Jul 25   ii  `* Re: Recognising (or not) QR codes3VanguardLH
3 Jul 25   ii   +- Re: Recognising (or not) QR codes1Carlos E.R.
3 Jul 25   ii   `- Re: Recognising (or not) QR codes1Frank Slootweg
2 Jul 25   i`* Re: Recognising (or not) QR codes7Andy Burns
2 Jul 25   i +- Re: Recognising (or not) QR codes1Jörg Lorenz
2 Jul 25   i +* Re: Recognising (or not) QR codes3Carlos E.R.
2 Jul 25   i i`* Re: Recognising (or not) QR codes2Andy Burns
2 Jul 25   i i `- Re: Recognising (or not) QR codes1Marion
2 Jul 25   i `* Re: Recognising (or not) QR codes2Marion
3 Jul 25   i  `- Re: Recognising (or not) QR codes1Andy Burns
3 Jul 25   `- Re: Recognising (or not) QR codes1Arno Welzel

Haut de la page

Les messages affichés proviennent d'usenet.

NewsPortal