156
this post was submitted on 12 Dec 2023
156 points (100.0% liked)
Technology
59299 readers
4808 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
So the issue isn't QR codes, but people being unable to recognize scammers additions to public infrastructure and the websites being scams. Basically, it's the same principle as scammers sticking an additional device on top of cash machines.
No news here.
Okay, but explain to me how you're supposed to tell the difference between a legitimate QR code and a fake one?
It's trivially easy to make a mockup of a restaurant's QR menu so that people scan it when they sit down, expecting to get an online menu.
Is the QR Code applied professionally to the surface, possibly behind some security feature such as glass or another surface finish? Is the menu on the table in the general style of the restaurant, or does it look off or entirely different? Is the QR code applied on top of something else, possible another QR code?
Don't use apps which directly open QR codes. Any sensible app will tell what the information is before processing it.
And at last, the simplest and most efficient security measure of all: Commonsense. Don't scan everything you come across. Restaurant menu? Sure. Some random poster out in the woods promising a quick buck, happy time or their like? Hard pass.
Part of the problem with security is they even when it's legitimate, it acts like the scammers.
I've seen restaurants where their (legitimate) QR code is clearly printed on a home printer and used in lieu of physical menus in order to save money. If the link changes, they will simply tape the new one on top of the old, even on the most official copy you can find.
Given that how restaurants present these various greatly, it wouldn't be terribly unexpected for the official QR to be a sticker on the menu or table either
I've been at restaurants where that's exactly the case. The QR is just a sticker on the table. Or a laminated card with the code on it.
Would be trivially easy to replace it with a malicious site.