IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [qr-code]

A quick response code, or QR code, is a type of matrix barcode which stores data as square black markings within a square layout that should be readable by any computing device capable of imaging.

A quick response code, or QR code, is a type of matrix barcode which stores data as square black markings within a square layout that should be readable by any computing device capable of imaging.

Related reading

45 questions
2
votes
2 answers

Protecting QR Code, Eddystone and NFC against spoofing

Let's say I have the following scenario. I have QR Code, Eddystone and/or NFC which contains IP address, with which, my client side application communicates. Let's say this IP address can vary from user to user (or let's say from entity to entity,…
Dávid Kaya
  • 123
  • 4
2
votes
1 answer

Secure IDs and QR

Suppose that I want to give to users of my site the option to pay for a service and use it later. I am thinking to generate a unique ID for the paid service. I want to be able to trust the ID to decide if the user has paid the service or not but I…
Marco Altieri
  • 633
  • 5
  • 13
2
votes
2 answers

What are the security risks of a phone-based authentication?

I was looking into a way to make the authentication experience as simple as possible and this project came to my mind, where Google was using the logged account on your phone to log you into your browser. Anyway, after 4 years, I haven't seen it…
pasine
  • 163
  • 1
  • 6
1
vote
1 answer

QR-code based credential retrieval?

This is a sort of design review question that I'm hoping is suitable for this site. I am designing a system that uses a cloud service to establish a secure connection between a PC and a mobile device. Security matters hugely, but so does ease of set…
ldoogy
  • 111
  • 3
1
vote
1 answer

Avoid QR/Barcode duplicates for fake product identification

I'm developing an app for a college project to detect fake products. The idea is to scan a QR or barcode and the app will automatically tell you if the product is either original or fake. How to avoid the duplication of a QR or barcode, so each one…
Ale26
  • 13
  • 2
1
vote
1 answer

QR codes for shc Covid vaccine passports

In Canada, Québec introduced it's Covid-19 App "VaxiCode" on September 1; BC, "BC Vaccine Card", September 13, requirement in place until January 31, 2022, subject to extension; Ontario, September 22, "app to follow" on October 22. (CBC, CTV,…
Neil
  • 113
  • 5
1
vote
1 answer

Could QR Code Generators be passing info “over my head”?

I am aware of several ways QR code generators could pass "hidden" information "around" the QR spec. For example, if you can use the masking in a spec to ignore an area where you plan to put a logo, then you could just as easily put information…
combinatorist
  • 113
  • 4
1
vote
2 answers

2FA authentication with QR code

Can someone confirm if the following solution is actually 2FA? User has to install a special mobile app. When the mobile app is opened for the first time, the user is asked to associate the device with the account in the system. On the web login…
Alexey Mukas
  • 113
  • 4
1
vote
2 answers

QR code issue. Am I in danger?

Someone had asked me to take a photo, “from my mobile phone” of what looked like a QR code and above that code was a string of numbers that was on “his mobile phone screen”.. (As he wanted to then read my screen, “the string of numbers” , to type it…
user214190
  • 11
  • 2
1
vote
0 answers

How to secure unique identification of physical resources in a distributed system?

I'm attempting to build a mechanism to prevent frauds and provide traceability of physical resources in a distributed system. The idea is straightforward: the resource travels hop-by-hop on a network and each hop is held by a different actor which…
Gabriel Rebello
  • 291
  • 2
  • 4
1
vote
0 answers

Security of SQRC QR codes

I'm currently testing an application which uses QR codes to identify products. Now if I scan the QR code with any reader and generate a new QR code with the read text, it differs from the original QR code. The app is capable of telling the original…
Dolores The Third
  • 55
  • 5
1
vote
2 answers

Create a Secure QR Code Reward System?

Ill gave you the following scenario: A customer comes to a coffeshop and drinks 1 coffee. Then he put out a App from this Coffeeshop and opens the integrated QR Scanner. The worker shows him a QR Code and then the Counter goes 1 up on the App of…
user164010
0
votes
1 answer

Can a QR code steal my mobile's data?

For example https://web.wechat.com By scanning the QR code from my mobile, it automatically logs in with my wechat account. Here, can QR web sever or QR devices steal the mobile data?
ronaldtgi
  • 1,215
  • 3
  • 10
  • 14
0
votes
1 answer

Making it harder to scan on-screen QR-code from a distance

Say I have a QR-code on my laptop screen that I need to scan with my mobile device. Is there anything that can be done to make the on-screen code harder to scan from a distance? I am thinking for colors, contrast, movement, etc. At what point would…
Daniel
  • 231
  • 2
  • 7
0
votes
0 answers

Are QR codes more dangerous to scan in 2022?

Per this question in 2012, (Security risks of scanning an unknown QR code) there are a few big risks to scanning a QR code: Scanning a URL that links you to a malicious website Scanning a QR code that performs some automatic configuration (e.g.…
lynn
  • 715
  • 1
  • 5
  • 8
1
2
3