Difference between revisions of "QR Code"

From MgmtWiki
Jump to: navigation, search
(Problems)
(Problems)
Line 8: Line 8:
  
 
==Problems==
 
==Problems==
* A report by Vint Cerf<ref>Vint Cert ''On QR Codes and Saftey''  '''CACM 66''' No. 2 (2022-02)</ref>
+
* A report by Vint Cerf<ref>Vint Cert ''On QR Codes and Saftey''  '''CACM 66''' No. 2 p. 7 (2022-02)</ref> shows a common disconnect between the holder of the [[Smartphone]] that processes the app, the site where the holder is and the owner of the website where the hold enters private information. The necessity for informed consent by the holder is a strong binding between the site getting the data with the transaction that the user is asked to complete. It is common in restaurants where this is a common occurrence for the restaurant to contract with a [[Third Party]] service provider, who will be the data collector for the transaction.
 
* [https://www.theverge.com/2022/1/12/22879728/phishing-scam-parking-meter-qr-code-austin-san-antonio A 2022-01-22 phishing scam to watch out for: fraudulent QR codes on parking meters]
 
* [https://www.theverge.com/2022/1/12/22879728/phishing-scam-parking-meter-qr-code-austin-san-antonio A 2022-01-22 phishing scam to watch out for: fraudulent QR codes on parking meters]
 
* See other attacks on the wiki page [[Wallet#QR Codes]].
 
* See other attacks on the wiki page [[Wallet#QR Codes]].

Revision as of 09:39, 22 March 2023

Full Title or Meme

A QR Code is just a specific two dimensal extension of a bar code.

Context

  • Used on Web Sites and physical sites to carry URLs and similar encoded Identifiers.
  • Is not proposed as a cure-all for places where fully digital transmission of information is not trusted or not possible, or as a fall back for digital device not functioning correctly.
  • It is often proposed as a solution to digital exchanges where a radio signal is not possible.

Problems

  • A report by Vint Cerf[1] shows a common disconnect between the holder of the Smartphone that processes the app, the site where the holder is and the owner of the website where the hold enters private information. The necessity for informed consent by the holder is a strong binding between the site getting the data with the transaction that the user is asked to complete. It is common in restaurants where this is a common occurrence for the restaurant to contract with a Third Party service provider, who will be the data collector for the transaction.
  • A 2022-01-22 phishing scam to watch out for: fraudulent QR codes on parking meters
  • See other attacks on the wiki page Wallet#QR Codes.

References

  1. Vint Cert On QR Codes and Saftey CACM 66 No. 2 p. 7 (2022-02)