News for hackers. Stuff that matters.
Re:Encoding your WiFi access point password into a QR code by ctdonath on Sunday December 29, 2019 @10:49AM (#21906458)
Do you never click URLs in emails? Of course you do, when you're confident the sender is reputable.

Parent was referencing trusted contexts: the default password printed on your wifi router, the bill a cashier just handed you for what you just bought, the legal papers you just signed, etc. The QR code just links the trusted document with trustworthy digital versions & extended content.

I'm not worried a spammer is going to get a bogus QR printed on the grocery store receipt I just received. I'm not going to scan QR codes printed & posted on subway walls for no apparent reason.

Re:Encoding your WiFi access point password into a QR code by kohtatsu on Sunday December 29, 2019 @11:18AM (#21906619)
I can't imagine a qr code on a receipt being anything but tracker-infested spam.
Re:Encoding your WiFi access point password into a QR code by mk89 on Sunday December 29, 2019 @12:05PM (#21906975)
That's how it currently is in some shops. Amazing how marketers are always ahead on such technologies.
Re:Encoding your WiFi access point password into a QR code by jeremyvisser on Sunday December 29, 2019 @09:47PM (#21910381)
Can confirm.

I was visiting a nature reserve where the trail opened to a resting area with some seats. A tree had a woodcut QR code on it, so I thought I'd scan it to find out more about the area.

Turns out, the QR code linked to some tracking site with a short URL. Even worse, the short URL had since been deleted, so I have no way to know the original URL it went to.

Re:Encoding your WiFi access point password into a QR code by tripzilch on Tuesday December 31, 2019 @09:18AM (#21921125)
Yep, it'll definitely have a tracking code added to the URL.
Re:Encoding your WiFi access point password into a QR code by inetknght on Sunday December 29, 2019 @01:49PM (#21907633)
> Do you never click URLs in emails? Of course you do, when you're confident the sender is reputable.

Nope. I go to the sender's URL manually and look for what it is they sent an email about.

Re:Encoding your WiFi access point password into a QR code by TheGallopedHigh on Sunday December 29, 2019 @07:26PM (#21909713)
You’re the exception that proves the rule
Re:Encoding your WiFi access point password into a QR code by dordoka on Monday December 30, 2019 @08:10AM (#21913095)
Exactly.
Re:Encoding your WiFi access point password into a QR code by Phobophobia on Sunday December 29, 2019 @11:57AM (#21906920)
Don't most people within the HN demographic mouse over to see the link in emails?
Re:Encoding your WiFi access point password into a QR code by Spare_account on Sunday December 29, 2019 @12:09PM (#21906993)
For comparison, my phone shows me the URL that the QR code decoded to, and prompts me to confirm that I want to browse to it
Re:Encoding your WiFi access point password into a QR code by SlowRobotAhead on Sunday December 29, 2019 @12:34PM (#21907160)
Remember bitly, AMP, CDNs?

Also, as to something like a javascript exploit in a URL itself, QRs can hold a surprising amount of data, enough to max out most URL browser limits around 2,048 bytes.

Re:Encoding your WiFi access point password into a QR code by sp332 on Sunday December 29, 2019 @08:30PM (#21910014)
At least bitly lets you look before you keep. Add a + to the end of any bitly URL to see where it goes, when it was created, and how many peole clicked it.
Re:Encoding your WiFi access point password into a QR code by Spare_account on Monday December 30, 2019 @07:27AM (#21912867)
You've described some of the scenarios that would result in me not clicking the link. The feature works well, doesn't it.

This is functionally the same as hovering over links in emails, which is the context in which I made my comment.

Re:Encoding your WiFi access point password into a QR code by SlowRobotAhead on Monday December 30, 2019 @11:56AM (#21914730)
Ok, explain those to my mom.
Re:Encoding your WiFi access point password into a QR code by nkrisc on Sunday December 29, 2019 @02:44PM (#21907992)
Ok but if it's a bitly link then I'm still not clicking. Just like it an email includes an obviously shortened email.
Re:Encoding your WiFi access point password into a QR code by sylvanaar on Sunday December 29, 2019 @04:02PM (#21908445)
Bitly is so useful though for making usable QR links
Re:Encoding your WiFi access point password into a QR code by octorian on Sunday December 29, 2019 @01:05PM (#21907343)
On the desktop, especially if the Email is even slightly suspicious? Always. On mobile, it's somehow a lot more difficult and user unfriendly.
Re:Encoding your WiFi access point password into a QR code by m463 on Tuesday December 31, 2019 @06:11PM (#21925442)
hover text and/or copy and paste into browser before hitting go.