News for hackers. Stuff that matters.

A comment on Major U.S. energy org targeted in QR code phishing attack.

Re:Major U.S. energy org targeted in QR code phishing attack by tizz98 on Wednesday August 16, 2023 @01:03PM (#37150053)
I've started thinking about a verifiable format for QR codes. https://blog.xqr.dev/introducing-xqrs-the-next-evolution-in-...

I've written a library in Rust to handle this as well as a CLI example: https://github.com/xqr-dev/xqr-rs

It's still early stages, so feedback would be helpful!

[ Parent | on HN ]
Re:Major U.S. energy org targeted in QR code phishing attack by varenc on Wednesday August 16, 2023 @01:42PM (#37150722)
How do you handle redirects?

Like if a popular QR code generator and redirector hosting service supported this and signed my QR code, couldn’t I just change the redirect but the original target URL is still valid? You could try to detect redirects but that could be tricky once JS is involved.

[ Parent | on HN ]