uh what? So I download the file, hash it, then pipe that into some program that's going to show me another QR code? And then eyeball that for differences? Who does that? I already have programs to compare two text strings, easily, accurately, remotely. Comparing two pngs is way more work. I was just assuming the QR code was the URL, but hash QRs make even less sense than my IDE on the phone scenario.

Actually, looking at the URL of the QR code image itself, it is for the download URL.