Malicious Qr Codes: A Mobile Security Blind Spot

#1 PCWorld

Advanced Member

Group: PCWorld BOT
Posts: 103,924
Joined: 01-August 07

Posted 05 May 2012 - 12:51 PM

Post your comments for Malicious QR Codes: A Mobile Security Blind Spot here

#2 GraysonPeddie

Senior Member

Group: Members
Posts: 603
Joined: 28-July 06
Location:Orlando, FL 32825 USA

Posted 05 May 2012 - 02:17 PM

I'd just tell my family to avoid QR codes even though they don't know anything about it as well as I do. Me, my mom, and my dad all have Android phones, which is not a bad thing. It's a matter of preference.

#3 redhatnation

Newbie

Group: Members
Posts: 3
Joined: 06-March 10

Posted 05 May 2012 - 03:14 PM

Timely article. QR codes are a shiny new feature and could be an easy attack vector. I've seen people just scan QR codes and go -- without even thinking about it.

#4 SteveShirkey

Newbie

Group: New Member
Posts: 1
Joined: 05-May 12

Posted 05 May 2012 - 06:39 PM

QR codes can introduce security challenges, just as any technology automation does, but this is the domain of QR code readers, and much like web browsers are built to guard against internet attack vectors, a typical QR code readers must (and often do) analyze the QR code content and prompt the user before taking any action, such as opening a URL or adding a contact.

#5 DustinShempf

Newbie

Group: New Member
Posts: 7
Joined: 04-November 11

Posted 05 May 2012 - 10:09 PM

topic is a little slow to the party.

& prompting a user won't help w/o sending off to be scanned

#6 JackNFranFarrell

Full Member

Group: Members
Posts: 68
Joined: 21-December 11

Posted 06 May 2012 - 07:57 AM

This is an example of where the regulatory nannies could actually protect the public.

Require bar codes or other unreadable directions be pre validated as secure and bug-free before they can appear on the internet. Just do it!

#7 oldschoolh4ck3r

Senior Member

Group: Members
Posts: 881
Joined: 11-January 09

Posted 06 May 2012 - 12:19 PM

Visiting any website should not cause any device to become 'infected'. Don't blame the QR codes - blame the software.

---
Abort, Retry, Epic Fail? _

#8 MarineChief

Member

Group: Members
Posts: 27
Joined: 24-March 08

Posted 06 May 2012 - 01:41 PM

I have been using 'Norton Snap' a free app downloaded from Google's android market. It claims to run the scanned QR against a database of safe sites (and uses a Norton community to help keep it fresh). Although I am sure that it cannot stop all malicious attempts I feel much safer using this method IF I scan a public accessible QR code.

#9 Tinman1957

Advanced Member

Group: Members
Posts: 194
Joined: 19-December 09

Posted 06 May 2012 - 02:31 PM

deancollinshvuo, on 06 May 2012 - 04:42 AM, said:

Wow you do realise David how big an idiot you sound by writing this article.

This would be akin to saying...dont visit the internet as "URLs" are bad and can sometimes contain viruses.

Feel free to try again when you've grown up a little.

Cheers,
Dean
- www.Cognation.net/QR

Wow! Are you that freaking ignorant or just a troll looking for a fight? I suspect both. David is relaying vital security information and you slam him for it. Perhaps once YOU have grown up you'll understand, but then again, ignorant wankers like yourself are usually that dumb for life.....

#10 EricaCool

Newbie

Group: New Member
Posts: 1
Joined: 13-May 12

Posted 13 May 2012 - 01:07 PM

If you ask me, those QR codes are dangerous looking already. Scanning them is a whole other story. As for Smartphones, I'll settle for pre-paid phones.