• @RGB3x3
    link
    English
    275 months ago

    Okay, but explain to me how you’re supposed to tell the difference between a legitimate QR code and a fake one?

    It’s trivially easy to make a mockup of a restaurant’s QR menu so that people scan it when they sit down, expecting to get an online menu.

    • @[email protected]
      link
      fedilink
      English
      75 months ago

      Is the QR Code applied professionally to the surface, possibly behind some security feature such as glass or another surface finish? Is the menu on the table in the general style of the restaurant, or does it look off or entirely different? Is the QR code applied on top of something else, possible another QR code?

      Don’t use apps which directly open QR codes. Any sensible app will tell what the information is before processing it.

      And at last, the simplest and most efficient security measure of all: Commonsense. Don’t scan everything you come across. Restaurant menu? Sure. Some random poster out in the woods promising a quick buck, happy time or their like? Hard pass.

      • @[email protected]
        link
        fedilink
        English
        165 months ago

        Part of the problem with security is they even when it’s legitimate, it acts like the scammers.

        I’ve seen restaurants where their (legitimate) QR code is clearly printed on a home printer and used in lieu of physical menus in order to save money. If the link changes, they will simply tape the new one on top of the old, even on the most official copy you can find.

      • @[email protected]
        link
        fedilink
        English
        95 months ago

        Given that how restaurants present these various greatly, it wouldn’t be terribly unexpected for the official QR to be a sticker on the menu or table either

        • @RGB3x3
          link
          English
          35 months ago

          I’ve been at restaurants where that’s exactly the case. The QR is just a sticker on the table. Or a laminated card with the code on it.

          Would be trivially easy to replace it with a malicious site.