Hacker News Reader

Call me paranoid, but I've taken to not scanning "public" QR codes any longer [1].

[1] https://www.washingtonpost.com/technology/2021/10/07/are-qr-...

There is way too much human interest to that article and way too little substance on the problems. Tl;dr - there’s no security risk unique to QR codes are that aren’t simply present on the Internet at-large.

Yes, but there are security risks unique to QR code menus at pizza joints that aren't present on pizza joint menus at large. The status quo for restaurant menus is printed text.

Also, QR codes obfuscate the request that is being sent.

The link to the article wasn't intended to be the be-all reason... just a general "something to think about here".

There is an inherent security risk... it is trivial, as the OPs article suggests, to print out a QR code, cover an existing public one, and send people to a phishing site. Unless people are being very careful about what sites they are on, they could easily be scammed.

Reply on news.ycombinator.com