Results 1 to 15 of 15

Thread: News - QR code smartphone clickjacking on the rise

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    31,565
    Thanks
    0
    Thanked
    2,018 times in 718 posts

    News - QR code smartphone clickjacking on the rise

    Cybercrooks put their QR stickers over genuine ones.
    Read more.

  2. #2
    Oh Crumbs.... Biscuit's Avatar
    Join Date
    Feb 2007
    Location
    N. Yorkshire
    Posts
    11,198
    Thanks
    1,394
    Thanked
    1,091 times in 833 posts
    • Biscuit's system
      • Motherboard:
      • MSI B450M Mortar
      • CPU:
      • AMD 2700X (Be Quiet! Dark Rock 3)
      • Memory:
      • 16GB Patriot Viper 2 @ 3466MHz
      • Storage:
      • 500GB WD Black
      • Graphics card(s):
      • Sapphire R9 290X Vapor-X
      • PSU:
      • Seasonic Focus Gold 750W
      • Case:
      • Lian Li PC-V359
      • Operating System:
      • Windows 10 x64
      • Internet:
      • BT Infinity 80/20

    Re: News - QR code smartphone clickjacking on the rise

    I never use them, by the time you have got to the app taken a picture and waited for it to process you might aswell have googled it.

  3. #3
    Banhammer in peace PeterB kalniel's Avatar
    Join Date
    Aug 2005
    Posts
    30,694
    Thanks
    1,762
    Thanked
    3,267 times in 2,630 posts
    • kalniel's system
      • Motherboard:
      • Gigabyte Z390 Aorus Ultra
      • CPU:
      • Intel i9 9900k
      • Memory:
      • 32GB DDR4 3200 CL16
      • Storage:
      • 1TB Samsung 970Evo+ NVMe
      • Graphics card(s):
      • nVidia GTX 1060 6GB
      • PSU:
      • Seasonic 600W
      • Case:
      • Cooler Master HAF 912
      • Operating System:
      • Win 10 Pro x64
      • Monitor(s):
      • Dell S2721DGF
      • Internet:
      • rubbish

    Re: News - QR code smartphone clickjacking on the rise

    Not a lot of point using them on a website where you could just use a link (and presumably that's where they are vulnerable to this clickjacking anyway*). But they are good for posters and presentations.


    *or I could read the article Hmm OK so this is physical sticking a new QR code sticker ontop of a poster on a busy location. Fair enough, that's a legit threat. Luckily QR codes are quite easy to customise, which won't eradicate the problem, but will make it more hassle.
    Last edited by kalniel; 11-12-2012 at 12:23 PM.

  4. #4
    Senior Member
    Join Date
    Aug 2003
    Location
    Wonderful Warwick!
    Posts
    3,919
    Thanks
    4
    Thanked
    180 times in 152 posts

    Re: News - QR code smartphone clickjacking on the rise

    surely you're vulnerable anywhere, android especially is more vulnerable to clickjacking than iOS at present
    Old puter - still good enuff till I save some pennies!

  5. #5
    Seething Cauldron of Hatred TheAnimus's Avatar
    Join Date
    Aug 2005
    Posts
    17,164
    Thanks
    803
    Thanked
    2,152 times in 1,408 posts

    Re: News - QR code smartphone clickjacking on the rise

    Quote Originally Posted by Biscuit View Post
    I never use them, by the time you have got to the app taken a picture and waited for it to process you might aswell have googled it.
    That's your phone. From entering my password it takes maybe 3 seconds at most to get a QR code opened.
    throw new ArgumentException (String, String, Exception)

  6. #6
    Oh Crumbs.... Biscuit's Avatar
    Join Date
    Feb 2007
    Location
    N. Yorkshire
    Posts
    11,198
    Thanks
    1,394
    Thanked
    1,091 times in 833 posts
    • Biscuit's system
      • Motherboard:
      • MSI B450M Mortar
      • CPU:
      • AMD 2700X (Be Quiet! Dark Rock 3)
      • Memory:
      • 16GB Patriot Viper 2 @ 3466MHz
      • Storage:
      • 500GB WD Black
      • Graphics card(s):
      • Sapphire R9 290X Vapor-X
      • PSU:
      • Seasonic Focus Gold 750W
      • Case:
      • Lian Li PC-V359
      • Operating System:
      • Windows 10 x64
      • Internet:
      • BT Infinity 80/20

    Re: News - QR code smartphone clickjacking on the rise

    i think you are exaggerating slightly, either way the differences between typing a word in google, and searching a QR code is not enough for me to want to use them, especially given these quite obvious safety risks.

  7. #7
    Seething Cauldron of Hatred TheAnimus's Avatar
    Join Date
    Aug 2005
    Posts
    17,164
    Thanks
    803
    Thanked
    2,152 times in 1,408 posts

    Re: News - QR code smartphone clickjacking on the rise

    I think you overestimate the typing a word thing. Sometimes its a lot more than that, and also my phone will take about 1.5 seconds from opening the search app, to capturing the QR code. I don't see how anyone could type faster than using the QR code on WP 7.5 onwards.

    They are handy!

    But at the end of the day, is it a problem that someone might have clickjacked something, no. Because its not as if I ever follow a QR code to enter my credit card details and copy of birth certificate is it.
    throw new ArgumentException (String, String, Exception)

  8. #8
    Super Nerd
    Join Date
    Jul 2008
    Location
    Cambridge
    Posts
    1,785
    Thanks
    22
    Thanked
    105 times in 72 posts

    Re: News - QR code smartphone clickjacking on the rise

    Quote Originally Posted by Biscuit View Post
    I never use them, by the time you have got to the app taken a picture and waited for it to process you might aswell have googled it.
    If you set up your phone to zip straight into the right app like Goggles then it works fairly quick but I agree the benefits are minimal - the idea of short phrases you can enter into search engines is better...

    For advertisers its ideal - ad says "search frisbee" and you Google/Bing will always show the first result as that frisbee ad site. You know what you're getting with that.
    Last edited by kingpotnoodle; 11-12-2012 at 02:09 PM.

  9. #9
    Super Nerd
    Join Date
    Jul 2008
    Location
    Cambridge
    Posts
    1,785
    Thanks
    22
    Thanked
    105 times in 72 posts

    Re: News - QR code smartphone clickjacking on the rise

    Quote Originally Posted by TheAnimus View Post
    But at the end of the day, is it a problem that someone might have clickjacked something, no. Because its not as if I ever follow a QR code to enter my credit card details and copy of birth certificate is it.
    Drive-by malware infection?

  10. #10
    Seething Cauldron of Hatred TheAnimus's Avatar
    Join Date
    Aug 2005
    Posts
    17,164
    Thanks
    803
    Thanked
    2,152 times in 1,408 posts

    Re: News - QR code smartphone clickjacking on the rise

    Quote Originally Posted by kingpotnoodle View Post
    Drive-by malware infection?
    Aren't any in the wild for WP8 AFAIK. But is it more of a threat than say search results, the regular un-safe, un-regulated internet?
    throw new ArgumentException (String, String, Exception)

  11. #11
    Senior Member
    Join Date
    Aug 2003
    Location
    Wonderful Warwick!
    Posts
    3,919
    Thanks
    4
    Thanked
    180 times in 152 posts

    Re: News - QR code smartphone clickjacking on the rise

    I think you misunderstand the useage, you could put a unique URL into a QR code to give somebody an offer etc. that is what they really should be used for...but I know many people don't use them as they should, from both sides!
    Old puter - still good enuff till I save some pennies!

  12. #12
    Super Nerd
    Join Date
    Jul 2008
    Location
    Cambridge
    Posts
    1,785
    Thanks
    22
    Thanked
    105 times in 72 posts

    Re: News - QR code smartphone clickjacking on the rise

    Quote Originally Posted by TheAnimus View Post
    Aren't any in the wild for WP8 AFAIK. But is it more of a threat than say search results, the regular un-safe, un-regulated internet?
    True, but its probably only a matter of time. And there are other mobile OS, some of which are a bigger (and maybe easier, *cough* Android *cough*) target...

    When we as a societal whole need to teach people "internet safety" then technologies like QR are not really helpful - you can't pay attention to what links you follow if it's non human readable. Same reason I'm not a fan of URL shortening using the random alphanumeric codes - anyone who clicks on one of them is asking for trouble.

  13. #13
    Super Nerd
    Join Date
    Jul 2008
    Location
    Cambridge
    Posts
    1,785
    Thanks
    22
    Thanked
    105 times in 72 posts

    Re: News - QR code smartphone clickjacking on the rise

    Quote Originally Posted by 3dcandy View Post
    I think you misunderstand the useage, you could put a unique URL into a QR code to give somebody an offer etc. that is what they really should be used for...but I know many people don't use them as they should, from both sides!
    Same problem as always - it's the mis-use that ruins theoretically useful things.

  14. #14
    Seething Cauldron of Hatred TheAnimus's Avatar
    Join Date
    Aug 2005
    Posts
    17,164
    Thanks
    803
    Thanked
    2,152 times in 1,408 posts

    Re: News - QR code smartphone clickjacking on the rise

    Actually thanks to fragmentation Andriod is quite hard to make malware for in a way. You have to find a vector that has been constant across all the differen't incantations.

    The only in the wild drive by exploit that achived many users I've heard of was for iOS....
    throw new ArgumentException (String, String, Exception)

  15. #15
    Senior Member
    Join Date
    Mar 2009
    Location
    Manchester
    Posts
    1,490
    Thanks
    27
    Thanked
    88 times in 71 posts
    • Percy1983's system
      • Motherboard:
      • Gigabyte x570 Aorus Pro
      • CPU:
      • AMD 3700x + Cooler Master Nepton 140XL
      • Memory:
      • 64GB (4x16GB ) Corsair Vengence 3200mhz @ 3600mhz CL16
      • Storage:
      • 500GB Silicon Power NVME + 2x 4tb Raid 0 (2tbx2) arrays with 250gb Silicon Power NVME cache
      • Graphics card(s):
      • R9 290 4GB
      • PSU:
      • 875w Thermaltake Toughpower XT
      • Case:
      • Thermaltake Level 10 GT Snow Edition
      • Operating System:
      • Windows 10 Pro 64bit
      • Monitor(s):
      • 24" Acer UHD x2
      • Internet:
      • Talk Talk!

    Re: News - QR code smartphone clickjacking on the rise

    Interestedly it just made me realise how easy it is to make one, I will be adding one to things with my business website.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •