(untitled)

This guy was able to fit an entire snake game on a QR code. The QR bar contains the whole game code compiled to a machine code which decodes into an executable (it's NOT just some kind of high level interpreted code that would rely on code hidden in the interpreter). https://youtu.be/ExwqNreocpg This means that you could actually fit an entire malware code on a QR bar as well, not just link to it.

>>6437 fuarrrk, wrong board. I meant to post this to /inter/.

They have putting malware in qr codes forever now, it's even apart of S.E.T. for years now.

How much you can do probably depends on quality of the camera on a device. Couldn't there be a way around this such as make a QR code reader not respond to those kind of requests by stopping the scanning once it realizes what type of data is in the QR code?

>>6440 You need an AV database, and then maybe if you're luckey it'll possibly find it.

>>6439 but is it effective though? it seems like qr code readers are pretty safe, at least the smartphone ones

>>6441 That's one way but I was talking about blocking out anything that isn't just a link, phone number, or email address.

>>6443 There's always a backdoor

>>6437 As one guy at defcon said (I don;t remember who): go to an area of your city that's full of hipsters and place a malicious qr, you'll get thousands of hits

>>6690 What about placing something non malicious just a hit counter and find out?