• bstix@feddit.dk
    12·
    2 days ago

    The largest QR code can hold up to 3 kb of data, which is more than enough to write a nasty virus in an injectable script if aimed at specific devices/apps. The main hurdle is breaking the app to execute the code instead of treating it as a string. It’s the Drop Bobby Tables joke. Developers hopefully don’t fall for this anymore.

    Anyway. Making a shitty link and leading people there isn’t a new idea. You don’t even need a t-shirt. Hackers already place their own printed QR labels on top of otherwise real codes, and the user might not even notice, because they’ll be redirected to the right site after the dirty deed is done dirt cheap.

    • jqubed@lemmy.world
      1·
      2 days ago

      Having worked in TV news, I’ve long thought the way arrested politicians or whoever that are trying to avoid being filmed leaving a courthouse by holding a folder or coat in front of their face should instead just hold both middle fingers up right in front of their face. The image won’t be used, and if it is, it will make it very clear how they feel about the citizens.

  • HikingVet@lemmy.sdf.org
    53·
    3 days ago

    Except if they were halfway intelligent they wouldn’t have it go automatically to the site.

    And when you do this and something goes really wrong criminal charges get laid.

    • Krafty Kactus@sopuli.xyzEnglish
      53·
      3 days ago

      I’m not sure if you could actually get criminal charges for this unless you were hosting the malware in which case that’s another issue. It would essentially be the same as walking around with a website URL on your shirt. The observer is responsible for typing in the URL or scanning the code and what they decide to do on the website that follows.

      • Malfeasant@lemm.ee
        2·
        2 days ago

        I tend to agree that this is how it should be, that doesn’t mean that’s how it is. If you walk around with a T-shirt that says “kill all CEOs” along with where to find them, you’re going to run into some trouble, despite being a similar situation- you’re just giving instructions, it’s up to the viewer what to do with them.

        • Krafty Kactus@sopuli.xyzEnglish
          1·
          2 days ago

          Except the shirt doesn’t say “visit this site, there are cool things on it”. If you’re gonna make the comparison to CEOs then it would be like putting a CEOs address on your shirt.

      • HikingVet@lemmy.sdf.org
        9·
        3 days ago

        Not if it incites violence, causes harm or any of the other carve outs in the first amendment of the USA.

        I am aware that the post is supposed to be funny, and you are most likely making a joke, but this is the internet and these sort of disclaimers tend to be necessary.

        • desktop_user
          2·
          3 days ago

          a URL to malware doesn’t cause harm, the idiot who opens it does.

    • HalfAHero@lemmy.world
      6·
      3 days ago

      Can we just get a website that plays a soundbite at full volume screaming about how they person is bad at privacy practices, maybe with Korn in the background for maximum embarrassment?

  • mEEGal@lemmy.world
    10·
    3 days ago

    here’s an idea : let it redirect to a URL but with it’s query params tweaked so it automatically attempts an SQL injection on the website when loading

  • MutilationWave@lemmy.world
    1·
    2 days ago

    So I thought I pulled a great prank once. I made a QR code that directed to lemonparty. I used an online sticker service’s free trial to print a bunch up with my friend’s Instagram at the bottom. I travel all over for work so I was going to put them everywhere.

    My problem was I printed them in yellow and they wouldn’t scan. I told my friend and he thought it was a funny idea just like I knew he would, not a malicious prank. Wish it had worked.

  • PyroNeurosisEnglish
    6·
    3 days ago

    Tragically they were beaten to death in broad daylight by police, but there was no surviving evidence.