#TIL #QRCodes can look different but encode the same payload.
https://qrplanet.com/help/article/why-two-qr-codes-with-the-same-url-can-look-different
Reading the explanation, this seems obvious, but somehow I was amazed that a QR Code generated from the command line (without any extra switches) and from an encoder on the web looked pretty different.
@glynmoody Like so many things it's not really the technology that's at fault. QR codes are a convenient way of encoding & transmitting information.
The problems are that (a) most phones are configured to automatically load the webpage pointed at by a QR Code (assuming it encodes a URL) and (b) the persistent problem behind almost all online scams -- users are not given the tools or knowledge to help them detect a fraud.
I use the SECUSO QR Scanner app on my phone which not only displays the URL before launching it, but requires the user to check a confirmation box forcing you to think a bit more about what's about to happen.
Of course that only solves problem (a) above.
QR code '#quishing' scams up 14-fold in five years - https://www.bbc.com/news/articles/cq6yznmv3gzo this is why I hate #QRcodes, and avoid using them...
Well, duh...
"National Car Parks, which runs 800 car parking sites across the #UK, is considering removing QR codes from its signage".
At one point, I thought of creating one for my #church notice board, but decided against when alerted to the gaping security #problem!
#CarParks
#crime
#qrcodes odes
https://www.bbc.co.uk/news/articles/cq6yznmv3gzo
#Fraud #QRCodes #Parking #Scam #Fraudulent #Scams #ScamsAndFraud #Technology #SmartPhones #quishing #quishingScam #QRCodeFraud #Cyber #CyberSecurity #cybersecuritynews
Always worth a post when so many scams are out there. Beware QR codes!!!
Organised gangs behind rise in QR 'quishing' scams https://www.bbc.com/news/articles/cq6yznmv3gzo
Apparently someone is sticking fake "Parking Payment" QR codes on parking meters in Manhattan Beach (California).
2025-04-01 13:26:52 PDT
The City warns residents and visitors about a scam involving unauthorized QR codes for parking payments. Currently, there are no QR codes for online payments at parking meters or pay stations.
Please avoid using any QR codes you come across, as they may lead to fraudulent sites. Only use official payment methods.
Report any suspicious activity to our Police Department. Stay safe and vigilant!
If you see a QR Code on a parking meter, do not scan it. Contact Manhattan Beach Police at (310) 545-4566.
https://member.everbridge.net/311578402488335/notif/YuHHaxdfx
blog! “A Recursive QR Code”
I've been thinking about fun little artistic things to do with QR codes. What if each individual pixel were a QR code?
There's two fundamental problems with that idea. Firstly, a QR code needs whitespace around it in order to be scanned properly.
So I focussed on the top left positional marker. There's plenty of whitespace there.
Secondly, because QR codes…
Read more: https://shkspr.mobi/blog/2025/03/a-recursive-qr-code/
⸻
#art #qr #QRCodes
I have seen article claiming that #Google is going to switch to requiring use of #QRcodes (which I loathe) in order to use #gmail, sometime in the not too distant future. The other email that I have used in the past gradually became useless in recent years (I suspect Gmail of blocking smaller mail servers) so I have just finished migrating everything to my gmail address, but it looks like I now need to migrate elsewhere.
Can people recommend a reliable email service?
blog! “Why are QR Codes with capital letters smaller than QR codes with lower-case letters?”
Take a look at these two QR codes. Scan them if you like, I promise there's nothing dodgy in them.
Read more: https://shkspr.mobi/blog/2025/02/why-are-qr-codes-with-capital-letters-smaller-than-qr-codes-with-lower-case-letters/
⸻
#qr #QRCodes
Why are QR Codes with capital letters smaller than QR codes with lower-case letters?
Take a look at these two QR codes. Scan them if you like, I promise there's nothing dodgy in them.
Left is upper-case HTTPS://EDENT.TEL/ and right is lower-case https://edent.tel/
You can clearly see that the one on the left is a "smaller" QR as it has fewer bits of data in it. Both go to the same URl, the only difference is the casing.
What's going on?
Your first thought might be that there's a different level of error-correction. QR codes can have increasing levels of redundancy in order to make sure they can be scanned when damaged. But, in this case, they both have Low error correction.
The smaller code is "Type 1" - it is 21px * 21px. The larger is "Type 2" with 25px * 25px.
The official specification describes the versions in more details. The smaller code should be able to hold 25 alphanumeric character. But https://edent.tel/ is only 18 characters long. So why is it bumped into a larger code?
Using a decoder like ZXING it is possible to see the raw bytes of each code.
UPPER
20 93 1a a6 54 63 dd 28
35 1b 50 e9 3b dc 00 ec
11 ec 11lower:
41 26 87 47 47 07 33 a2
f2 f6 56 46 56 e7 42 e7
46 56 c2 f0 ec 11 ec 11
ec 11 ec 11 ec 11 ec 11
ec 11You might have noticed that they both end with the same sequence: ec 11 Those are "padding bytes" because the data needs to completely fill the QR code. But - hang on! - not only does the UPPER one safely contain the text, it also has some spare padding?
The answer lies in the first couple of bytes.
Once the raw bytes have been read, a QR scanner needs to know exactly what sort of code it is dealing with. The first four bits tell it the mode. Let's convert the hex to binary and then split after the first four bits:
TypeHEXBINSplitUPPER20 9300100000 100100110010 000010010011lower41 2601000001 001001100100 000100100110The UPPER code is 0010 which indicates it is Alphanumeric - the standard says the next 9 bits show the length of data.
The lower code is 0100 which indicates it is Byte mode - the standard says the next 8 bits show the length of data.
20 9300100000 100100110010 0000 10010lower41 2601000001 001001100100 000 10010Look at that! They both have a length of 10010 which, converted to binary, is 18 - the exact length of the text.
Alphanumeric users 11 bits for every two characters, Byte mode uses (you guessed it!) 8 bits per single character.
But why is the lower-case code pushed into Byte mode? Isn't it using letters and number?
Well, yes. But in order to store data efficiently, Alphanumeric mode only has a limited subset of characters available. Upper-case letters, and a handful of punctuation symbols: space $ % * + - . / :
Luckily, that's enough for a protocol, domain, and path. Sadly, no GET parameters.
So, there you have it. If you want the smallest possible physical size for a QR code which contains a URl, make sure the text is all in capital letters.
This blog post was exhibited at QR Show, NYC
Ich habe ja keine Ahnung, und nur Chat nur hier von! ich frage mich aber, ob es #QRCodes gibt die so ziemlich ins „jenseits“ laufen und immer weiter. Es gibt einfach zu viele Cameras die ständig „on search“ sind. Macht so etwas Sinn?
“Quishing” - The Emerging Threat of Fake QR Codes
https://www.tripwire.com/state-of-security/quishing-emerging-threat-fake-qr-codes
Geofency 9.1.2 is here!
New: Generate QR codes for Apple Maps, Bing Maps, and OpenStreetMap – share locations easily. New: Colored icons in the HUD for better context awareness. Fixed: Progress status for backup restoration and more UI fixes on macOS.
Note: The next version will drop support for iOS 16.
Update now and enjoy the improvements! 
Die Betrugsmasche „Quishing“ ist auch in Dortmund angekommen – Gefälschte QR-Codes an Parkscheinautomaten: Die Polizei sucht Zeug:innen von Manipulationen
Stadt Dortmund und Polizei warnen vor einer neuen Betrugsmasche: Auf einigen Parkscheinautomaten wurden Aufkleber mit falschen QRCodes aufgeklebt. Wer diese scannt, wird auf eine betrügerische Webseite weitergeleitet.#Betrugsmasche #Dortmund #Parkscheinautomat #Polizei #QR-Codes #Quishing
Gefälschte QR-Codes an Parkscheinautomaten: Die Polizei sucht Zeug:innen von Manipulationen - Nordstadtblogger
Think twice before scanning QR codes: 60% of them are spam. Be careful when travelling for business, too - scammers are even putting fake QR codes on parking meters. Stay cautious to protect your business data
#QRCodes #PhishingScam #CyberSecurity https://www.techradar.com/pro/security/the-majority-of-qr-codes-are-spam-new-survey-claims
QR-Codes bieten Komfort, bergen aber auch Risiken
#QRCodes
https://www.infopoint-security.de/qr-codes-praktisch-aber-mit-vorsicht-zu-geniessen/a39385/
Der #Barcode verabschiedet sich: Ab 2027 werden #QRCodes im #Einzelhandel Standard.
Sie speichern mehr Informationen, wie #Haltbarkeitsdaten und #Allergenhinweise, und helfen, #Lebensmittelverschwendung zu reduzieren. Erste Erfolge zeigen #Woolworths und #Tesco mit effizienterem #Produktmanagement und gezielten Rabatten.
Mandiant has identified a novel method to bypass browser isolation technology and achieve command-and-control operations through QR codes. #CyberAttack #CyberSecurity #QRcodes https://www.bleepingcomputer.com/news/security/qr-codes-bypass-browser-isolation-for-malicious-c2-communication/
️
