Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [qr-code]

A quick response code, or QR code, is a type of matrix barcode which stores data as square black markings within a square layout that should be readable by any computing device capable of imaging.

0
votes
1answer
45 views

Need help on 2FA QRcode security

In reference to OTP 2FA Auth apps: I'm trying to understand the concept of the QRcode being more secure in-transit than SMS? Is it because the QRcode itself is not of any value to fraudulent ...
0
votes
0answers
28 views

SQRC use to verify e-delivered certificate

I have a need to provide a means of validating a certificate that is e-delivered. My thought is to use an SQRC to enable that verification by linking to a secure site that contains the original ...
0
votes
1answer
38 views

What are the risks when using QR to authenticate when using offline MFA in cases network is unavailable due to a network outage

if the PingID service is unreachable the user will receive a QR code on an offline authentication screen. in case of Offline MFA when the network is unavailable due to a network outage (i.e. in an ...
2
votes
0answers
88 views

Using a GUID as an authentication token (and how it could be improved)

I'm implementing a Whatsapp Web-like feature for my Android application. User should be able to open an HTTPS web application that displays a QR code (a GUID generated by the server) and scan it using ...
4
votes
1answer
65 views

Generating QR code from seed in browser - possible security issue?

I need to implement 2FA in my web app. I'm doing this the standard way: the newly created user's seed is retrieved from the server(I use speakeasy) and the QR code is generated. The thing is, it's ...
2
votes
1answer
111 views

Verifying customer check in

I have created a customer loyalty and reward app that works in a very simple manner. We supply cafes etc. with a printed QR code which the customers scan on each visit, using the app. Upon completing ...
43
votes
7answers
13k views

How resistant are barcodes and QR-codes against attempts to change stored data?

Assume we want to protect a document against manipulating and forging. So, we encode some sensitive information of the document and store it in a QR-code inserted in the document. Can we be sure that ...
0
votes
1answer
464 views

How to make QR Code uncopyable - Scanning of the QR Code at consumer level [closed]

I am designing a Consumer Protection System for import products on Blockchain technology. My Client wants to use QR Code instead of Security Tax Stamp. How can we make QR Code uncopyable at the ...
4
votes
3answers
120 views

Using a simple 5-character pass for event vs. QR/barcode

I plan on doing a "ticketing" system, where a user would buy a "tour ticket" online. The part that I'm puzzled about is: After they buy, what mechanism to use to verify the ticket? I've been looking ...
1
vote
0answers
38 views

How to secure unique identification of physical resources in a distributed system?

I'm attempting to build a mechanism to prevent frauds and provide traceability of physical resources in a distributed system. The idea is straightforward: the resource travels hop-by-hop on a network ...
2
votes
0answers
206 views

How does Signal desktop app mitigate QR code login hijacking?

I am trying to implement linking of the desktop app to the mobile counterpart for my project. The assumption is that the mobile app is secure and the desktop app simply needs to link the session to ...
1
vote
0answers
253 views

Security of SQRC QR codes

I'm currently testing an application which uses QR codes to identify products. Now if I scan the QR code with any reader and generate a new QR code with the read text, it differs from the original QR ...
1
vote
2answers
2k views

Create a Secure QR Code Reward System?

Ill gave you the following scenario: A customer comes to a coffeshop and drinks 1 coffee. Then he put out a App from this Coffeeshop and opens the integrated QR Scanner. The worker shows him a QR ...
0
votes
1answer
361 views

How exploitable is a QR code in a login system?

I'm taking a CTF challenge on a web service. The goal is to gather the most information possible of a user. I have access to it's login and password, but password is expired and the account must be ...
1
vote
2answers
694 views

Is this a safe way to identify someone through a QR code for a purchase?

I am in the process of developing an iOS app where a customer can earn rewards (money) to spend back at the business. When the customer wants to spend the money they have earned, the cashier will use ...
4
votes
1answer
107 views

Unidirectional Data Transmission to a Smartphone

Unidirectional Data Transmission to a Smartphone I'm going to use an old Android phone to store sensitive data (e.g., Bitcoin wallet private key), with no SIM card and WiFi and Bluetooth turned off. ...
2
votes
2answers
145 views

Protecting QR Code, Eddystone and NFC against spoofing

Let's say I have the following scenario. I have QR Code, Eddystone and/or NFC which contains IP address, with which, my client side application communicates. Let's say this IP address can vary from ...
0
votes
1answer
86 views

2FA Security on Setup [duplicate]

When setting up 2FA with Authy most websites give you a QR code to scan. Would it be correct to say that you should treat this QR code securely? If this code or a picture of it was leaked there is ...
2
votes
1answer
71 views

Secure IDs and QR

Suppose that I want to give to users of my site the option to pay for a service and use it later. I am thinking to generate a unique ID for the paid service. I want to be able to trust the ID to ...
3
votes
2answers
320 views

How to secure a digital ID from being faked?

We're trying to create a digital ID to replace UK Passport/driving licences for entry into licensed premises, but need to ensure it cannot be faked (or failing that, the barrier to faking it needs to ...
2
votes
2answers
134 views

What are the security risks of a phone-based authentication?

I was looking into a way to make the authentication experience as simple as possible and this project came to my mind, where Google was using the logged account on your phone to log you into your ...
0
votes
1answer
696 views

Can a QR code steal my mobile's data?

For example https://web.wechat.com By scanning the QR code from my mobile, it automatically logs in with my wechat account. Here, can QR web sever or QR devices steal the mobile data?
1
vote
1answer
380 views

QR-code based credential retrieval?

This is a sort of design review question that I'm hoping is suitable for this site. I am designing a system that uses a cloud service to establish a secure connection between a PC and a mobile device....
1
vote
1answer
586 views

“Inverted” asymmetric encryption

I am developing a system to prevent frauds in tickets. What do I need? An algorithm to generate a QR Code that will be shown to my clients in a ticket. An algorithm to validate (offline) the QR ...
0
votes
1answer
428 views

Making it harder to scan on-screen QR-code from a distance

Say I have a QR-code on my laptop screen that I need to scan with my mobile device. Is there anything that can be done to make the on-screen code harder to scan from a distance? I am thinking for ...
35
votes
7answers
16k views

Could SQRL really be as secure as they say?

I just came across https://www.grc.com/sqrl/sqrl.htm With Secure QR Login, your phone snaps the QR code displayed on a website's login page . . . . and YOU are securely logged in. This seems ...
0
votes
2answers
3k views

QR code as certificate of authenticity

I need details about QR code that provides information about whether its product is original or not. The situation is a stamp that tells that this product has been certified as safe to be use by this ...
-2
votes
6answers
3k views

Looking for something like a QR code that cannot be copied/reproduced [duplicate]

Can QR codes always be copied? I am looking for some sort of QR code or chip that can be readily scanned (preferably via smartphone) and linked to a secure website, but that cannot be copied or ...
16
votes
3answers
517 views

Malicious QR Code and Mitigation

I just started reading a little on QR code, so I'm not entirely familiar with QR Code capabilities, but a thought crossed my mind today. I scanned a QR Code on a postcard I received, and it ...
14
votes
5answers
14k views

QR codes that can't be copied - possible?

I assume this is impossible, but I need to find a barcode (that can contain a url, i.e., a QR style one). It has to be photographed by our smartphone app, but the image will not be changed over a ...