Hacker News Reader

Comment by bri3d | Hacker News Reader

I do agree that QR codes can be used for trolling, but there's absolutely no reason you can't inspect the URL before visiting a link from a QR code - all that's stored in the QR code, after all, is the URL!

The trivial technical solution is a QR code reader which tells you where you're going before it sends you there, which ZXing (the Barcode Reader for Android) and several iOS QR readers already do.

View on HN

It's phishing. Sure, you're going to check the url. But most people won't. And simply being on the bank is going to be validation enough for most.

Short URLs (very common in the QR code space, for making a smaller code) quickly circumvent this solution. If I see "bit.ly/asdf", I'll assume they just shortened their URL.

And this is one of many reasons that URL shorteners must die. If it weren't for Twitter, people wouldn't be so used to blindly clicking through short URLs.

But anyhow, most URL shorteners offer an API to retrieve the long URL. You could implement that in your QR code scanner as well, for the most popular URL shorteners, to allow people to see where they will be redirected to.

Alternatively on Android, you can use FairyPreview to decode most minimized URLs for you before sending them to the browser.

https://market.android.com/details?id=com.fairyteller.linkpr...

And cell phones don't display long URLs, another phishing problem begging to be exploited

Reply on news.ycombinator.com