How QR Codes Work And What Makes Them Harmful – A Laptop Scientist Explains

Among the many many adjustments caused by the pandemic is the widespread use of QR codes, graphical representations of digital information that may be printed and later scanned by a smartphone or different system, however there are some safety dangers. The Federal Commerce Fee warned once more in December 2023 in regards to the hazard of scanning a code from an unknown supply.

QR codes have a big selection of makes use of that assist individuals keep away from contact with objects and shut interactions with different individuals, together with for sharing restaurant menus, e mail listing sign-ups, automobile and residential gross sales data, and checking out and in of medical {and professional} appointments.

QR codes are an in depth cousin of the bar codes on product packaging that cashiers scan with infrared scanners to let the checkout laptop know what merchandise are being bought.

Bar codes retailer data alongside one axis, horizontally. QR codes retailer data in each vertical and horizontal axes, which permits them to carry considerably extra information. That additional quantity of knowledge is what makes QR codes so versatile.

Anatomy of a QR code

Whereas it’s straightforward for individuals to learn Arabic numerals, it’s onerous for a pc. Bar codes encode alphanumeric information as a sequence of black and white strains of assorted widths. On the retailer, bar codes report the set of numbers that specify a product’s ID. Critically, information saved in bar codes is redundant. Even when a part of the bar code is destroyed or obscured, it’s nonetheless doable for a tool to learn the product ID.

QR codes are designed to be scanned utilizing a digital camera, similar to these discovered in your smartphone. QR code scanning is constructed into many digital camera apps for Android and iOS. QR codes are most frequently used to retailer net hyperlinks; nevertheless, they’ll retailer arbitrary information, similar to textual content or photographs.

If you scan a QR code, the QR reader in your cellphone’s digital camera deciphers the code, and the ensuing data triggers an motion in your cellphone. If the QR code holds a URL, your cellphone will current you with the URL. Faucet it, and your cellphone’s default browser will open the webpage.

QR codes are composed of a number of components: information, place markers, quiet zone and non-obligatory logos.

The QR code anatomy: information (1), place markers (2), quiet zone (3) and non-obligatory logos (4). Scott Ruoti, CC BY-ND

The info in a QR code is a sequence of dots in a sq. grid. Every dot represents a one and every clean a zero in binary code, and the patterns encode units of numbers, letters or each, together with URLs. At its smallest this grid is 21 rows by 21 columns, and at its largest it’s 177 rows by 177 columns. Normally, QR codes use black squares on a white background, making the dots straightforward to tell apart. Nonetheless, this isn’t a strict requirement, and QR codes can use any shade or form for the dots and background.

Place markers are squares positioned in a QR code’s top-left, top-right, and bottom-left corners. These markers let a smartphone digital camera or different system orient the QR code when scanning it. QR codes are surrounded by clean area, the quiet zone, to assist the pc decide the place the QR code begins and ends. QR codes can embody an non-obligatory brand within the center.

Like barcodes, QR codes are designed with information redundancy. Even when as a lot as 30% of the QR code is destroyed or troublesome to learn, the information can nonetheless be recovered. In reality, logos are usually not truly a part of the QR code; they cowl up a number of the QR code’s information. Nonetheless, because of the QR code’s redundancy, the information represented by these lacking dots might be recovered by trying on the remaining seen dots.

Are QR codes harmful?

QR codes are usually not inherently harmful. They’re merely a technique to retailer information. Nonetheless, simply as it may be hazardous to click on hyperlinks in emails, visiting URLs saved in QR codes will also be dangerous in a number of methods.

The QR code’s URL can take you to a phishing web site that tries to trick you into coming into your username or password for an additional web site. The URL might take you to a respectable web site and trick that web site into doing one thing dangerous, similar to giving an attacker entry to your account. Whereas such an assault requires a flaw within the web site you’re visiting, such vulnerabilities are frequent on the web. The URL can take you to a malicious web site that tips one other web site you’re logged into on the identical system to take an unauthorized motion.


Learn Extra: WhatsApp is making the chat switch course of a complete lot less complicated with QR codes


A malicious URL might open an software in your system and trigger it to take some motion. Possibly you’ve seen this habits while you clicked a Zoom hyperlink, and the Zoom software opened and robotically joined a gathering. Whereas such habits is ordinarily benign, an attacker might use this to trick some apps into revealing your information.

It’s vital that while you open a hyperlink in a QR code, you make sure that the URL is secure and comes from a trusted supply. Simply because the QR code has a brand you acknowledge doesn’t imply it is best to click on on the URL it accommodates.

There’s additionally a slight likelihood that the app used to scan the QR code might include a vulnerability that enables malicious QR codes to take over your system. This assault would succeed by simply scanning the QR code, even in the event you don’t click on the hyperlink saved in it. To keep away from this menace, it is best to use trusted apps offered by the system producer to scan QR codes and keep away from downloading customized QR code apps.


Leave a Comment