Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Scan QR codes to check in guests registered via Google Forms

workspace.google.com

Post reply on HN
Print view View original

31–40 of 68 posts

Re: Show HN: Scan QR codes to check in guests registered via Google Forms

#31

Post by hnlmorg »

dweekly wrote: post #28
EduardoBautista wrote: post #20

Earlier quoted context omitted.

> Unfortunately, you don't know where the QR code leads you before you scan it and then it is already too late. iOS shows the domain if it is a URL and you have to tap it. It's no different from tapping on a link on a website, which I would say is more insecure since you don't even get the domain info before tapping.

This is true, but also mostly moot, sadly, due to the pervasive use of URL shorteners for QR code services. So instead of seeing a nice hover-over of "SuperDeliciousItalian.com/menu", as often as not it will be "qr.to/f2CrS" or somesuch. So exposing the URL encoded in the QR code doesn't provide all the information you need to assess its validity or safety.

That’s a risk with any and all hyperlinks. There’s nothing unique to QR codes with that.

Re: Show HN: Scan QR codes to check in guests registered via Google Forms

#32

Post by ImportOllie »

onetimeuse92304 wrote: post #16

The issue is, at least for me, I consider all QR codes as unsafe. Unfortunately, you don't know where the QR code leads you before you scan it and then it is already too late. So you can't do the equivalent of inspecting the link before you click it. Recently we were in a restaurant which required scanning a QR code to get served (for some reason asian restaurants like doing this). The codes were labels attached to t…

If you consider all qr codes unsafe then use a tool to check them don't lecture the waitress on man in the middle attacks...

Re: Show HN: Scan QR codes to check in guests registered via Google Forms

#33

Post by hnlmorg »

onetimeuse92304 wrote: post #16

The issue is, at least for me, I consider all QR codes as unsafe. Unfortunately, you don't know where the QR code leads you before you scan it and then it is already too late. So you can't do the equivalent of inspecting the link before you click it. Recently we were in a restaurant which required scanning a QR code to get served (for some reason asian restaurants like doing this). The codes were labels attached to t…

Not only is this the wrong place to vent your annoyances with QR codes (it’s tangential to the Show HN) but you honestly come across as an unpleasant customer if that’s how you interact with your restaurant servers (you could have just said “my camera is broken, do You have an address I can type instead”).

Re: Show HN: Scan QR codes to check in guests registered via Google Forms

#34

Post by fiddlerwoaroof »

EduardoBautista wrote: post #22
simon_acca wrote: post #21

Earlier quoted context omitted.

Remote code execution vulns are still routinely discovered, for example: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4199...

I've never heard of this domain before, so I shouldn't click on it because vulnerabilities in the browser are still routinely discovered. Sorry for the sarcasm, but if you trust clicking on links in a browser, QR codes should be fine as well.

Yeah, if your threat model involves not trusting links, you should be disabling JavaScript and CSS by default and probably not browsing the web in the first place. Libpng and other libraries frequently have fairly critical bugs that are a bigger concern than MitM attacks.

Re: Show HN: Scan QR codes to check in guests registered via Google Forms

#36

Post by samstave »

komlan wrote: post #23
samstave wrote: post #14

This is WONDERFUL. EDIT: nto "But for use for" -- I meant "But in ADDITION" -- But - for tool/item/inventory management in a garage. Get a cheap label printer [0], create a form of your tools/inventory with a matched set (code on tool, code on location of tool home) - Tool home has a QR code that leads to a tab in the sheet with all the tools that live in that location, container. Put airtags on the high-value tools,…

Wow, happy to find another QR code enthusiast here! They simplify a lot of things, indeed. Great use case! I did a tool inventory management use case once, with the underlying platform [1]. It starts with generating QR codes for sticker papers [2], from the app. Those never expire and are all different (v4 UUID). You can then assign a QR to any new item, then scan it for registration in the app, specifying room, draw…

The QR code, use, whatever isnt the problem to solve to. Its resolution.

This has always been a psychological issue with Humans and Signage.

Signage is a HUGE FUCKING DEAL (If you have ever had to some up with a signage policy for a Hospital with thousands of addressible spaces, where a certain population of 'stake holders' (nurses) are involved - getting naming/numbering correct in a large space where ALSO robots need to understand the convensions... that is south fast.

I have a bunch of solutions on this matter - if you really want to deep into coding... (I orignially designed a coding schema for Lucas Letterman which was shot down by the head of ILM engineering as "the worst Idea He had ever seen" to later incorporate that into his networking duties as head of networking at goog)

Anyway -- I am totally pro QR - but with GPTs, I feel like we are finally at the cusp to leverage them in a meaningful way.

(and for the downvoters - the schema I came up with for ILM was proposed in 2003, He didnt take the reigns at G until ~2008) - If GPT had been involved in some of my design projects- that would have been game changing, thus I propose that the most disruptable industy right now (aside from day trading) is construction.

Tons of models - but a model doesnt reflect real-world encounters/interactions/success...

(Honestly I dont know what to share, vs what to build.

Re: Show HN: Scan QR codes to check in guests registered via Google Forms

#38

Post by ho_schi »

onetimeuse92304 wrote: post #16

The issue is, at least for me, I consider all QR codes as unsafe. Unfortunately, you don't know where the QR code leads you before you scan it and then it is already too late. So you can't do the equivalent of inspecting the link before you click it. Recently we were in a restaurant which required scanning a QR code to get served (for some reason asian restaurants like doing this). The codes were labels attached to t…

I see some valid points.

    1. A restaurant should   provide a menu printed on paper or a panel. Sometimes pictures are used.
    2. Verbal communication serves that purpose also well. And friendly manner.
    3. Some cameras don’t  display the read input properly. Input is always in error until it is validated. Here is user validation required.
    4. You don’t need to invent excuses like “my camera is broken, I forgot my phone, Bad eyesight…”.
    5. You don’t have to carry around a camera, a cellular access terminal and a computer (consider this as description of a smartphone) with you.
    6. The website can load arbitrary data with JavaScript and mine Bitcoin in a sandbox. It is not safe because it will drain the battery.
I like QR-Codes. They are analog and digital at same time, printed on paper and machine-readable and nobody ruined it with incompatibility. If possible the payload is printed as ASCII aside the codes.

PS: Similar. To provide a common base, prevent exclusion of unwanted customers and prevent against malicious data processing some jurisdictions require cash payment options.

Re: Show HN: Scan QR codes to check in guests registered via Google Forms

#39

Post by dylan604 »

Hopefully, the Googster doesn't pull the rug out from under your feet and decide to deprecate whatever product(s) you are using of theirs. It is always something to keep in mind with using anything from G as a central part of your offerings.

Re: Show HN: Scan QR codes to check in guests registered via Google Forms

#40

Post by dylan604 »

komlan wrote: post #7
davidjfelix wrote: post #5

Earlier quoted context omitted.

4th link to blog has a link to homepage. Homepage lists country in the footer.

Ah indeed ;)

that's pretty good that someone went past your original link and looked at more of what you were doing. looks like the effort pays off!
Post reply on HN