71–80 of 234 posts
Earlier quoted context omitted.
Yes, let’s give all passwords for wifi networks to the company that notoriously maps all wifi networks they can find. What could possibly go wrong...?
They already have all passwords... They are conveniently backed up on android devices. They have the cleartext. (as do apple btw.)
I painted my wifi password as a QR code on 40x40cm canvas.. Painted as in with a brush and paint, it was a bit of work, but now it's both pragmatic and pretty :)
Earlier quoted context omitted.
But on other versions, it depends on the 3rd party app you use for QR code scanning. From the screenshots, it seems like certain versions of Android have this available directly from the Wi-Fi password screen, without the need for a 3rd party application.
That's what I thought I said... The 3rd party application usually is just your bundled camera app.
Earlier quoted context omitted.
That's what I thought I said... The 3rd party application usually is just your bundled camera app.
Are you deliberately trying to be confusing? A "bundled camera" is the exact opposite of a 3rd party app. 3rd party would mean one must install it from the playstore.
Almost every manufacturer ships their own camera app so it is hard to know what features are present given a certain Android phone.
Earlier quoted context omitted.
Are you not concerned that QR code’s are just completely opaque URLs asking to be clicked? Do you confidently click on URLs in spam emails? Of course not since we all know URLs can point to malicious payloads. So why should we love QR code’s that could just as easily do the same. If I’m a spammer trying to get people to click on my bogus links in my email messages, why wouldn’t I also print those same URLs as QR code…
The QR scanning app that I use displays the URL so I can check if it looks okay, but most of them are abbreviated using services like bit.ly, so that doesn't help much. You'd have to have a UI that lets the user step through several redirections, but that would probably confuse people.
Users cannot check if a domain is "ok" by looking at it. You visit websites to discover what's there. A few years ago it was common knowledge that ".to" is shady and ".com" looks more legit. Now we have more TLDs than I can count. How is someone supposed to check that with visual inspection?
The way it should go: you scan a QR code. It gets interpreted into something useful that doesn't cause harm.
"Hey this QR would cause a 5€ transaction to Jon Doe. OK?" That's something the user can decide upon. payment://jon-doe:5€ doesn't help much.
(Edit: reading your post again, I realize it might be exactly what you have in mind)
Is it only Android 10 that can do this with scanning a qr code, or also v9?
i don't see any built-in way to do it on android 9, but the xzing barcode scanner app works perfectly. https://play.google.com/store/apps/details?id=com.google.zxi...
If, for whatever reason, you wanted to do this with older iOS you had to use a configuration profile[2]. This would be distributed as a PList that you'd link to in the QR code. Which means the device needs to be connected to a network to download it first. A captive portal could help with that, or put it on the internet maybe protected with a geofence so you're not advertising your password to the world.
[1] https://github.com/zxing/zxing/wiki/Barcode-Contents#wi-fi-n...
[2] https://developer.apple.com/business/documentation/Configura...
Very neat! However, IMHO 63 characters is a bit much for the password. ”If you use lower-case, upper-case, and digits, and if you generate it truly randomly, then a 16-character password has 95 bits of entropy. That is more than sufficient.” Source: https://security.stackexchange.com/questions/15653/recommend...
A 63 character password with ten dictionary words is on average much easier to type than a 16 character random ASCII printable string, especially on phone keyboards.
I painted my wifi password as a QR code on 40x40cm canvas.. Painted as in with a brush and paint, it was a bit of work, but now it's both pragmatic and pretty :)