I have a picture frame in my house with a QR code for the wifi, and also an NFC badge so you can just lift your phone to it to connect.
NFC stickers cost approximately nothing, and you can program them using an app on your phone.
Encoding your WiFi access point password into a QR code
81–90 of 234 posts
Re: Encoding your WiFi access point password into a QR code
#82Most ISP put this kind of QR code on the provided "modem" in France with the default Wifi password of the device. I love QR code. I think it should be everywhere. All legal documents and forms should have one. All supermarket bills should have one. It's a fantastic way to transition from paper to bits. Unfortunately most users have no idea what it is. They don't know what a URL is, so a QR code is out of the question…
They can’t be used to encode very much data though. They wouldn’t be suitable for storing documents, but could be used to store the location of a document. I was trying to be clever once and thought I could encode X.509 certificates in QR codes. Even that much data was pushing the hard limits of what they can store, and became very hard to scan (I quickly realised this wasn’t actually very clever).
I wish we could encode PGP public keys with them, but it's still too much data.
That would be a neat way of exchanging a key.
Re: Encoding your WiFi access point password into a QR code
#83Most ISP put this kind of QR code on the provided "modem" in France with the default Wifi password of the device. I love QR code. I think it should be everywhere. All legal documents and forms should have one. All supermarket bills should have one. It's a fantastic way to transition from paper to bits. Unfortunately most users have no idea what it is. They don't know what a URL is, so a QR code is out of the question…
Have you been to China? QR—everywhere.
Re: Encoding your WiFi access point password into a QR code
#84Is it only Android 10 that can do this with scanning a qr code, or also v9?
[deleted]
Re: Encoding your WiFi access point password into a QR code
#85Earlier quoted context omitted.
Are you not concerned that QR code’s are just completely opaque URLs asking to be clicked? Do you confidently click on URLs in spam emails? Of course not since we all know URLs can point to malicious payloads. So why should we love QR code’s that could just as easily do the same. If I’m a spammer trying to get people to click on my bogus links in my email messages, why wouldn’t I also print those same URLs as QR code…
No more than regular url written in a paper. People write them blindly anyway, they don't know what it means nor how to read it. But QR code are not just for URL, they can contain up to 7k, which is a lot for text and numbers. And you can have several of them, use compression, etc.
Because urls have letters & words in english that I can read and determine if the website is authentic or not as opposed to QR code that no human can read?
Have you never come across phishing scams that looked eerily authentic only to be clued in by the fake url? I can read the URL before going to the website, and unless QR codes have a step where you have to manually confirm going to the url provided by the code (most don't) then that's a security risk
Re: Encoding your WiFi access point password into a QR code
#86Earlier quoted context omitted.
Before WPA3 a network with no password offers less security than a network for which everybody knows the password. In WPA3 finally the no password ("guest") case has randomly chosen keys using RFC 8110 instead of being unencrypted, so it's equivalent security to everybody knowing the password. I agree no password is the best outcome, and WPA3 makes that finally no more dangerous than it needs to be.
I mean turn if off once guests are gone, yes it's not safe as everything on the network can be sniffed by your nosy neighbors, you can quanrentine this guest network from your ethernet to make it less revealing. It's meant to be a one-off thing to avoid hassle. Good to know they have that in WPA3.
In WPA3 the nosy neighbours can't sniff anything. If there is no password or they know it they can do an active MITM to get between users and your Access Point because it now uses a PAKE, but active attacks can be detected and would be a bit more than "nosy neighbours". If you use anything fancier than a password (including technologies like EduRoam or GovRoam, Active Directory login, whatever) any adversary has to attack that instead.
Re: Encoding your WiFi access point password into a QR code
#87Is it only Android 10 that can do this with scanning a qr code, or also v9?
I think they added the QR code Wifi URI in Android 6, it's been a while. It's mostly an issue with apps supporting it, and to be honest I can't believe it's still not a standard feature of the camera apps on all Android devices, like the iPhone does.
Re: Encoding your WiFi access point password into a QR code
#88Earlier quoted context omitted.
They can’t be used to encode very much data though. They wouldn’t be suitable for storing documents, but could be used to store the location of a document. I was trying to be clever once and thought I could encode X.509 certificates in QR codes. Even that much data was pushing the hard limits of what they can store, and became very hard to scan (I quickly realised this wasn’t actually very clever).
I wish we could encode PGP public keys with them, but it's still too much data. That would be a neat way of exchanging a key.
You can definitely encode ed25519 keys to a QR code.
Re: Encoding your WiFi access point password into a QR code
#89If you choose to put a WiFi password up on a sign as a QR code, do not post it in view of a window. Passers-by should not be able to connect to your network from outside your home or office. This advice also applies to plain text passwords posted on signs.
Re: Encoding your WiFi access point password into a QR code
#90Earlier quoted context omitted.
I mean, it's not that hard to believe...
I think it is a joke-attempt at getting him to reveal his wifi password :)
I have hereby been whooshed, though in my defense I have a guest-only, throttled and isolated wifi network so the potential for misuse didn't occur to me.