11–20 of 186 posts
If I was really bored and feeling malicious, printing QR codes to point to this "exploit" and then pasting them over QR codes on random advertisements in the streets seems like a terrible idea.
Earlier quoted context omitted.
It wouldn't affect anyone because no one has ever scanned a QR code in an ad
My 6 year old daughter is absolutely fascinated by QR codes. I've been nagged into scanning ones on posters, in magazines, and even one that showed up in the middle of a TV show...
the USSD code to factory data reset a Galaxy S3 is *2767*3855# can be
triggered from browser like this: If I was really bored and feeling malicious, printing QR codes to point to this "exploit" and then pasting them over QR codes on random advertisements in the streets seems like a terrible idea.
It wouldn't affect anyone because no one has ever scanned a QR code in an ad
There's been a lot of back-and-forth over whether it's true or not (check @pof's timeline for such), and a hell of a lot of people sending it on without double-checking. Myself included.
There is clearly a big security bug here (see the video linked), but it's extremely questionable as to whether it can be activated from a web page or whether it requires a bit of social engineering too!
[Edited to add: and just as I write this, @jwheare has cleared the cache and fixed the bug in Exquisite Tweets. Hopefully that should nip this in the bud.]
demo on the issue
Page text was: the USSD code to factory data reset a Galaxy S3 is *2767*3855# can be triggered from browser like this: