Friday, September 13, 2013

QR codes and its Security

Scanning a QR code
Image Source
      Have you seen those black and white square boxes, with many other tiny boxes that form interesting patterns? Yes, you are thinking right. I am talking about QR codes. I am sure that you have seen QR codes at many places. It looks like a simple bar code, but it can contain a lot more information than a bar code. With the help of QR code reader application, smartphone users can get information hidden in any QR codes by scanning their camera over these codes.
      Today, with no doubt, the use of QR codes is increasing. They are being used to get details of events, products, URL links and much more. Scanning QR codes is becoming a fast way to stay updated about information.
   
Security of QR codes
Image Source
      However, while scanning any QR codes, there are some chances of security issues. Users do not know anything about the information behind QR codes until they scan it. Taking advantage of this situation, many cyber criminals can create fake QR codes and direct user to viruses. For example, you scan a QR code to get details on any particular item. Now, if that QR code contains virus, then unknowingly you might download virus in our phone. It is also possible that you are attempted to click on a URL link which could take you at a website that contains virus. Moreover, there are also chances of downloading virus if you install applications by scanning QR codes. For these reasons, you need to be cautious while scanning any QR codes.
Here are few ways, which I find helpful, to avoid security issues:
  • After scanning a QR code, always check if there is "https" in the URL. If not, then it may not be safe to open it.
  • Never give your any personal information if you are directed to information form after scanning a QR code.
  •  Be aware of scanning QR codes which are randomly placed in public areas. Remember,your best defense is your common sense. Ask yourself if these QR codes are safe to scan or not.
     Overall, QR codes are very helpful to get information quickly. As far as security issues are concerned, I am sure that these issues will be solved as QR codes continue to get popular worldwide.

2 comments:

  1. Hey there Nirav. I like your approach to QR codes here, it's simple and has a great use of pictures to backup your topics. It is true that there can be a lot of risks when it comes to QR codes since you don't actually know where it is leading you. You gave a few great ideas on what to watch out for, but if you have to wait for it to redirect you and check the address, then aren't you already at the point of no return if there was a virus. There are a couple of apps out there that give you previews of what you are about to be directed to, so that you can judge it before hand. Otherwise it's a great post. I just wanted to make sure you aren't scaring people away from using QR codes because they really a useful wave of the future.

    ReplyDelete
  2. Thank you for detailing this VERY real threat Nirav! This is very serious, as there's a lot of talk on these blogs about randomly finding a QR code and scanning it into your phone. These are codes that contain a lot more information then an address, and could potentially redirect you to any type of malware. What bother's me most is some of the reading material I've found regarding QR codes boasts how wonderful it will be to scan a QR code in the wild, when this poses a great risk to your phone and information security. Well written Nirav! I'm glad someone took this side of the topic.

    ReplyDelete