this post was submitted on 06 Jan 2025
562 points (98.0% liked)

memes

10932 readers
3191 users here now

Community rules

1. Be civilNo trolling, bigotry or other insulting / annoying behaviour

2. No politicsThis is non-politics community. For political memes please go to [email protected]

3. No recent repostsCheck for reposts when posting a meme, you can only repost after 1 month

4. No botsNo bots without the express approval of the mods or the admins

5. No Spam/AdsNo advertisements or spam. This is an instance rule and the only way to live.

Sister communities

founded 2 years ago
MODERATORS
 
all 41 comments
sorted by: hot top controversial new old
[–] [email protected] 53 points 1 week ago (1 children)

I believe this should work. At least some German emergency vehicles now come with filming protection.

The linked web page reads, “Attention! Rubbernecking kills!”

[–] [email protected] 15 points 1 week ago (1 children)

I'm not sure a pseudo QR code on the truck gives off the right message

I actually would really like to know, what it says and would make myself punishable by that
But I think, it looks so inviting to scan it...

[–] [email protected] 3 points 1 week ago (1 children)

The way I see it there are two options:

  1. You’re in a car and driving past that vehicle. If you don’t have your phone ready already, you won’t get it out in time and won’t be able to scan the code. You didn’t read the code and didn’t need to (because you weren’t rubbernecking).

  2. You’re in a car with your phone already out (because you’re expecting a crash) or you’re a pedestrian who takes out their phone to film the crash site. You do read the code and you should see it, because you’re rubbernecking.

[–] [email protected] 1 points 1 week ago* (last edited 1 week ago)

I was more thinking about not driving the car myself, but being driven as a passenger

Although it's obviously a safety issue, when people turn away their focus to checkout a crash - no discussion about that - I was more thinking about the ethical issue of gaffing at injured people

[–] [email protected] 37 points 1 week ago (2 children)

I can't think of a single phone that automatically opens links that are in QR codes. The worst it would do is just show a link to malware, wish you would have to manually click in order to download the malware.

[–] [email protected] 8 points 1 week ago

AIs need to read it, so it could be a way to inject prompts on AI models.

[–] [email protected] 2 points 1 week ago (1 children)

This was a few years ago (so I hope there have been patches since then) but I watched a video which was trying to make an entire game within a QR code: they don't have to just be links, they can be binaries that some devices will immediately run without question!

[–] themoonisacheese 11 points 1 week ago (1 children)

Quite the opposite. That video by mattkc (iirc) repeatedly and unequivocally says that to make this work, he made his pc save the binary and explicitly run it using a python script, because doing it natively would be fucking insane

[–] [email protected] 2 points 1 week ago (1 children)

You're right, I must have been thinking of something else. Happily I can't find any chatter about actual malware in QR codes (it's all redirecting to malicious websites), though obviously there's always the possibility of a new exploit being discovered.

[–] themoonisacheese 4 points 1 week ago (1 children)

The 3DS used to be hacked using a QR code that was scanned using the game cubic ninja (it used QR codes as a medium for sharing levels). The interpreter had a basic memory safety bug, so you could trigger a ROP chain using a malformed QR code to get ACE. This was of course voluntary by the user (and cubic ninja was hard to get because it was not a commercial success) but that qualifies, I guess.

Then they found out the 3ds browser uses a WebKit version from 2003 and nowadays you just go to a website lol

[–] [email protected] 1 points 1 week ago

ACE on a WiiU is just as easy, at least with the Wii you had to use a game!

[–] [email protected] 35 points 1 week ago (1 children)

All fun and games until you open your camera app and it's in selfie mode, instantly catching the QR code and bricks your own phone.

[–] [email protected] 19 points 1 week ago (1 children)

That makes no sense, cause why would you intentionally click on the link you inadvertently scanned to brick your own phone?

[–] [email protected] 21 points 1 week ago (1 children)

Because people are idiots and like to press buttons.

Source: me

[–] [email protected] 2 points 1 week ago (1 children)
[–] [email protected] 2 points 1 week ago (2 children)

ICBM launch control operator

[–] [email protected] 2 points 1 week ago* (last edited 1 week ago)

Professional Mornington Crescent player

Explanation for people not familiar with the Radio 4 game show:

The game consists of each panellist in turn announcing a landmark or street, most often a London tube station. The ostensible aim is to be the first to announce "Mornington Crescent". Interspersed with the turns is humorous discussion amongst the panellists and host regarding the rules and legality of each move, as well as the strategy the panellists are using. The actual aim of the game is to entertain the other participants and listeners with amusing discussion of the fictional rules and strategies.

Yes, you can play the obvious trump card on turn 1 and win but where's the fun in that?

[–] [email protected] 21 points 1 week ago (2 children)

Finally, we can build memetic hazards in real life

[–] [email protected] 8 points 1 week ago (1 children)

Wait until somebody actually makes brain implants!

But on the other hand, people have actively used memetic hazards for millennia. Want to star a nice, cozy witch hunt?

[–] [email protected] 4 points 1 week ago* (last edited 1 week ago)

Ah, the Basilisk Hack.

(Nothing to do with Roko, btw.)

[–] [email protected] 2 points 1 week ago

Getting closer to Snow Crash all the time.

[–] [email protected] 18 points 1 week ago

Modern Day Medusa sounds like a cool band name

[–] [email protected] 17 points 1 week ago

I want a shirt that has a QR code that Rick rolls people.

[–] [email protected] 10 points 1 week ago

Strongly reminds me of Old MacDonald Had a Barcode, E-I-E-I CAR. Basically put a standard anti-virus test string into various sorts of barcode and see what breaks.

[–] [email protected] 5 points 1 week ago (2 children)

Is this theoretically possible?

[–] [email protected] 7 points 1 week ago (1 children)

Well, yes. You could bury code or malicious data in an image, QR or otherwise, and leverage an exploit that during processing of the visual data within the camera subsystem or inter subsystem calls could hypothetically trigger an execution path that results in a different outcome than expected, all without user permission. There is a lot of sw and hw sec controls in play at internal system boundaries and it would be very very difficult to gain privilege enough to fist fuck a phone but not impossible.

With the outstanding level of FR, NFR and Sec testing that companies perform these days it is not likely to happen. It's not like they push out minimal viable products or something, right? /S

[–] [email protected] 1 points 1 week ago

Well that's one layer, but when you decode a url, you're probably going to get a url, and then it's going to go to that url

So now you just made them to to a website. What's there? Whatever you want. Maybe you ask them for Facebook/Google/GitHub or whatever authorization to see their name and email, which a lot of people would do. Then redirect them to a page saying "now I know who you are, delete the photo, "

Or you could send them a payload based on fingerprinting their request, you could give them a fake page to steal their password, etc

[–] [email protected] 1 points 1 week ago (1 children)
[–] [email protected] 1 points 1 week ago

So what? That only prevents people from editing the photo in certain programs like Adobe Photoshop.

[–] [email protected] 3 points 1 week ago

Wasn’t this almost the plot line of Snowcrash?

[–] [email protected] 3 points 1 week ago (4 children)

Not all Phones habe qr code detection in the camera mode

[–] [email protected] 3 points 1 week ago

Most do. It's the only reason they finally somewhat caught on after a rough start when users had to download an app in order to read the code.

[–] [email protected] 3 points 1 week ago

Every smartphone I’ve had does but every one of them has also asked if I want to follow the link rather than just doing it.

[–] [email protected] 1 points 1 week ago

And those that do don't download and run code willy-nilly.

[–] [email protected] 3 points 1 week ago* (last edited 1 week ago)

I'd be flattered if someone actually wanted to film me with their phone. :(

[–] [email protected] -2 points 1 week ago

So... Everything is a meme now? Screenshots of random text posts are memes?