How To: 13 QR Code Scanners That Won't Send You to Malicious Webpages on Your iPhone

How To: 13 QR Code Scanners That Won't Send You to Malicious Webpages on Your iPhone

The default Camera app got a few more tricks up its sleeves when iOS 11 was released, and the best addition by far was the inclusion of a built-in QR code reader since that meant no more third-party apps just for QR code scanning. However, Apple's built-in QR code scanner has a vulnerability that could let hackers direct you to a compromised website without you even noticing it.The vulnerability in question, discovered by security consultant Roman Mueller, happens when the Camera app scans a QR code with a website link. After scanning, it does not properly parse the URL within, which could result in the notification that pops up showing one domain name, while tapping through will take you to a completely different one.Don't Miss: Everything You Need to Disable on Your iPhone Using Roman's example, the URL in the QR code would be embedded as such:https://xxx\@facebook.com:443@infosec.rm-it.de/And after scanning the QR code, the popup in your Camera app would say "Open 'facebook' in Safari" but would actually take you to infosec.rm-it.de instead.While Roman discovered this in iOS 11.2.1, we'd tested it in iOS 11.2.6, the iOS 11.3 beta, and iOS 11.3, and it persisted in all versions. The glitch was reported to Apple on Dec. 23, 2017, but was not officially addressed until April 24, 2018, when iOS 11.3.1 was released to the public. All a hacker would need to do to trick you into giving up your credentials is create a convincing clone of the website you think you're going to, complete with a URL that looks almost exactly the same as the one its masquerading as, then put it out there on the web and phish until he or she has enough of what they want.
Update to iOS 11.3.1 to Fix This IssueApple finally fixed the issue, labeled by Apple as CVE-2018-4187, in the iOS 11.3.1 update on April 24, 2018. So, if you like the idea of using your Camera app to scan QR codes, simply update to iOS 11.3.1 on your iPhone.More Info: iOS 11.3.1 Finally Fixed the QR Code-Scanning Vulnerability

Disable the Camera's Built-in QR Code ScannerWhether or not you only scan QR codes daily or almost never, you'll want to disable the QR code scanner in the Camera app if you're worried about this from a security perspective. Even though Apple fixed the issue, it just goes to show how easy it is for hackers to take advantage of you using stock Apple apps.While the chances of you scanning a malicious QR code are relatively low, you can never be too safe. Either update to iOS 11.3.1 or open up your Settings app, tap on "Camera," then toggle off "Scan QR Codes."

Use a Third-Party QR Code Scanner in the MeantimeIf you find yourself scanning a lot of QR codes and don't want to update to iOS 11.3.1 just yet, you might want to go back to one of your third-party QR code scanners until you're ready to trust Apple again. We personally tested all of the free QR code readers below, and they all failed to load the malicious webpage properly. Some did a web search for the string while others just failed to read the URL at all, treated it like an email link, or just crashed the app. Either way, it was obvious and did not go directly to the malicious website.QR Reader for iPhone QR Scanner and Barcode Reader Free QR Code Reader & Barcode Scanner for iPhone QR Code Reader · QR Code Reader - QR Scanner & QR Code Generator QR Code Scanner iRocks QR Code Reader & Creator. QR Code Reader and Scanner QR_Scanner Barcode Scanner - QR Code Reader & QR Scanner Bakodo - Barcode Scanner and QR Bar Code Reader QR Code Scanner - QR Reader & Barcode Scanner FreeScanner Three different scanners reading the same QR code. Like previously mentioned, the chances that you take a snapshot of a malicious QR code are low, but it's definitely possible, so a third-party app might be good if you're running iOS 11.3 or lower. Otherwise, make sure to install iOS 11.3.1 to be protected.Editor's note: Article updated on April 24, 2018, when Apple released iOS 11.3.1.Don't Miss: The Easy Way to Get Your Chrome Desktop Tabs in Your iPhone's Safari BrowserFollow Gadget Hacks on Facebook, Twitter, YouTube, and Flipboard Follow WonderHowTo on Facebook, Twitter, Pinterest, and Flipboard
Cover photo and screenshots by Justin Meyers/Gadget Hacks



Daily Picture from the Microsoft Store allows you to set your Lock, Login and Wallpaper to the Daily image from Bing.com. Here's how to download and configure it for your Windows 10 PC.
How to set Bing daily image as lock screen in Windows 10?
mytechquest.com/featured/how-to-set-bing-daily-image-as-lock-screen-in-windows-10/
However, if you want to see exactly the same Bing image that appears at Bing.com homepage as your lock screen on daily basis, Windows Spotlight might not be able to help. But fret not, we will guide you on how to automatically set Bing's daily background image as your Windows 10 lock screen.
How to Set Daily Bing Wallpaper as Your Windows Desktop


By default, it's set to something like 1400 KB, which is really tiny. In my case, I had a 3.5 GB ISO file and I wanted to split it up into smaller pieces of 500 MB each. Depending on the size of your file and how you want it split, it could take a while for the program to finish the splitting process.
Live Mail will break up a large attachment into multiple


Cloud Transfer. Transfer files between cloud drives, FTP and WebDav. For instance, you can easily move all files from one Google Drive to another or use "copy and paste" to copy certain files from Dropbox to Google Drive.
New phone? Here's how to transfer data from your old one


How the HTC One M8 Smartphone Stacks Up to the Competition The Duo Camera features HTC's "Ultrapixel" camera sensor paired with a second sensor that allows for all sorts of imaging
SOLVED: How do I get the cameras to work again? - HTC One M8


How To: Get Quick-Access Pandora Controls in the Notification Tray of Your Galaxy Note 3 How To: Control All of Your Music Apps from a Single Widget on Your Samsung Galaxy Note 2 Best Navigation Apps: Google Maps vs. Apple Maps vs. Waze vs. MapQuest
Add Notes to Your iPhone's Notification Center for Easy


News: More People Use Spotify Than Live in the Entire Country of Mexico How To: Get Rid of Annoying YouTube Ads on Your HTC One Spotify 101: How to Disable Volume Normalization Spotify 101: How to Easily Share Music to Friends from Android & iPhone
Snag Hulu & Showtime with Spotify Premium for Just $5/Month


Learn how to hack Google with this amazing video. This video will teach you how to hack Google by using advanced search operators and esoteric search terms to find "hidden" files and mp3s quickly and easily; you'll also learn how to use Google to hack unprotected Internet-controlled devices like webcams and security cameras.
What is the interview process like at Google? What are the


The march towards mainstream adoption of eSIM technology got a massive boost with the arrival of the iPhone XS, XS Max, and XR. We're now one step closer to ditching physical SIM cards altogether. If you're on the fence about this new technology, you may be surprised by the benefits it brings to the
Everything You Need to Know About the iPhone XS Max


Summary Tinder profile tips: If you have an exceptional physique, show it off on your Tinder profile as it's likely to get you more matches; A shirtless picture will do well for your main Tinder profile photo, or in your supporting pictures, but only if you have an exceptional body.
Dudes, Here's How To Make A Tinder Profile That'll Actually


News: 5 Things We Want to See from Nintendo's Upcoming Mario Kart Tour on the iPhone How To: Craving a Mario Kart Gaming Experience on Your iPhone? Give This Soft Launched Game a Try News: These Guys Hacked Together a Raspberry Pi & Car Steering Wheel to Play Mario Kart


Looking to annoy the heck out of someone you dislike? Why not spam their phone a hundred times with a "text bomb" or "SMS bomb"? In this video, learn how to send an SMS bomb by downloading this link.
SMS Bomber Prank Your Friends With Text Bomb App- Android
robusttricks.com/sms-bomber-text-bomb-app/
We have created a Text bomb online script to fun with your friends by sending unlimited messages. Online text bomb app is a program that sends unlimited duplicate messages at your mobile number. The cellular companies don't provide any sms bomb so you can use an online script or android application to send unlimited messages.
How To SMS Bomb Someones Phone *NO DOWNLOAD REQUIRED* - YouTube


How To: Change Your Primary Shipping & Billing Addresses on PayPal to Avoid Purchasing Mishaps How To: Share & Scan PayPal QR Codes for Faster Transactions When Receiving or Sending Money How To: Change Online, In-Store, Google Pay, Samsung Pay & PayPal Cash Card Payment Preferences for PayPal
Log in to your PayPal account


The 100 Best iPhone Apps Need new iPhone apps? Maybe you're new to the iPhone, or perhaps you're a long-time iPhone owner who has too many apps and needs to find replacements that
4 Awesome New iOS 11 Features You Didn't Know About - Cydia Geeks


If you're a Firefox user, you can install a similar add-on that will block unwanted results from Google. Unfortunately, there doesn't seem to be any good solutions for IE and Safari, so if you use those browsers, you're kind of out of luck.
How to Block Unwanted Websites from Google Search Result


System 7 desktop (which came out about 8 years before OS 9 did). Image via Stocksy. But with just a few tweaks, you can make your powerful Mac OS X Yosemite look more like the "System Software," "System," and "Mac OS 9" classics that you knew and loved from the '80s and '90s—without having to lose any of the functionality.
Give Yosemite a Classic, Pre-OS X Look By Tweaking These Settings

0 comments:

Post a Comment