This. Just, this.

[cadbury_moose@wandering.shop]

@agathos @neurovagrant @trainguyrom @anotherdaniel @cstross @unknownbinaries

Facial recognition -> goatse.cx/hello.jpg

(Actually, I must try that QR code on Morrisons self-service till....)

[enema_cowboy@dotnet.social]

@cstross
Or the Lemon Party URI.

[penpencilbrush@mstdn.social]

@cstross Or sunglasses with the QR code.

[dandylover1@someplace.social]

@cstross That's great. But with my luck, I will be using Seeing AI to read something printed near me or to describe the scenery and I'll accidentally scan such a shirt!

[howtophil@mastodon.social]

@cstross If this existed, it would be used by bastard cops

[kerravonsen@mastodon.au]

@duckyd @cstross Yes, exactly! Why would I want to take my browser to a URL which is not only unknown, but unknowable? I avoid URL shorteners likewise.
Not knowing where the URL goes is like taking a blind leap off a cliff.

[nerb@techhub.social]

@cstross

There used to be a guy that had a big sticker on the back of his Van .

Said something about tired of the same old sour politicians. Join the lemon party. With a QR code and underneath the url for the lemon party site. I hope he caught a few.

[ronniesaurushex@disabled.social]

@shift_reset

That was where my mind went

[dancingtreefrog@mastodon.social]

@kerravonsen @duckyd @cstross Especially what I call a "naked" link - just a link in a toot, no page title, nothing said about what it's about, or why I might want to visit it. That always makes a link sound like a phishing/malicious link!

[farbenstau@infosec.exchange]

@cstross I would pick anti-counterfeit markers like the EURion constellation (you'll need more than that, EURion alone doesn't trigger the alert) instead …

[farbenstau@infosec.exchange]

@nblr @mbirth @cstross As far as I know, a single anti-counterfeit pattern won't trigger the alert. Same goes for repetitions of said pattern. You need at least one *different* pattern in addition to the EURion(s) to trigger it.

[phwolfe@scicomm.xyz]

@cstross I would wear this

[staringatclouds@mstdn.social]

@cstross I want that shirt too

But only if it works on those G**gle R*y-B*ns as well

[endicottauthor@mastodon.social]

@cstross Make sure the GOP takes video of your shirt.

[wildrose@mastodon.gamedev.place]

@cstross Reminds me of a time someone put sql injection text next to their license plate of their car to delete the entire stop light database, and it worked.

[zakalwe@plasmatrap.com]

@cstross@wandering.shop Now I'm envisioning a large-scale cyberattack that uses a malicious QR code to distribute SCORPION STARE firmware.

[darthastrius@mastodon.social]

*accidentally takes a selfie*

[smuggler9000@mastodon.social]

@cstross forbidden ctf challenge

[wildrose@mastodon.gamedev.place]

@FrozenPeach @cstross

Oh wow I misremembered this story. I guess it was just a meme and no one actually knows if this works.

https://hackaday.com/2014/04/04/sql-injection-fools-speed-traps-and-clears-your-record/

[adamacote@mastodon.social]

@cstross
Good idea …🧐🧐🧐