Collaborate Disseminate
In reference to OTP 2FA Auth apps:
I’m trying to understand the concept of the QRcode being more secure in-transit than SMS?
Is it because the QRcode itself is not of any value to fraudulent entities since the Auth App doin… Continue reading Need help on 2FA QRcode security
I have a need to provide a means of validating a certificate that is e-delivered.
My thought is to use an SQRC to enable that verification by linking to a secure site that contains the original certificate and display that t… Continue reading SQRC use to verify e-delivered certificate
if the PingID service is unreachable the user will receive a QR code on an offline authentication screen. in case of Offline MFA when the network is unavailable due to a network outage (i.e. in an airplane or when network rec… Continue reading What are the risks when using QR to authenticate when using offline MFA in cases network is unavailable due to a network outage
I’m implementing a Whatsapp Web-like feature for my Android application. User should be able to open an HTTPS web application that displays a QR code (a GUID generated by the server) and scan it using her device sending it ba… Continue reading Using a GUID as an authentication token (and how it could be improved)
We never really thought about it before, but a traditional barcode or QR code is pretty two dimensional. A 3D barcode sounds like marketing hype but the JAB (Just Another Barcode) system adds a third dimension in the form of color.
Traditional barcodes assume you have a pretty crude sensor, but a color camera now days is no big deal, so why not take advantage? The JAB system specifies two types of symbols: a master symbol and a slave symbol. A master symbol has four finder patterns at the corner. Slave symbols dock to a master or another docked slave. …read more
We should all be familiar with QR codes, those blocky printed patterns containing encoded text, URLs, or other data. A few years ago they were subject to their own cloud of hype, but now they have settled down in their niche of providing a handy route for a smartphone owner to reach a website without having to type an address.
Have you ever wondered how they work? There are plenty of dry technical guides out there, but if they’re not your thing you might find [Nayuki]’s step-by-step guide to be of interest. It explains the encoding and error checking bit …read more
I need to implement 2FA in my web app.
I’m doing this the standard way: the newly created user’s seed is retrieved from the server(I use speakeasy) and the QR code is generated.
The thing is, it’s possible to steal this seed … Continue reading Generating QR code from seed in browser – possible security issue?
I have created a customer loyalty and reward app that works in a very simple manner. We supply cafes etc. with a printed QR code which the customers scan on each visit, using the app. Upon completing X visits, the customer is… Continue reading Verifying customer check in
Assume we want to protect a document against manipulating and forging. So, we encode some sensitive information of the document and store it in a QR-code inserted in the document.
Can we be sure that an attacker is not able to change and … Continue reading How resistant are barcodes and QR-codes against attempts to change stored data?
I plan on doing a “ticketing” system, where a user would buy a “tour ticket” online. The part that I’m puzzled about is: After they buy, what mechanism to use to verify the ticket?
I’ve been looking at how platforms like Eve… Continue reading Using a simple 5-character pass for event vs. QR/barcode