Can't a phone decode a QR code natively? I don't even get what it does
replydeleted
replyIf you decode it and open the link, you are potentially leaking data to whoever controls the domain of the URL.
replyIt's a possibility, but it's not how these kernel panic viewer websites are currently implemented. They do the decoding on the clientside, with the data stored in the URL fragment, which is not sent to the server by default.
replyStill good to have alternative implementations, though. The Javascript could be silently stealing the URL fragment on only specific requests, so there's no real way to audit it to be sure.
Link previews even! Just paste it into a group chat and everyone’s message clients will happily issue a GET request.
replyThat's not how it works. The chat app requests the link preview and caches it.
replyThis sounds like the panicky adverts from 20-odd years ago "YOUR COMPUTER IS LEAKING YOUR IP ADDRESS!!11!!""2!!2!!"
replyYou can decode a QR code by hand. It’s usually not worth your while but it’s understandable.
replyThis is about a second step of decoding.
replyQr -> URL -> Panic Log