QR Codeのセキュリティとプライバシー

セキュリティ脅威（QRフィッシング、ステッカー攻撃）、プライバシーへの配慮、暗号署名、QRコードを安全に運用・スキャンするためのベストプラクティス。

QRishing：QR Codeフィッシングの仕組み

How attackers use QR codes for phishing: fake parking meters, restaurant stickers, email QR codes, and credential theft.

Physical QR code tampering: sticker overlay attacks, tamper-evident materials, and verification strategies.

How to scan QR codes safely: URL preview checking, suspicious code indicators, and what to do if you scan a …

How digital signatures verify QR code authenticity: COSE, CBOR, public key infrastructure, and offline verification.

DENSO WAVE's Secure QR Code: dual public/private data, encryption architecture, authorised reader requirements, and use cases.

Data exposed when scanning QR codes: IP address, device info, location, and time. Privacy implications of dynamic QR tracking.

TOTP authentication QR codes: otpauth:// URI format, secret key generation, authenticator app compatibility, and security best practices.

Enterprise QR code security: access control, audit logging, domain whitelisting, certificate pinning, and compliance requirements.

Technical analysis of the EU DCC: CBOR encoding, COSE signing, offline verification, and lessons for future credential systems.

How QR codes can deliver malware: drive-by downloads, app store redirects, and scanner vulnerabilities. Defence strategies.

Using QR codes to combat product counterfeiting: serialisation, cloud verification, blockchain integration, and tamper detection.

Comprehensive security checklist for QR code deployments: generation, distribution, scanning, data handling, and incident response.

GDPR compliance for QR code systems: data collection notices, consent mechanisms, data retention, and user rights.

Developer guide: input validation, output sanitisation, secret handling, HTTPS enforcement, and preventing injection attacks.

Responding to QR code security incidents: compromised dynamic URLs, sticker attacks in the wild, and public communication.