QR Code Forum Avatars?

[dkbit98]

I was wondering would you use your phone to scan QR code that is added as Avatar image in Bitcointalk forum profile?
Avatar could be fully QR code or only partially, but this could be used for directing to different websites used for advertisement.
This is not the same as clickable signature, but it's very similar, and it would be even more effective with responsive forum design.

First examples with my profile and QR code directing to one of my topics:



Second example with QR directing to Chipmixer website, and personal text could be added bellow Avatar image:




QR code image in post can contain both clickable link and scanning.
I know this could open a whole new can of worms, but I think we should be ready for this, since QR code adoption is wide spreading everywhere.
Would it be against any forum rules if people started to add QR codes in their posts, and should we report QR codes that are directing to suspicious or scam website?
Something like this:



Maybe someone knows if there is some script or extension that can automatically read qr codes and show links with mouse hover?

[1713973099]

1713973099

[LoyceMobile]

I would not scan them (I don't like worms). By not scanning them, I can't report the content either.

It doesn't make sense to use QR codes on a website: if I see it on my screen, I can just as well click a link.

[HeRetiK]

Apart from things like 2FA codes or private keys, I would only scan a QR code on a website if I'm on desktop and would like to open a link specifically on mobile for some reason (e.g. for downloading an App).

[Welsh]

I wouldn't personally scan QR codes, for the same reasons as Loyce. As for the forum rules, there's no real specific mentjon of QR codes, but they'd likely conflict with the advertisement rule. So, unless you've got a rather substantial thread/post then they'd probably conflict.

It doesn't make sense to use QR codes on a website: if I see it on my screen, I can just as well click a link.

You're right. However, there's a sense of intrigue with QR codes, and part of their danger. You don't necessarily by looking at it know where it goes, and since people are intrigued by the sense of mystery, will be more inclined to scan it. It's why I think QR codes are effective advertisements, and you often see random QR codes stuck on things, without any explanation.

Now, you're absolutely right that any sensible person shouldn't really be scanning these willy nilly. I've got an application on my phone from F-Droid which allows you to scan QR codes, and then it presents the link without taking you there.

[Upgrade00]

I was wondering would you use your phone to scan QR code that is added as Avatar image in Bitcointalk forum profile?

Depends largely on the member wearing the avatar. If it's a reputable one, then I could be curious enough to want to know where it leads to.
It is recommended that they also include the URL in their personal text or a short description of the website.

Would it be against any forum rules if people started to add QR codes in their posts, and should we report QR codes that are directing to suspicious or scam website?

If it's a reply made in someone else's thread, it's against forum rules and if you suspect it to be promoting suspicious links, it should be reported.

[Findingnemo]

Its an innovative idea though but I doubt it will be effective as a signature and avatar cause every QR code will look the same and we don't know where it leads unless we scan them from an advertiser point of view they like to show their brand so people will become familiarize with it and it is working for centuries.

[jackg]

I wouldn't like hyperlinked avatars. Most modern phones support extracting qr code data from photos though (including Screenshots).

A clickable Avatar in the profile screen might be useful but then you could just use the url/website field already there

[RickDeckard]

It doesn't make sense to use QR codes on a website: if I see it on my screen, I can just as well click a link.

You're right. However, there's a sense of intrigue with QR codes, and part of their danger. You don't necessarily by looking at it know where it goes, and since people are intrigued by the sense of mystery, will be more inclined to scan it. It's why I think QR codes are effective advertisements, and you often see random QR codes stuck on things, without any explanation.

In my case the sense of mystery is the thing that would block me from even scanning the QR code. I also use FOSS applications that show me where the QR code leads whenever I'm in the outside, but having to scan a QR code that's being presented to me in my monitor just doesn't entice me in any way (that I can see at the moment). Whenever I see QR codes I instantly remind me of these episodes[1][2][3] that were rampant some time ago and would pose more as another potential of scam to unaware and uninformed users ...
[1]https://www.thestreet.com/technology/hackers-use-qr-codes-to-steal-your-money
[2]https://www.pewtrusts.org/en/research-and-analysis/blogs/stateline/2022/02/16/think-twice-before-scanning-that-qr-code
[3]https://www.theverge.com/2022/1/12/22879728/phishing-scam-parking-meter-qr-code-austin-san-antonio

[Welsh]

I also use FOSS applications that show me where the QR code leads whenever I'm in the outside, but having to scan a QR code that's being presented to me in my monitor just doesn't entice me in any way (that I can see at the moment). Whenever I see QR codes I instantly remind me of these episodes[1][2][3] that were rampant some time ago and would pose more as another potential of scam to unaware and uninformed users ...

Right, however do realise we're probably outliers in that line of thinking. Most users would be intrigued, and that's why they would work for advertising, and well do work for advertising. I hate the things, I hate that when you go out to a restaurant they have these things for the menus, so you have to scan them. Hence, why I have the FOSS QR code scanner on my phone, because if you think about it anyone can slap a sticker down on a table, and that's a potential security risk.

Same goes with the forum, I wouldn't be keen on it. As avatars though, I guess there's nothing really stopping users from doing it, only when they start putting it in posts does it become a problem. Obviously, if the users are using QR code avatars to redirect to malicious sites etc, that would be bannable. However, nothing is really stopping them from using them to advertise legitimate services, just like any other avatar then.

[NeuroticFish]

I know this could open a whole new can of worms, but I think we should be ready for this, since QR code adoption is wide spreading everywhere.

QR is indeed getting traction around the world, but in order to get somebody interested into scanning a QR code, ... you will most probably need something more / something that attracts the eyes, else people will ignore it.
Even more, on a privacy conscious forum like this, where people are careful about anything that could steal their coins.. it's even more difficult.
And I will add that if we go on this path, too many people will have too similar avatars and the not-so-technical people may not even notice there are differences and the information one avatar holds is probably different from the information of the next avatar.

So as I see it now, the idea has quite some obstacles...

[LTU_btc]

Interesting idea. Maybe I'm wrong, but I think I remember some users having QR codes on their avatars in past. Question how effective and actively used it would be. After all, most users who aren't in signature campaigns don't free place in their avatar area. Also, I doubt that many just would scan that code. Probably some text under avatar in personal text area is needed to attract user to scan it. Something like ''Scan QR ^{insert your phrase here}''. And as Loyce said, QR's don't work on websites that well. It fits better for TV screens, street billboards, paper and etc.

[Hispo]

I would probably only scan them if they were used by reputable members of the forum or if the QR was a Bitcoin address (previously staked) and I needed to send some Bitcoin to the owner for whatever reason.

I get the worries of some people around here about the viruses and the threats that can come by scanning QR codes, but to be fair some QR scanners do not immediately redirect the user to the webpage or service scanned with the phone. In my case, my QR scanner first shows me the URL/text I got and then allows me to proceed if I agree.

I have myself considered to use my staked BTC address as a QR avatar in the past, emulating Foxpup.

[PrimeNumber7]

A QR code is effectively a string of text depicted as an image. In theory, a QR code can potentially cause whatever device is being used to scan the code to run arbitrary code on said device, however, QR codes are limited to about 7000 characters of text. If someone could cause whatever program being used to scan the QR code to escape any safeguards, access some website, and run arbitrary code on said website, then any code could potentially be executed via a malicious QR code.

[LoyceV]

I've got an application on my phone from F-Droid which allows you to scan QR codes, and then it presents the link without taking you there.

I just tried, and before I even take the picture my default (Samsung) camera app shows this:

I'm not disappointed

[dkbit98]

It doesn't make sense to use QR codes on a website: if I see it on my screen, I can just as well click a link.

It makes sense if they are asking for some payment or donation, but I wouldn't use them for all content redirection.

Apart from things like 2FA codes or private keys, I would only scan a QR code on a website if I'm on desktop and would like to open a link specifically on mobile for some reason (e.g. for downloading an App).

So you never scan QR codes in the real world, they are not literally appearing everywhere?
You can't bring your desktop cpmpoter all the time, and I honestly don't like direction we are going with QR codes and I don't want to see them used in every aspect of our lives.

Now, you're absolutely right that any sensible person shouldn't really be scanning these willy nilly. I've got an application on my phone from F-Droid which allows you to scan QR codes, and then it presents the link without taking you there.

I don't have to download and use any app with phone using GrapheneOS, it never opens any page directly, but it shows link after I scan QR code.

A clickable Avatar in the profile screen might be useful but then you could just use the url/website field already there

Avatars are obviously not clickable, and I think there is limitation of characters in personal text... and yes I know links can be shorten.


My conclusion is that avatars can be used as Avatars in forum but only if they are part of bigger design that is explaining what exactly you would scan.
Most people probably won't scan anything if they just see plain QR code with no explanation, text or image around it.
If I add Bitcoin logo with QR code, it would probably mean my Bitcoin address.
If I add custom logo, image and QR code, with text below, it would get much higher chance of getting scanned.

[Adbitco]

This could be risky using qr code as an avatar since it would automatically direct user to the website and how do you know is legitimate, from my point of view there might be fake website and without the original site attached to the bottom of the code how do we know it's the correct qr code all less we scan? Alternatively, we can use them while we log on  to desktop then trying to use our mobile for easy access or and for quick payment, then we can scan through our phones to proceed with the payment or whatever. I understand is a unique methods of identifying trusted links, website, address and many more. My concern is qr code can only be effective to use if someone have another alternative means to login into a separate device. For instance, you can't scan a qr code without having another device to proceed with the scanning. Else it's only easier to use while making payments.

[libert19]

Sounds aesthetically pleasing, always found scanning qr codes on parcels convenient. However, I would restrict it to avatar section than post  - imo it only suits there.

[Upgrade00]

I just tried, and before I even take the picture my default (Samsung) camera app shows this:

Samsung outdoes iOS here, cause I just tried with my default (iPhone) camera and was asked to choose if I wanted to open the app in duckduckgo browser without any other information given.
Clicking on that redirects me directly to the browser.

It poses little risk if one can easily read the url before clicking on the link in the qr code.

[Mpamaegbu]

It poses little risk if one can easily read the url before clicking on the link in the qr code.

That was the first thing that came to my mind while I was going through the OP. I won't bother scanning any QR despite knowing it quickens my access to the "blinded" coded information. I don't even like doing a QR that isn't on what I know. The few things I had done it would be to pair devices or a mandatory stuff that has to do with my other devices. Apart from that, I steer clear. I don't like surprises when it comes to online devices. One will never know what's at the other end of the code. It doesn't matter how reputable any user is perceived to be, I should've a glimpse of what I'm scanning before doing so.

[Welsh]

Sounds aesthetically pleasing, always found scanning qr codes on parcels convenient. However, I would restrict it to avatar section than post  - imo it only suits there.

Technically, it'd only be allowed on very substantial posts just like the advertising rule as I mentioned. You wouldn't get this type of content anywhere else, and I imagine they'd be some resistance due to the security concerns about putting it in posts in general. Same as with the avatars. Although, technically there's nothing specifically written at the moment to forbid it for the latter. If, and when we start seeing this around the forum, is whether or not the rules will be adjusted to mitigate the risks. At the moment, it's not a big problem.