Really surprised there hasn’t yet been a reckoning with QR code substitution attacks. Duplicate the menu, put up a “type your credit card details” form, and you could probably automate the actual order with the real menu site in the background. Boom—-skimmed.
There’s just no way for laypeople to evaluate the provenance of random QR codes. The restaurant industry often uses random third party sites for their menus, so even that is a poor signal.
EDIT: Adding second paragraph that was accidentally deleted before submission
There’s just no way for laypeople to evaluate the provenance of random QR codes. The restaurant industry often uses random third party sites for their menus, so even that is a poor signal.
EDIT: Adding second paragraph that was accidentally deleted before submission