YOU SCANNED A QR CODE
I wouldn’t make that a habit.
NoRec.US documents surveillance systems, policies, contracts, public records, and the unanswered questions around them.
A QR code is just encoded data. The catch is that you usually cannot tell by looking at the pattern where it will send you or what the destination will ask your phone, browser, or app to do next.
WHY BE CAREFUL?
Treat an unknown QR code like an unknown link.
A unique link can record that a particular code was visited and receive ordinary connection metadata such as time, IP address, and browser or device information.
A code can send you to a convincing login, parking, payment, delivery, or account page that is not operated by the organization you expected.
A destination can prompt a file download, open a deep link, launch an app workflow, or ask for permissions you did not intend to grant.
Crafted destinations can target flaws in browsers, apps, or operating systems. Simply decoding a normal QR code is not the same thing as being compromised, but the destination still deserves the same caution as any other untrusted link.
NOREC.US
Surveillance, documented.
NoRec.US follows the records: statutes, contracts, policies, procurement documents, audits, public reports, and public-records responses. When the evidence stops, the claim stops with it.