QR Code suggestion for Slate

[sodamo]

There have been a number of posts with many of us indicating our willingness to showcasing our new Slate in various ways.
I’d like to suggest Slate come up with a QR code, perhaps decal, we can afix to our Slate giving interested lookers a convenient way to get info. Something easy to put on and remove. Maybe even a personal tie in to earn us points?
Thoughts?

 

[kvermeer]

You can already do that - no points/tracking, but you can do it - with the Share link in your garage:

https://www.slate.auto/share/JEYWDR

Just point any QR code generator at that, print it out, and stick it wherever you want!

 

[sodamo]

You can already do that - no points/tracking, but you can do it - with the Share link in your garage:

https://www.slate.auto/share/JEYWDR

Just point any QR code generator at that, print it out, and stick it wherever you want!

Ahhhh, another thing I didn’t know…
but qualifies as my learn something new every day 🤙

 

[kvermeer]

Ahhhh, another thing I didn’t know…
but qualifies as my learn something new every day 🤙

 

[r6tn]

They say "SLATE" on the tailgate. That would be enough for me. No need to click a suspicious QR link

 

[Freyar]

Security says I'm not about to scan unknown QR codes.

 

[sodamo]

So would an official looking decal, affixed to drivers window be concerning?

 

[Freyar]

So would an official looking decal, affixed to drivers window be concerning?

Yes. Since a QR code can contain anything, really, unverified QR codes are an attack vector. I don't even scan QR codes on tables for menus at this point.

 

[ClayJar]

QR codes are an "attack vector" precisely as "dangerous" as a Post-It Note.

If you scan a QR code containing a URL using your phone's camera and follow the link, that is precisely as "dangerous" as typing in a URL from a Post-It Note.

If you scan a QR code containing a WiFi connection string and connect to it, that is precisely as "dangerous" as typing in the connection info from a Post-It Note.

If you scan a QR code containing text, that is precisely as "dangerous" as typing in the text on a Post-It Note.

QR codes aren't an "attack vector". QR codes are just an electronic Post-It Note.

Of course, don't teach your tech-illiterate senior citizen parents how to scan a QR code, as they just might be the type to go to a random URL from a Post-It Note, read that the FBI is on their way to seize their bank account because the IRS didn't receive their payment, and fall for a scam. That's not the QR code. That's just your old parents, bless their hearts.

 

[kvermeer]

Security says I'm not about to scan unknown QR codes.

Yes. Since a QR code can contain anything, really, unverified QR codes are an attack vector. I don't even scan QR codes on tables for menus at this point.

QR codes are a way to reliably encode a text string in a way that can be read by your device.

If your device does something crazy (like sending your data to an unfamiliar website) when you scan a QR code, that's a flaw with your device's settings, not QR codes in general. Presenting a button that says "Do you want to go to https://www.slate.auto/share/JEYWDR ?" is not hazardous.

You do need to be able to notice when it says https://wwwslate.info" instead or other obvious scams, but if you can't do that then you shouldn't have Internet privileges.

 

[D’Roc]

Security says I'm not about to scan unknown QR codes.

Quishing threat. My institution uses institution-branded QR codes from BL.ink to assure users the QR codes in our facility are legitimate.

https://www.bl.ink/blog/authenticating-healthcare-content-with-branded-short-links

 

[Freyar]

QR codes are a way to reliably encode a text string in a way that can be read by your device.

If your device does something crazy (like sending your data to an unfamiliar website) when you scan a QR code, that's a flaw with your device's settings, not QR codes in general. Presenting a button that says "Do you want to go to https://www.slate.auto/share/JEYWDR ?" is not hazardous.

You do need to be able to notice when it says https://wwwslate.info" instead or other obvious scams, but if you can't do that then you shouldn't have Internet privileges.

Sure. Samsung introduced a pseudo-intermediary step that requires you to select the link when you're scanning a QR code. However it doesn't display the full link which becomes a risk, and in the past (or on less secure phones) they didn''t do that.

I'd rather a readable URL than a truncated URL while you're holding the QR code in view (as Samsung does today.)

I'm not saying Slate URLs are dangerous, just that my stance is QR codes are not trustworthy (especially when they often use link shorteners).

 

[sodamo]

And I keep learning. Must be that Senior thing.

 

[AZFox]

Security says I'm not about to scan unknown QR codes.

I haven't scanned one in decades for this reason.

If you scan a QR code containing a URL using your phone's camera and follow the link, that is precisely as "dangerous" as typing in a URL from a Post-It Note.

I can read a URL that's written on a Post-It note before I decide to type it in, but I can't read a QR code before I scan it in. In that important way they're different.

Quishing (QR code phishing) is indeed a thing.

 

[KevinRS]

Ok, on a stock android phone, point the camera app at a Slate QR code, the full link is shown to click on.
Iphone just shows slate.auto
If Samsung or another manufacturer is showing less than that, or auto opening links or something, that's not on the person posting the QR code.
You could always print the QR code with a text link below it, in case someone wants to type it in to be extra sure.
I suggested to Slate months ago that at least for early buyers, they supply us with a stack of cards to give to people interested in the truck.