The last time I traveled on the east coast I'd amassed _at least_ four separate "apps" on my phone from four different municipalities.<p>Each one wants my address and license plate number. Most want my credit card, too.<p>Each app looks and behaves like it was designed by an intern.<p>Each app wants to send me notifications on my phone (Ok, I guess if you're concerned about the meter running out).<p>Some of the apps accept payment, others don't (you have to go to the kiosk in the garage to pay). None of the municipalities I visited allowed cash payment.<p>Now apparently we need to worry about Phishing QR codes as well.<p>Is all of this worth not having to run out to the meter and feed it once in a while?
The opaqueness of QR codes for public uses like this is a problem. I was musing on this on a restaurant patio recently, that used the "QR code to view our menu" sticker things. It would be no work at all to slap new code stickers on all the outside tables. The potential for actual malice is maybe low there, but mischief is easy (ads for a competitor restaurant, PETA website at a BBQ place, autoplay fart noises, just general gross-out website, etc.)<p>I suppose the builtin Android and iOS code readers will have to get a confirmation step at some point. The classic problem of convenience vs. security.
Scammers are sticking QR Codes on parking meters in Austin, Texas. The victim scans the QR code using a smartphone and is taken to a fake parking payment site.<p>Personally, I think a better scam would be to follow clampers (parking boot in US), find cars that have been clamped and replace the release notice instructions with your own version and payment QR code.
The irony of this is that the last legit parking meter service I registered for was hacked and all my personal info and license plate are now in a public database. (Can't remember the name right now, but it's in the haveibeenpwned list).
<a href="http://wordpress.mrreid.org/2011/08/06/hacking-qr-codes/" rel="nofollow">http://wordpress.mrreid.org/2011/08/06/hacking-qr-codes/</a><p>Reminds me of this blog on redirecting qr code links with cleverly made transparent overlays to change a few blocks in the code.