Follow

Discord added a button that says "Scan QR Code" - sounds fine, right?

But it's actually for login, so if you convince someone that it's a promo QR code for free Discord Nitro or a free game, and tell them to scan your login QR code, wow you just logged in as them with zero confirmation!

There is no indication in the UI that scanning someone's QR code can do that, it just looks like a normal QR code scanner.

@njha Ignore the news if you see any phishing attacks using this 😂

Sign in to participate in the conversation
Fosstodon

Fosstodon is an English speaking Mastodon instance that is open to anyone who is interested in technology; particularly free & open source software.