Skip to content
Better HN
Top
Best
Ask
Show
New
Jobs
Search
⌘K
0 points
nly
12y ago
0 comments
Save
Share
The malicious site in the middle can download the legit QR server side (e.g. using PHP) and simply spoof the referer, then present it to the visitor. Where will a referer check help?
0 comments
1 comments · 1 top-level
top
newest
oldest
gcr
12y ago
That's a great point. I didn't think of that.
j
/
k
navigate · click thread line to collapse