Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Australia Government

Melbourne's Anti-Graffiti QR Codes Vandalized to Point to 'Alternative' Site (abc.net.au) 115

The Australian city of Melbourne recently posted QR codes its citizens could use to report grafitti, reports Australia's public broadcaster ABC.

Unfortunately, someone overlaid "a number" of those QR codes with "alternative" QR codes leading to a pro-graffiti documentary: The City of Melbourne is investigating how many of the QR codes have been affected and is assessing whether an alternative will be needed in future.... The lord mayor said the City of Melbourne had initiated discussions with Victoria Police and would draw on CCTV footage to see "how we can catch those culprits". [...]

The Lord Mayor did not believe the compromised QR codes had resulted in more graffiti in the city. "I think this is more of a PR effort by the vandals," she said.

This discussion has been archived. No new comments can be posted.

Melbourne's Anti-Graffiti QR Codes Vandalized to Point to 'Alternative' Site

Comments Filter:
  • Bithynia (Score:3, Interesting)

    by sysrammer ( 446839 ) on Sunday January 01, 2023 @10:21PM (#63173316) Homepage

    Without graffiti we wouldn't have any confirmation that J. Ceasar had a fling w/ King Nicomedes.

    • Without graffiti we wouldn't have any confirmation that J. Ceasar had a fling w/ King Nicomedes.

      Yes, because just like everything on the internet is true today, everything written on a wall in Roman times was true too.

    • Here I sit, broken hearted, paid a dime and only farted.
  • by gweihir ( 88907 ) on Sunday January 01, 2023 @10:38PM (#63173328)

    Talk to a security expert _first_, because otherwise chances are you are going to do something stupid. And look, you did.

    • by antdude ( 79039 )

      Maybe they did and don't care.

    • Talk to a security expert _first_, because otherwise chances are you are going to do something stupid. And look, you did.

      What is stupid about it? There's no major exploit here. No one was hurt. A quick link to report graffiti turned into something that people would just hit the back button on their phone when seen. And shortly after it's fixed. The QR code campaign in Melbourne has been incredibly successful as people have had the opportunity to report something easily rather than having to manually look for a means to do so.

      You have demonstrated a long standing pattern here on Slashdot of having zero clue about risk manageme

      • by gweihir ( 88907 )

        There's no major exploit here.

        Meeeeep, wrong! Seriously. Are you living under a rock?

        • Meeeeep, wrong! Seriously. Are you living under a rock?

          The rock where you think someone being directed to a link that was not a phishing link is somehow an exploit. Grow up.

    • No one gives two shits what the security person says. That much seems fairly obvious by now.
    • by Calydor ( 739835 )

      QR codes are a gamble whenever you scan one you find in the wild. There's no URL to read manually before clicking it, no indication of where it will take you or if it's actually been put up (sent) by whoever it claims - you just scan it and hope it's not a virus.

      • by gweihir ( 88907 )

        It is even worse: Your QR-code reader can be vulnerable and then gets directly attacked.

  • by Rosco P. Coltrane ( 209368 ) on Sunday January 01, 2023 @10:39PM (#63173332)

    is the equivalent of random links you're invited to click on in emails from total strangers: you just don't click on em. This is a perfect demonstration of why you shouldn't scan random QR codes in the street either,

    It's not exactly a shocker that any Tom, Dick and Harry can print a new, nefarious QR code and stick it overtop the legit one, and you have no way of checking where it'll take you - save perhaps for savvy users who review the URL, see it doesn't look very official and decide not to open it.

    • This is a perfect demonstration of why you shouldn't scan random QR codes in the street either

      Of course you do, unless you're worried about buffer overflow or something. The camera app shows the URL, it doesn't just blindly open it.

      • What percentage of the population do you think know how to read & judge the likely security of a random URL?
        • What percentage of the population do you think know how to read & judge the likely security of a random URL?

          Why would I care? Why would that be relevant to my comment on this site for nerds?

          • Because it's a general problem that affects everyone with a smartphone?
            • You can only help people willing to receive help.

              If people won't use their thinkers, then I can't make them think.

              • Nope. It takes specialist, domain specific knowledge to read & judge security risks of URLs. Are you suggesting that anyone who doesn't have the expertise for whatever reason deserves to be a victim? Scammers invent scams that work on enough people to make a profit. They're not going to use strategies & techniques that don't work on anyone, are they? We pretty much have to rely on experts, preemptive mitigation, regulation, & law enforcement to minimise the risks.
                • It takes specialist, domain specific knowledge to read & judge security risks of URLs.

                  Meh. It takes that to do it well, not to do it at all.

                  • Meh, not much to say about the rest of my comment?
                    • I only responded to the part that wasn't just blathering about shit everybody already knows. I always tune people out when they lecture me on the obvious.

                    • So you're standing firm on your blame the victims stance.
                    • So you're standing firm on your blame the victims stance.

                      You can't help the willfully ignorant, computers are important, people who pretend they aren't carrying around more computing power in their pocket than we used to refer to as a "supercomputer" and more importantly relying on it to live their lives are beyond help. Nothing powerful was ever foolproof, and people are intentionally acting like fools. Computer literacy is a basic skill today. Refusing to get some is like a primitive human refusing to understand that fire can burn stuff you weren't actually try

                    • So throw up your hands and say, "Let them burn!"
                    • I throw up my hands and say let them learn something new or let them suffer. If you want to screen all the URLs for everybody, feel free. It will keep you pretty busy, though.

                    • Would you say the same thing about fake ATMs? Just let people unwittingly have criminals empty their bank accounts? I mean, if the victims can't be arsed to learn how to evaluate ATMs, then they deserve to get fleeced, right?
                    • if the victims can't be arsed to learn how to evaluate ATMs, then they deserve to get fleeced, right?

                      If the victims of fake QR codes are taken in by frauds, they may well be protected by their financial institutions. Hopefully they know how to evaluate financial institutions.

                    • I'm very happy that you clearly don't work in law enforcement or the judiciary.
                    • I'm very happy that you clearly don't work in law enforcement or the judiciary.

                      I can't be a cop because I'm not a piece of shit, and they screen people like that out.

                    • Presumably, you mean police officers in the USA. In which case, I'm glad I don't live there.
                    • Presumably, you mean police officers in the USA. In which case, I'm glad I don't live there.

                      Mostly, yes. Though frankly I don't know of anywhere that's not corrupt, and cops' number one job is to protect the status quo.

                    • If cops are routinely corrupt here, I've yet to hear about it. Do the US police really do moonlight bodyguard work for Status Quo? https://www.youtube.com/watch?... [youtube.com]
  • by dissy ( 172727 ) on Sunday January 01, 2023 @10:50PM (#63173350)

    The lord mayor said the City of Melbourne had initiated discussions with Victoria Police and would draw on CCTV footage to see "how we can catch those culprits".
    The Lord Mayor did not believe the compromised QR codes had resulted in more graffiti in the city. "I think this is more of a PR effort by the vandals,"

    So the task is to find and catch those who placed QR codes around the city as part of a PR effort...
    Come Watson!

    The Australian city of Melbourne recently posted QR codes its citizens could use to report grafitti, reports Australia's public broadcaster ABC.

    Through the powers of deduction, I believe I've found your culprits!

    (This wasn't my fault, the prior article made me do it)

  • What, do you really expect iPhone photos to be viewable 10000 years later? Cavemen probably also scolded teenagers to stop tagging cave walls, didn't work any better. Good?

  • by Tony Isaac ( 1301187 ) on Monday January 02, 2023 @12:38AM (#63173460) Homepage

    Graffiti "artist": "Oh, that's a QR code so people can report my graffiti. I'll leave that alone because it's an official QR code."

    Right. What did officials *think* would happen?

    • ProTip: 'Official' is not the appropriate term.

      In a garden there are many types of bird flying around doing their thing. If one bird announces that it's in charge of the garden, how would the others respond?

    • It's almost as good as Banksy's, "This Wall Is A Designated Graffiti Area" signs.
    • Graffiti "artist": "Oh, that's a QR code so people can report my graffiti. I'll leave that alone because it's an official QR code."

      Right. What did officials *think* would happen?

      Probably exactly this. The QR codes have been incredibly successful. So some of them got vandalised, whoope de fucking do. It's a means of informing the public how to report graffiti, not a critical part of the emergency service infrastructure.

  • Comment removed based on user account deletion
  • "To members of the public, please continue to be proactive in helping us respond to cleaning and graffiti and we'll keep up our investment and efforts to make sure the city's clean."

    Those responsible for the graffiti are also members of the public.

    Perhaps what's needed is people with a broader view in positions of administrative responsibility.

    The statement reads as "Will those members of the public who believe as I do... and everyone else isn't important"

  • by nicubunu ( 242346 ) on Monday January 02, 2023 @05:19AM (#63173688) Homepage

    I am disappointed those "alternative" QR codes don't point to goatse. What happened to good old trolling?

  • I lived in Pittsburgh, PA, US in the early 2000's. There was a graffiti artist named Mook. He just tagged his name (so not really an artist) but is claim to fame was tagging in really hard to reach places. You'd see "Mook" tagged on top of a bridge of halfway up a building and wonder how the hell he did that in the middle of the night. He was something of a local hero for the college kids. His high point was when he started tagging his name on Pittsburgh's graffiti cleanup trucks.

  • Lots of people post labels with a different QR code on posters in Bus-Stops, railway stations and other places, just for shits and giggles, McDonald's pointing to Burger King and vice-versa and so on, I once found even one on a community light-post, usually pointing to the page to report broken lights to, that was pointing to a whore-house in Germany.

    Why this is news for nerds or stuff that matters is beyond me.

One can't proceed from the informal to the formal by formal means.

Working...