Wednesday, 19 October 2011

QR code of death

This is not the QR
code of death
In July this year an inquisitive individual managed to create a QR code that crashed Google Authenticator on Android.

Re-installation and deletion of data/keys was necessary.

The "issue [was] caused by an invalid character '1' in the "secret" parameter in the URL encoded in the QR-code."

A few more details, plus the offending QR code, are available on the Google Authenticator project's Issues page.