References
- https://en.wikipedia.org/wiki/QR_code
- https://en.wikipedia.org/wiki/Single_sign-on
- https://www.owasp.org/index.php/Clickjacking
- https://https.cio.gov/mixed-content/
- https://en.wikipedia.org/wiki/SlickLogin
- http://sound-proof.ch/
- https://en.wikipedia.org/wiki/SQRL
- http://www.google.com/patents/US20130219479
- https://www.google.com/patents/US20130167208
- Introduction
- Abstraction
- Security vs Usability
- Related researches and projects about “Login by QR Code”
- QRLJacking Attack
- QRLJacking Requirements
- QRLJacking and Advanced Real Life Attack Vectors
- QRLJacking vs Clickjacking
- Vulnerable Web Applications and Services
- Recommendations and Mitigations
- Acknowledgements
- References