QR Scanner (PFA) is an app by SecUSo Research Group in the Tools category, listed since at least March 2021. It has no native code, so it runs on any Android processor.
It asks for 2 permissions, 1 of them sensitive: camera. It asks for the same permissions as version 4.6.7.
What's new in v4.6.12
- Bug fixes and improvements
Description
From the listing uploaded by “appupdater”.
QR Codes become more and more important. In some areas they have even replaced the traditional barcode. A QR Code is able to store up to seven thousand characters and therefore is qualified for more complex content, e.g. vCards. Hence nowadays QR Codes can nowadays be found on nearly every advertisement poster and animate the user to scan it with his smartphone. Thus, it is no longer necessary take a hand written note, it is enough to scan the QR Code. Correspondingly, there are already many QR Code scanner apps available in the Google Play Store. It belongs to the Privacy Friendly Apps group developed by the research group SECUSO at Technische Universität Darmstadt. More information can be found an secuso.org/pfa
Our Privacy Friendly QR Scanner App differs with respect to two aspects:
1. The Privacy Friendly QR Scanner App only requires the minimum amount of permissions, namely:
Most of the QR Code scanner apps available in the Google Play Store need several permissions on top of the ones needed: e.g. reading contacts or your call log and retrieving data from the Internet. Most of these requirements are not necessary for the functionality they actually are supposed to provide.
2. The Privacy Friendly QR Scanner App supports its users in detecting malicious links: QR Codes provide new possibilities for an attacker, as QR Codes can contain malicious links, i.e. links to phishing webpages or webpages from which malware would automatically be downloaded. Therefore it is important to carefully check the link before accessing the corresponding webpage. Since it is difficult for the user to spot malicious links, the Privacy friendly QR Scanner App supports the user by highlighting the domain (e.g. in that case for https://www.secuso.org, secuso.org would be highlighted). To avoid not checking the link and in particular the highlighted domain carefully, the app provides information about possible fraud and its users need to confirm that they checked the link and it is trustworthy. Note, the information shown after scanning an URL based QR Code is not customized for every URL. Hence, it should be considered as an advice for the user how to behave in general.
The Privacy Friendly QR Scanner App supports most of the usual qr code types. Bar codes and other widely used codes are also supported.
The app belongs to the group of privacy friendly apps, that are developed by the SECUSO research group. More information can be found at https://secuso.org/pfa
You can reach us via
Twitter - @SECUSOResearch https://twitter.com/secusoresearch
Mastodon - @SECUSO_Research@bawü.social https://xn--baw-joa.social/@SECUSO_Research/
Job opening - https://secuso.aifb.kit.edu/english/Job_Offers_1557.php
Certificate issued to “Philipp Rack”Not the developer's name (“SecUSo Research Group”). Names in certificates can't be verified, so this alone proves nothing.
Uploaded by “appupdater”Gold tier · 117,810 followers · uploading since 2020
Scans and ratings come from the source store; the certificate comparisons are AAPKs's own, made from the files' published signatures (2 other versions compared). AAPKs doesn't scan files itself — compare the MD5 and signer after downloading.
Permissions (2)
QR Scanner (PFA) requests 2 permissions, 1 of them sensitive.
Can I install this APK over the version I already have?
Only if it is signed with the same certificate as the copy on your phone and isn't an older version. If Android says “App not installed”, the certificates differ; uninstalling your copy first works but deletes its data unless it is backed up.
Is the QR Scanner (PFA) APK safe?
No one can promise that a file is safe, but some things can be checked. The source store rates this file Trusted. It is signed with the same certificate as the 2 other versions checked. After downloading, check that the file's MD5 is bc03244e51c0c692d252fc5097daf0d1.