QR codes intercoms: Why convenience can come at a cost

QR codes, those strange arrangements of black and white squares, have permeated our daily lives. We see them everywhere we go, and, if you know what they are, they offer access to menus, websites, and even payment options.

They are now even used for building access, and on the face of it, this seems like a modern, touch-free entry solution — but is it a good idea?

While seemingly convenient, QR code intercoms come with drawbacks, so before you jump on the QR-code bandwagon, it’s crucial to understand the limitations and risks involved for your building’s security.

A fragile foundation

A fundamental problem with QR code intercom systems is their reliance on personal smartphones and stable internet connectivity, creating an immediate barrier to entry for a significant portion of the population.

• Lack of Familiarity:

  You might be hard pushed to think of anyone who doesn’t own a smartphone. However, owning a smartphone and understanding QR codes are not the same thing. This immediately places those with limited technological literacy, such as the elderly, at a disadvantage. You might be forcing a baffled grandparent to navigate a QR code just to visit their family.

• Internet connectivity:

  QR code systems are inherently online. This means that any disruption to the internet connection ­— be it a local outage, a weak signal, or even a temporary service interruption — can render the entire system useless. In critical access scenarios, this reliance on an external network introduces a single point of failure that a robust security system should simply not have.

Furthermore, while scanning a QR code only requires a small amount of data, it still requires visitors to use their own devices and mobile data allowance to enter a building, which isn’t a reasonable expectation.

A Gateway for Exploits: The Alarming Security Risks

While designed for convenience, the digital and inherently open nature of QR code intercoms opens them up to various security vulnerabilities that traditional, hard-wired systems largely avoid.

• Spoofing and “Quishing” Attacks:
  

  Malicious actors can easily create fake QR codes that mimic legitimate ones but redirect users to phishing websites. These so-called “quishing” attacks aim to trick users into divulging sensitive personal information, login credentials, or even financial details. A malicious actor could place a fake QR code over the real one that leads the unsuspecting person to a website that looks like your building’s access portal but could be stealing data at the same time.

• Malware infection:

  Beyond phishing, spoofed QR codes can also lead to websites that automatically download malware onto a user’s device. This could compromise personal data, open backdoors for further attacks, or even turn a smartphone into a bot for malicious activities.

• Limited audit trails:

  Many basic QR code intercom systems lack the sophisticated audit trails found in more advanced security solutions. This means there might be limited or no detailed records of who accessed the building, when, and from which device. In the event of a security breach or an incident requiring investigation, this lack of granular data can severely hamper efforts to identify individuals or understand the timeline of events. This absence of accountability undermines the very purpose of a security system.

Beyond the scan: Functionality and user experience deficiencies

Beyond the security concerns, QR code intercoms often fall short in terms of features and user experience compared to dedicated intercom solutions.

Advanced intercom systems offer a wealth of features, such as video verification, two-way audio communication, integration with other security systems (CCTV, alarm systems), and remote management capabilities.

QR code systems, by their nature, are primarily designed for simple “scan and open” functions. As such, they lack these crucial features, making them less secure for comprehensive building management.

Hard-wired systems remain superior

While QR codes offer a novel approach to access control, their inherent reliance on personal devices, internet connectivity, and susceptibility to digital threats make them a less robust and less reliable solution for building security. For critical infrastructure, commercial buildings, and residential or student properties demanding comprehensive security and universal accessibility, a hard-wired intercom system remains the unequivocally superior choice.