Post B5rPSCIAaKgFFetK4G by SecureOwl@infosec.exchange
 (DIR) More posts by SecureOwl@infosec.exchange
 (DIR) Post #B5rPSCIAaKgFFetK4G by SecureOwl@infosec.exchange
       2026-05-01T01:05:50Z
       
       1 likes, 1 repeats
       
       trying a new thing, have 3D printed a QR code and put it on the front porchQR code triggers a canary tokenwant to see if any of the delivery companies are using the drop off proof of delivery pics to train AI#infosec
       
 (DIR) Post #B5rPSDHqt01KKxkaDA by shibao@shitposter.world
       2026-05-01T17:58:27.646067Z
       
       1 likes, 1 repeats
       
       @SecureOwl you really think they're going to be scanning images for qr codes and resolving them and then curling/pinging them as part of ai training?
       
 (DIR) Post #B5rPSHamsXXlgqdlHU by SecureOwl@infosec.exchange
       2026-05-01T02:51:51Z
       
       0 likes, 0 repeats
       
       Whelp, sample size of 1 so far, but about 50 minutes after an amazon delivery - where a picture was taken - got a hit on the canaryi just checked the delivery photo and the QR code was visible in itUser agent was not a phone and clearly some sort of crawlerIP address was a CDNbut we are 1/1, lets see how it goes with a few more(i get a lot of random work deliveries)
       
 (DIR) Post #B5vTxqALYtfQLOPqs4 by SecureOwl@infosec.exchange
       2026-05-03T17:05:49Z
       
       1 likes, 1 repeats
       
       Experiment updateAmazon are 2/2 for hitting the QR canary token - same CDN, same non-phone user agent each time. Seems to happen async after the delivery, maybe 20 mins or so later.Actual delivery photo from today below.Only other test subject so far is Fedex, they did not trigger the QR.#infosec