How not to get hacked by a QR code