https://qooah.com/2017/09/28/cu-qr-code-and-samsung-pay-unsafe/