Am is missing something or is the presented &quot;attack&quot; really trivial? They use a barcode scanner connected as a virtual keyboard to directly enter keystrokes into the windows shell - I imagine the barcode simply reads &quot;CTRL, T, S, O, M, E, C, O, M, M, A, N, D&quot;.<p>It&#x27;s not surprising that it works to me -- I think it&#x27;s the intended behaviour.<p>The article suggests the fact that barcodes can contain arbitrary (non-printable) ascii characters is the discovery of a new vulnerability which can be used to attack a large number of real-world POS&#x2F;airport check-in systems, but doesn&#x27;t give a single example or proof for that. This seems like complete speculation on the presence of input handling bugs in systems connected to barcode scanners presented as a fact.