I could only speculate how specific applications (e.g. at airports) are built.<p>However, if some specific vendor was susceptible to this attack, it would just be a stupid, obvious and easily fixable input handling bug in their product.<p>But the linked article doesn&#x27;t even demonstrate such an attack against an actual application (&quot;BadBarcode is not a vulnerability of a certain product&quot;). Just a trivial &quot;demo&quot; where they use a virtual keyboard device to enter commands directly into a windows shell and then get excited that it works...