What's really in QR codes?