Why QR codes can be dangerous, and how not to spend US$20,000 on… bubble tea.