Browsers typically load content from a web server, but could we load it from a QR Code instead? Can we replace the internet with QR Codes!? In this talk, I'll demonstrate different ways to use QR codes to communicate across an air gap, and how these can be used to exfiltrate data or bootstrap secure offline trust. We’ll also look at other forms of out-of-band communication, including bypassing browser permission dialogs by pretending to be a game controller. There’ll be lots of demos, and everything you wanted to know about QR codes.