News for hackers. Stuff that matters.
Re:What's Inside the EU Green Pass QR Code? by supermatt on Tuesday June 22, 2021 @07:12AM (#27590215)
Pretty sure the complaints were about allowing wechat/alipay and gov/police to track you and your health status. There was no transparency in what was stored/transmit, whereas here it is all documented. Its a static QR code you can carry, rather than an app that does a lookup and phones home. The reader app only verifies the signatures used to sign the (limited) id info, doesnt send info back to the mothership, etc.
Re:What's Inside the EU Green Pass QR Code? by rjzzleep on Tuesday June 22, 2021 @08:22AM (#27590749)
No, actually the complaint was that a central authority could, under the pretext of some obscure rule, forbid you access to certain or public services. The same concept applies here, whether it's open source or not.
Re:What's Inside the EU Green Pass QR Code? by neither_color on Tuesday June 22, 2021 @08:33AM (#27590851)
We're not over it, the discussions were consistently buried and we skipped that part to "here's how the new QR systems work" to give the illusion of consent. They didn't even bother manufacturing consent this time. There was no healthy public discourse on it, just some states/countries banning them pre-emptively and some states taking for granted that you would accept it.
Re:What's Inside the EU Green Pass QR Code? by supermatt on Tuesday June 22, 2021 @08:44AM (#27590924)
Pretty sure the complaints were as I mentioned - feel free to give links to the other discussions.

The "central authority" already do forbid you from accessing certain or public services for the same rules - only you need to provide the relevant paper documents. This is effectively the paperless version thereof.

You may personally disagree with the concept of proof of vaccination, but thats completely aside from the technical discussion we are having here.

Re:What's Inside the EU Green Pass QR Code? by justinmchase on Tuesday June 22, 2021 @09:15AM (#27591184)
Its not an aside, its centrally related. The technical version of the app enables the problematic activity to scale and thus the moral and ethical implications are centrally related to the technical implmenetation.
Re:What's Inside the EU Green Pass QR Code? by mbesto on Tuesday June 22, 2021 @12:38PM (#27593871)
> are centrally related to the technical implmenetation.

You mean just like a centrally fabricated ID card that's used for entering an airport, making certain purchases, verifying ID for a CC purchase, entering the country, etc?

Re:What's Inside the EU Green Pass QR Code? by miohtama on Tuesday June 22, 2021 @11:46AM (#27593170)
Would you be happier by checking equivalent paper printouts, check done by hand?
Re:What's Inside the EU Green Pass QR Code? by ajsnigrutin on Tuesday June 22, 2021 @09:54AM (#27591628)
What public service does the government forbid me to access without my papers (except the ones where the document is needed to charge the state for the service - eg. medical stuff)?

Just a year ago, saying that the governments will require you to produce a "vaccination passport" to enter a restaurant was laughed at as a crazy conspiracy theory, and currently, the difference between a "crazy conspiracy theory" and "reality" is about 6-12 months.

Re:What's Inside the EU Green Pass QR Code? by supermatt on Tuesday June 22, 2021 @11:23AM (#27592831)
"certain or public services" was the phrase the parent used. I just said the same rules apply as before. Maybe you are better off asking them for examples.
Re:What's Inside the EU Green Pass QR Code? by mmmmmbop on Wednesday June 23, 2021 @09:39AM (#27604444)
What public services does the government forbid you to access without a Covid vaccine? I am not aware of any.

If you are talking about private services, then there are many examples where papers are needed:

• buying alcohol (ID)

• entering a nightclub (ID)

• taking a plane (ID)

• opening a bank account (SSN/ITIN)

• renting a car (driver's license)

• buying a gun (proof of residence)

Re:What's Inside the EU Green Pass QR Code? by Spooky23 on Tuesday June 22, 2021 @08:37AM (#27590878)
Requirements for public health aren't new.

Most countries, for example, require vaccination for contagious diseases for a variety of public functions like attending school. The need to validate vaccination status for functions like boarding airplanes or attending large stadium events is just common sense, as certain populations are refusing vaccination for mostly irrational reasons.

These digital credentials allow people to conveniently provide this documentation in a reliable way.

Re:What's Inside the EU Green Pass QR Code? by logicchains on Tuesday June 22, 2021 @10:05AM (#27591756)
>refusing vaccination for mostly irrational reasons

Depending on age and condition the risk to an individual can vary from one in ten million to under one in a hundred. In your mind, what is the risk that an individual must face from covid to make it rational to take a novel treatment with no long-term safety data that hasn't passed the standard FDA approval process? In any other context, would people here be so confident that there's a less than one in ten million risk from a novel MRNA treatment?

Re:What's Inside the EU Green Pass QR Code? by hvac on Wednesday June 23, 2021 @11:26AM (#27605620)
>Depending on age and condition the risk to an individual can vary from one in ten million to under one in a hundred

You're off by several orders of magnitude here. See "current best estimate": https://www.cdc.gov/coronavirus/2019-ncov/hcp/planning-scena...

Re:What's Inside the EU Green Pass QR Code? by logicchains on Tuesday June 22, 2021 @09:29AM (#27591342)
>certain populations are refusing vaccination for mostly irrational reasons.

It's not irrational for people to be cautious about a new treatment for which there's absolutely no data about long-term safety (can't know the 2-3 year effects of something that's only been around one year), which has bypassed normal treatment approval processes (the covid vaccines only have FDA emergency use authorisation, and have not yet passed the requirements for full FDA approval, requirements which are strict for a reason), for which some previous attempts have failed significantly (https://pubmed.ncbi.nlm.nih.gov/22536382/), to prevent a disease that for many people has less than a 1/100,000 to 1/1,000,000 fatality rate (https://www.medrxiv.org/content/10.1101/2020.05.17.20097410v...), ten to a hundred times less dangerous than giving birth.

Re:What's Inside the EU Green Pass QR Code? by fabian2k on Tuesday June 22, 2021 @09:48AM (#27591575)
The vaccines have regular approval in the EU by the EMA, the US approval is the odd case here. And there is no reason to expect a significant risk for side effects that only appear after several years, for vaccines they generally appear reasonably close to the date of the vaccination.

And you're seriously downplaying the risks of COVID-19 here, of course it is relatively harmless for very young people. But it is seriously dangerous for a large part of the population that is older.

Re:What's Inside the EU Green Pass QR Code? by logicchains on Tuesday June 22, 2021 @09:56AM (#27591651)
>And you're seriously downplaying the risks of COVID-19 here, of course it is relatively harmless for very young people. But it is seriously dangerous for a large part of the population that is older.

It's not only "very young" people. Did you look at the link I provided? For people 20-30, it's around one in a hundred thousand. For people 30-50, it's around one in ten thousand (similar to giving birth). When someone's making a rational decision, it's with regard to their individual risk; the risk of covid to an eighty-year-old is irrelevant to a twenty-year-old deciding whether to take the vaccine, especially given the vaccine doesn't prevent them infecting others if they get it (see this data from the Singapore government: https://covid.viz.sg/ ).

>for vaccines they generally appear reasonably close to the date of the vaccination.

The MRNA vaccines are quite different from normal dead/live virus vaccines and have never been used at scale.

Re:What's Inside the EU Green Pass QR Code? by johncolanduoni on Tuesday June 22, 2021 @10:26AM (#27592031)
> The MRNA vaccines are quite different from normal dead/live virus vaccines and have never been used at scale.

Their closer relative, the viral vector vaccines (like J&J’s), have been. You’re right about calculating risk, but when’s the last time a vaccine in normal, longer term stage three trials resulted in a higher fatality rate than COVID (for any age group)? The link for the SARS vaccine candidate was a failure that was caught in a mouse model, which unsurprisingly they also did with the new vaccines before the human trials started. To echo the parent comment, these were immediate side effects on challenge (which would likely been caught in stage 2 trials even if they only happened in humans and not in animal models).

If we want to go with unusual reactions that only show up over time, what about the chance that whatever long term side effect you’re imagining from the vaccines instead happens for people who have been infected with COVID 5 years from now? Once you decide to make decisions based on rare and novel events with unquantifiable risks, you’ll find they show up absolutely everywhere if you’re being intellectually honest.

> given the vaccine doesn't prevent them infecting others if they get it (see this data from the Singapore government

That data’s N is a little low, but let’s take it seriously for a moment. The vast majority of vaccinated people in that dataset did not go on to infect others, and none of them were epicenters for super-spreader events. Eyeballing it, it’s consistent with a sterilizing immunity in excess of 80%. If the vaccines turn out to be that effective at preventing transmission, that’s an excellent outcome (it is higher than most vaccines).

Re:What's Inside the EU Green Pass QR Code? by logicchains on Wednesday June 23, 2021 @01:57AM (#27601237)
>You’re right about calculating risk, but when’s the last time a vaccine in normal, longer term stage three trials resulted in a higher fatality rate than COVID (for any age group)? The link for the SARS vaccine candidate was a failure that was caught in a mouse model, which unsurprisingly they also did with the new vaccines before the human trials started. To echo the parent comment, these were immediate side effects on challenge (which would likely been caught in stage 2 trials even if they only happened in humans and not in animal models).

It's basically like saying: "the unit tests have all passed now, the regression tests all pass, so let's roll out the fix straight to prod, because it's urgent and we don't have enough time to do the normal amount of staging environment testing". Sure, probably it's fine. But mistakes happen. In any other context, a 1/100,000 chance of error would be considered incredibly low, a great achievement. But in this case, a 1/100,000 chance of seeing after 2-3 years a failure like happened early on in those previous trials would be an incredible tragedy, if the vaccine was taken by people with less than 1/100,000 chance of being killed by covid.

https://onlinelibrary.wiley.com/doi/10.1111/ijcp.13795 makes a better case than I can that "a finite, non-theoretical risk is evident in the medical literature that vaccine candidates composed of the SARS-CoV-2 viral spike and eliciting anti-SARS-CoV-2 antibodies, be they neutralising or not, place vaccinees at higher risk for more severe COVID-19 disease when they encounter circulating viruses"

>If we want to go with unusual reactions that only show up over time, what about the chance that whatever long term side effect you’re imagining from the vaccines instead happens for people who have been infected with COVID 5 years from now? Once you decide to make decisions based on rare and novel events with unquantifiable risks, you’ll find they show up absolutely everywhere if you’re being intellectually honest.

The difference is that covid does not have a big qualitative difference from other respiratory viruses, and no circulating respiratory viruses are known to cause serious long-term symptoms in people who were short-term asymptomatic. Whereas the MRNA treatment is quite a different mechanism from previous vaccines.

Separately, ethically it's generally considered worse if a death results from deliberate human action than from an "act of nature". E.g. nowhere is it morally acceptable to murder somebody just because their organs could be used to save ten people. In this case that means it would be considered morally worse if people were coerced into taking a vaccine that ended up killing them than if, absent the vaccine, they died from natural causes of equivalent risk.

>That data’s N is a little low, but let’s take it seriously for a moment. The vast majority of vaccinated people in that dataset did not go on to infect others, and none of them were epicenters for super-spreader events. Eyeballing it, it’s consistent with a sterilizing immunity in excess of 80%. If the vaccines turn out to be that effective at preventing transmission, that’s an excellent outcome (it is higher than most vaccines).

There's one super-spreader there, a prison cook. I pulled the data from the backing rest API (if you want I could upload the notebook and show you):

    pd.Series(vax_links).describe()
    count    17.000000
    mean      2.705882
    std       3.670230
    min       1.000000
    25%       1.000000
    50%       1.000000
    75%       2.000000
    max      14.000000
    dtype: float64

    pd.Series(unvax_links).describe()
    count    127.000000
    mean       2.181102
    std        1.965647
    min        1.000000
    25%        1.000000
    50%        2.000000
    75%        2.000000
    max       15.000000
    dtype: float64
While there are way fewer vax cases than unvax cases, looking at the average number of infectees it doesn't appear that vaccinated people infect fewer on average than the unvaccinated do, at least given the limited data.
Re:What's Inside the EU Green Pass QR Code? by klapatsibalo on Tuesday June 22, 2021 @10:28AM (#27592062)
The thing about covid is that you can't consider just the individual risk, you have to also think about the fact that this is contagious, so if you don't actively try to stop it, it will kill many more people.

So yes, chances are I wouldn't die if I didn't vaccinate, but chances are I would kill my grandma if I caught covid.

Re:What's Inside the EU Green Pass QR Code? by mardifoufs on Tuesday June 22, 2021 @11:42AM (#27593102)
Wouldn't she be vaccinated at this point? And if we assume some people can't be vaccinated for health reasons and that we have to take the vaccine to protect them... Isn't it pretty awful that they will be denied access to most public places because they don't have a vaccination proof?
Re:What's Inside the EU Green Pass QR Code? by logicchains on Tuesday June 22, 2021 @09:50AM (#27591595)
If anything, it's irrational that people who would normally refuse to take a novel treatment that has not passed standard FDA approval procedures would suddenly decide to take it just to minimise a one-in-a-hundred-thousand risk, a risk lower than many other risks people usually take like giving birth and driving.
Re:What's Inside the EU Green Pass QR Code? by mbesto on Tuesday June 22, 2021 @12:43PM (#27593955)
> which has bypassed normal treatment approval processes (the covid vaccines only have FDA emergency use authorisation, and have not yet passed the requirements for full FDA approval, requirements which are strict for a reason),

FDA approvals are largely based on the ability to provide reliable test cases. You literally have the largest test case known to human history. No amount additional FDA testing is going to make that change.

> to prevent a disease that for many people has less than a 1/100,000 to 1/1,000,000 fatality rate

This figure is meaningless. We have a steady history of "excess deaths" and can predict what annual death rates are on average on a yearly basis. This number jumped significantly even with mask mandates, lockdowns, etc over the last 18 months:

https://www.cdc.gov/nchs/nvss/vsrr/covid19/excess_deaths.htm

Re:What's Inside the EU Green Pass QR Code? by logicchains on Wednesday June 23, 2021 @01:35AM (#27601106)
>FDA approvals are largely based on the ability to provide reliable test cases. You literally have the largest test case known to human history.

Nine women can't have a baby in one month. A billion test cases for short-term side effects still aren't test cases for long-term side effects.

>This figure is meaningless. We have a steady history of "excess deaths" and can predict what annual death rates are on average on a yearly basis. This number jumped significantly even with mask mandates, lockdowns, etc over the last 18 months:

For making a rational decision, the figure to use is the personal risk to the individual. Using excess deaths is meaningless, because if the vast majority of those deaths were in old and overweight individuals and you're neither, then those numbers are irrelevant to quantifying the risk you face.

Re:What's Inside the EU Green Pass QR Code? by psychometry on Tuesday June 22, 2021 @10:20AM (#27591958)
Know what else we don't know the 2-3 year effects of? Fucking Covid-19. Unlike the vaccine, that one actually has a decent chance of killing you.
Re:What's Inside the EU Green Pass QR Code? by anshorei on Tuesday June 22, 2021 @12:03PM (#27593383)
Yes, and I'll take any reasonable precaution I can to avoid getting COVID: social distancing, wearing a mask, regularly using disinfectant, working from home, etc.

The choice isn't between the vaccine or COVID.

Re:What's Inside the EU Green Pass QR Code? by ectopod on Tuesday June 22, 2021 @08:24AM (#27590769)
Businesses have shown an enormous appetite for hoovering up personal information. Why are you sure that businesses won't use an alternative verification app that stores the names and dates of births, shares them with their marketing partners, etc.?
Re:What's Inside the EU Green Pass QR Code? by distances on Tuesday June 22, 2021 @08:43AM (#27590919)
GDPR. No legit company would take such a risk in EU, legal and PR ramifications would be massive.
Re:What's Inside the EU Green Pass QR Code? by sipos on Tuesday June 22, 2021 @09:26AM (#27591297)
The problem with the GDPR is that it is only as good as the authority enforcing it. There are complex rules (from memory about a third of the text, but it is a while since I read it all and this was the bit I was least interested in) on which authority is the one in question that means you can somewhat choose your authority, and some of them are not enforcing it at all. This is how Facebook and Google etc are able to do things that clearly violate it I think.
Re:What's Inside the EU Green Pass QR Code? by teataster on Tuesday June 22, 2021 @09:12AM (#27591162)
Maybe in your corner of the EU that's true. In mine GDPR is well regarded as joke.