News for hackers. Stuff that matters.
Re:What's Inside the EU Green Pass QR Code? by jhoechtl on Tuesday June 22, 2021 @07:19AM (#27590262)
The magic happens in the reader app.

Does it have access to a passport ID? Image database?

How is the one verifying the validity of the certificate supposed to check if it's actually the holder of the certificate standing in front to clear admission?

Re:What's Inside the EU Green Pass QR Code? by fabian2k on Tuesday June 22, 2021 @07:46AM (#27590467)
You show your photo ID, and the person that is checking looks if the name on your ID matches the name in the QR code. The reader Apps are dumb, they only show the content of the QR code and verify that the signature is valid.
Re:What's Inside the EU Green Pass QR Code? by emteycz on Tuesday June 22, 2021 @08:45AM (#27590941)
Yeah sure, how am I going to verify that, and what about my grandmother - I foresee many problems with doing that even as a programmer?
Re:What's Inside the EU Green Pass QR Code? by Aaargh20318 on Tuesday June 22, 2021 @09:53AM (#27591611)
Your grandmother is a bouncer at a club ?

Your granny doesn’t need to verify this, these are used by employees of venues that want to limit access to their facilities to people who are either vaccinated or tested negatively.

Re:What's Inside the EU Green Pass QR Code? by emteycz on Tuesday June 22, 2021 @11:52AM (#27593238)
I'm talking about people like me or my grandmother who want to verify that the guard at a club uses application that works fully offline and doesn't save any data - the QR code we're handing over contains our personal data and on top of that we're actually cryptographically verifying our whereabouts while using it, so I want to be absolutely sure the government doesn't have access directly without a court order. // yes I have had a real, serious problem with the government using data it got for other purposes against me for its own gain (I won the court, but it nearly destroyed my life and I'm still not where I was before and won't be for a long time).

I'm pretty sure the guard doesn't give a flying fuck about my personal information, just like the programmers - so how do I verify myself? Or am I to stay at home forever if I care about my privacy? The EU said very different things about these issues, is that forgotten now? The same goes for the other identity-related EU initiatives, where did all the talk about privacy go? Was it just propaganda, because it certainly seems so now, as there are so many so obvious loopholes it can't be an accident?

Re:What's Inside the EU Green Pass QR Code? by Aaargh20318 on Friday June 25, 2021 @05:20AM (#27628647)
I don't know in what country you are, but mine (the Netherlands) has open-sourced everything around the corona-check apps, including backend, design, etc. on GitHub (https://github.com/minvws).

If you or your granny aren't good at reading code, you just have to trust that other members of the public who are would have made some noise in the media if something fishy was going on.

Re:What's Inside the EU Green Pass QR Code? by CRConrad on Sunday June 27, 2021 @11:35AM (#27652380)
> Or am I to stay at home forever if I care about my privacy?

Yes -- just like you've always been, long before this pandemic. Every time you're out in public, you're out in public.

Re:What's Inside the EU Green Pass QR Code? by Deukhoofd on Tuesday June 22, 2021 @07:22AM (#27590291)
Check name, compare with identification, and done? Most of the EU has an identity document.
Re:What's Inside the EU Green Pass QR Code? by markus92 on Tuesday June 22, 2021 @07:25AM (#27590306)
The person reading can use their eyes to read a passport/photo ID ;) You don't need an app to do that.
Re:What's Inside the EU Green Pass QR Code? by jeroenhd on Tuesday June 22, 2021 @07:47AM (#27590479)
Many forms of ID also have some form of NFC/RFID to read out data wirelessly. I don't know why you'd buy something to do it automatically, but you totally could.

You'd still end up comparing a picture to someone's face, though, so you can't really remove the middle man without going into some dangerous facial recognition tech.

Re:What's Inside the EU Green Pass QR Code? by Kwantuum on Tuesday June 22, 2021 @07:35AM (#27590388)
Your id does not contained a cryptographically signed vaccination status, which this is.
Re:What's Inside the EU Green Pass QR Code? by avianlyric on Tuesday June 22, 2021 @07:50AM (#27590503)
You know it’s possible to carry ID and this QR code at the same time