News for hackers. Stuff that matters.

A comment on What's Inside the EU Green Pass QR Code?. Parent comment

Re:What's Inside the EU Green Pass QR Code? by sunshineforever on Tuesday June 22, 2021 @10:26AM (#27592025)
Couldn't someone just generate a fake QR code with their name and DOB on it?
[ Parent | on HN ]
Re:What's Inside the EU Green Pass QR Code? by kevincox on Tuesday June 22, 2021 @10:29AM (#27592076)
IIUC the data in the QR code is signed, the article mentions it but doesn't show the signature.
[ Parent | on HN ]
Re:What's Inside the EU Green Pass QR Code? by mmcnl on Tuesday June 22, 2021 @01:22PM (#27594438)
DCC (Digital Covid Certificate it's called, not Digital Green Pass) is essentially a spec for a QR code (as demonstrated nicely in this post) + an EU signing gateway which is used for signing the certificates. The EU acts similar to a CA in case of SSL certificates.
[ Parent | on HN ]
Re:What's Inside the EU Green Pass QR Code? by alkonaut on Tuesday June 22, 2021 @12:41PM (#27593923)
At the very least it should be signed. Also, the issuing authority is on there so it should be possible to verify the information if necessary too.
[ Parent | on HN ]
Re:What's Inside the EU Green Pass QR Code? by distances on Tuesday June 22, 2021 @11:25AM (#27592852)
They could also produce a fake vaccination booklet, or fake Covid test result. I'd guess both of these would be easier. All will result in forgery charges if caught. I think the chosen approach is pretty solid for the purpose.
[ Parent | on HN ]