PSA: Vaccine certificate QR code contains easily decoded personal information - don't post it on social media

[Jan]

Warning over vaccine certificate personal information

The QR code on South Africa’s Covid–19 vaccine certificate contains personal information that is easily decoded, and should be treated like any medical record.

People who have been vaccinated in South Africa should therefore not post their vaccine certificate QR codes on social media.

 

[Jola]

Well, arguably all personal information has already been hacked from ANC Government websites and is freely available on the internet ???

 

[Jan]

Well, arguably all personal information has already been hacked from ANC Government websites and is freely available on the internet ???

Not to mention the credit bureau, debt collectors, and insurance companies that have been pwned or the real estate company that exposed all our data on a public webserver.

Don't know whether click the laugh or cry reaction on your post.

 

[ShaunSA]

Unless your medical record included something like penis enhancement surgery I wouldn't be too fussed

 

[konfab]

“The QR code will have cryptographic signature linked to public key infrastructure (PKI) to prevent any fraudulent production of vaccination cards,” explained Wolmarans.

That isn't going to work. The EU passport has exactly the same flaws.

https://www.dw.com/en/security-flaws-uncovered-in-eu-vaccination-passport/a-58129016

 

[UrBaN963]

Unless your medical record included something like penis enhancement surgery I wouldn't be too fussed

Thanks for the warning.

 

[KikzAzz]

 

[KikzAzz]

Unless your medical record included something like penis enhancement surgery I wouldn't be too fussed

And if it was a reduction?

 

[ShaunSA]

And if it was a reduction?

I said enhancement.... not downgrade

 

[animehero]

I laughed at Newphone Whodis

 

[heartbroken]

I am sorry, but isn't that the whole point? To make you're information available instantly without having to fill in a bunch of crap?

 

[backstreetboy]

View attachment 1165406

Turn off your VPN or custom dns.

 

[ShaunSA]

What about apps like tindr and grindr? Surely people should be entitled to know the status of potential shags?

 

[neoprema]

Lol many of us knew it was Base64 the day it came out. Its not a secret.

Also, we flaunt copies of our IDs to all and sundry every day. If you think your vaccine cert QR code is leaking your identity I have news for you...

 

[Pineapple Smurf]

What about apps like tindr and grindr? Surely people should be entitled to know the status of potential shags?

Agree
Even @EMAM is now fully vaxxed

 

[LCBXX]

I wonder why the same effective process cannot be implemented to fix the Drivers Licencing debacle.

 

[konfab]

Lol many of us knew it was Base64 the day it came out. Its not a secret.

Also, we flaunt copies of our IDs to all and sundry every day. If you think your vaccine cert QR code is leaking your identity I have news for you...

There is a world of difference between an intentionally badly copied ID, and a machine readable QR code.

 

[Unreal]

Wait. Will we have to produce our ID alongside the vaccine certificate???(Otherwise how will they know we are who we say we are?)
I’ve lived in this era before and it did not end well)

 

[maxxis]

*laughs in POPI act

 

[Apogee]

Not to mention the credit bureau, debt collectors, and insurance companies that have been pwned or the real estate company that exposed all our data on a public webserver.

Don't know whether click the laugh or cry reaction on your post.

Just received one of those emails today that correctly identified one of my old passwords and tried to blackmail me into paying the ransom in crypto, or otherwise expose personal info.