> Starting by reversing and modifying the official app. The QR might not verify (assuming network connectivity), or it might be someone else, but will it be che

> Starting by reversing and modifying the official app. The QR might not verify (assuming network connectivity), or it might be someone else, but will it be checked? Done, in August. [0] And the QR Code validates. > Can't wait to see what data is in the real QR codes. According to the talk, it's a timestamp, and id and what seems like a session-cookie-ish encrypted blob. [0] https://www.youtube.com/watch?v=oux3tI2V0sY https://www.youtube.com/watch?v=oux3tI2V0sY