3 ms·

The magic happens in the reader app. Does it have access to a passport ID? Image database? How is the one verifying the validity of the certificate supposed t

The magic happens in the reader app. Does it have access to a passport ID? Image database? How is the one verifying the validity of the certificate supposed to check if it's actually the holder of the certificate standing in front to clear admission?

Deukhoofd 5y ago
Check name, compare with identification, and done? Most of the EU has an identity document.
markus92 5y ago
The person reading can use their eyes to read a passport/photo ID ;) You don't need an app to do that.
- Kwantuum 5y ago
  Your id does not contained a cryptographically signed vaccination status, which this is.
  - avianlyric 5y ago
    You know it’s possible to carry ID and this QR code at the same time
- jeroenhd 5y ago
  Many forms of ID also have some form of NFC/RFID to read out data wirelessly. I don't know why you'd buy something to do it automatically, but you totally could. You'd still end up comparing a picture to someone's face, though, so you can't really remove the middle man without going into some dangerous facial recognition tech.
fabian2k 5y ago
You show your photo ID, and the person that is checking looks if the name on your ID matches the name in the QR code. The reader Apps are dumb, they only show the content of the QR code and verify that the signature is valid.
- emteycz 5y ago
  Yeah sure, how am I going to verify that, and what about my grandmother - I foresee many problems with doing that even as a programmer?
  - Aaargh20318 5y ago
    Your grandmother is a bouncer at a club ? Your granny doesn’t need to verify this, these are used by employees of venues that want to limit access to their facilities to people who are either vaccinated or tested negatively.
    - emteycz 5y ago
      I'm talking about people like me or my grandmother who want to verify that the guard at a club uses application that works fully offline and doesn't save any data - the QR code we're handing over contains our personal data and on top of that we're actually cryptographically verifying our whereabouts while using it, so I want to be absolutely sure the government doesn't have access directly without a court order. // yes I have had a real, serious problem with the government using data it got for other purposes against me for its own gain (I won the court, but it nearly destroyed my life and I'm still not where I was before and won't be for a long time). I'm pretty sure the guard doesn't give a flying fuck about my personal information, just like the programmers - so how do I verify myself? Or am I to stay at home forever if I care about my privacy? The EU said very different things about these issues, is that forgotten now? The same goes for the other identity-related EU initiatives, where did all the talk about privacy go? Was it just propaganda, because it certainly seems so now, as there are so many so obvious loopholes it can't be an accident?
      - Aaargh20318 5y ago
        I don't know in what country you are, but mine (the Netherlands) has open-sourced everything around the corona-check apps, including backend, design, etc. on GitHub (https://github.com/minvws https://github.com/minvws). If you or your granny aren't good at reading code, you just have to trust that other members of the public who are would have made some noise in the media if something fishy was going on.

Deukhoofd 5y ago

Check name, compare with identification, and done? Most of the EU has an identity document.

markus92 5y ago

The person reading can use their eyes to read a passport/photo ID ;) You don't need an app to do that.

Kwantuum 5y ago
Your id does not contained a cryptographically signed vaccination status, which this is.
- avianlyric 5y ago
  You know it’s possible to carry ID and this QR code at the same time
jeroenhd 5y ago
Many forms of ID also have some form of NFC/RFID to read out data wirelessly. I don't know why you'd buy something to do it automatically, but you totally could. You'd still end up comparing a picture to someone's face, though, so you can't really remove the middle man without going into some dangerous facial recognition tech.

fabian2k 5y ago

You show your photo ID, and the person that is checking looks if the name on your ID matches the name in the QR code. The reader Apps are dumb, they only show the content of the QR code and verify that the signature is valid.

emteycz 5y ago
Yeah sure, how am I going to verify that, and what about my grandmother - I foresee many problems with doing that even as a programmer?
- Aaargh20318 5y ago
  Your grandmother is a bouncer at a club ? Your granny doesn’t need to verify this, these are used by employees of venues that want to limit access to their facilities to people who are either vaccinated or tested negatively.
  - emteycz 5y ago
    I'm talking about people like me or my grandmother who want to verify that the guard at a club uses application that works fully offline and doesn't save any data - the QR code we're handing over contains our personal data and on top of that we're actually cryptographically verifying our whereabouts while using it, so I want to be absolutely sure the government doesn't have access directly without a court order. // yes I have had a real, serious problem with the government using data it got for other purposes against me for its own gain (I won the court, but it nearly destroyed my life and I'm still not where I was before and won't be for a long time). I'm pretty sure the guard doesn't give a flying fuck about my personal information, just like the programmers - so how do I verify myself? Or am I to stay at home forever if I care about my privacy? The EU said very different things about these issues, is that forgotten now? The same goes for the other identity-related EU initiatives, where did all the talk about privacy go? Was it just propaganda, because it certainly seems so now, as there are so many so obvious loopholes it can't be an accident?
    - Aaargh20318 5y ago
      I don't know in what country you are, but mine (the Netherlands) has open-sourced everything around the corona-check apps, including backend, design, etc. on GitHub (https://github.com/minvws https://github.com/minvws). If you or your granny aren't good at reading code, you just have to trust that other members of the public who are would have made some noise in the media if something fishy was going on.