3 ms·

Name+DOB in digital form is more than enough to track people, even with an offline verification process: We can expect that any number of "interested parties" w

Name+DOB in digital form is more than enough to track people, even with an offline verification process: We can expect that any number of "interested parties" will attempt to get access to the computer systems of venues operating these QR code scanners, or of their suppliers. Having someone at the door look at a paper ICVP and a photo ID with their analog eyes has much better privacy properties. (Still bad though.) https://en.wikipedia.org/wiki/International_Certificate_of_Vaccination_or_Prophylaxis https://en.wikipedia.org/wiki/International_Certificate_of_V...

supermatt 5y ago
They are still using their "analog eyes". The verifier app is a dumb app that simply verifies the signature of the QR code payload and displays the relevant info on screen, which they look at with their analog eyes and compare to the photo id. The only network activity and/or storage is related to downloading the public keys of the issuing authorities. Source code is available on github.
- flotzam 5y ago
  My point was that once you make that data machine-readable, it's not good enough to have privacy-by-policy of not storing it - IT security being what it is.
bellyfullofbac 5y ago
Ah, the threat of the imaginary hackers ("interested parties"). The QR code scanners will probably just be the official app installed on smartphones the venue will need to supply to the security personnel. Who's going to hack this? Banks can already track your credit card payments to figure out your profile, Google can track your location through your phone. Russian, Chinese or North Korean hackers probably don't care about where you spend your evenings.
- flotzam 5y ago
  > Ah, the threat of the imaginary hackers "The imaginary is that which tends to become real" -André Breton > Banks can already track your credit card payments to figure out your profile, Google can track your location through your phone. For people who don't even avoid these easily defeated tracking vectors (with cash and de-googling), sure, vaccine passport tracking won't make a big difference.
  - deleted 5y ago
    [deleted]
  - bellyfullofbac 5y ago
    Groan, "let me put a random name to some saying to justify my actions"... Just because you can find a quote you think is profound and attach a name to it, doesn't justify super-paranoia. Do you get out of the house, or are you avoiding the virus? Life's about judging risks and benefits, and IMO you're way overblowing the risk of these hackers. What Andre Breton thinks is irrelevant.

supermatt 5y ago

They are still using their "analog eyes". The verifier app is a dumb app that simply verifies the signature of the QR code payload and displays the relevant info on screen, which they look at with their analog eyes and compare to the photo id. The only network activity and/or storage is related to downloading the public keys of the issuing authorities. Source code is available on github.

flotzam 5y ago
My point was that once you make that data machine-readable, it's not good enough to have privacy-by-policy of not storing it - IT security being what it is.

bellyfullofbac 5y ago

Ah, the threat of the imaginary hackers ("interested parties"). The QR code scanners will probably just be the official app installed on smartphones the venue will need to supply to the security personnel. Who's going to hack this? Banks can already track your credit card payments to figure out your profile, Google can track your location through your phone. Russian, Chinese or North Korean hackers probably don't care about where you spend your evenings.

flotzam 5y ago
> Ah, the threat of the imaginary hackers "The imaginary is that which tends to become real" -André Breton > Banks can already track your credit card payments to figure out your profile, Google can track your location through your phone. For people who don't even avoid these easily defeated tracking vectors (with cash and de-googling), sure, vaccine passport tracking won't make a big difference.
- deleted 5y ago
  [deleted]
- bellyfullofbac 5y ago
  Groan, "let me put a random name to some saying to justify my actions"... Just because you can find a quote you think is profound and attach a name to it, doesn't justify super-paranoia. Do you get out of the house, or are you avoiding the virus? Life's about judging risks and benefits, and IMO you're way overblowing the risk of these hackers. What Andre Breton thinks is irrelevant.