9 ms·

The negative test result: https://pcr.euprava.gov.rs/validate.php?cqcode=1640187792DOH1rb5UHzHutVMKM8TZoXqZZfWoED2JaOoX5mfaeeZODIjRBn https://pcr.euprava.gov.r

The negative test result: https://pcr.euprava.gov.rs/validate.php?cqcode=1640187792DOH1rb5UHzHutVMKM8TZoXqZZfWoED2JaOoX5mfaeeZODIjRBn https://pcr.euprava.gov.rs/validate.php?cqcode=1640187792DOH... The positive test result: https://pcr.euprava.gov.rs/validate.php?cqcode=1640524880jk8GTmMJnQCO03nyzch9GPlevVO4rkO3Y!Ognqrxnz34PYV$Rm https://pcr.euprava.gov.rs/validate.php?cqcode=1640524880jk8...

mijotz 5y ago
kleton 5y ago
'Цовид-19' has to be one of the laziest transliterations I've ever seen. Coronavirus is spelled with an initial К in every Cyrillic-using language I'm aware of, not a Ц (ts) sound in English. It's basically a keyboard IME transliteration, since in Serbian, "c" would be the Roman equivalent of "ц".
- deleted 5y ago
  [deleted]
- disabled 5y ago
  Yep, Serbo-Croatian (technically Bosnian-Montenegrian-Croatian-Serbian) "K" for "koronavirus". The only difference between languages is Latin versus Cyrillic. Croatia, for example has its official coronavirus webpage as https://koronavirus.hr https://koronavirus.hr
  - bnt 5y ago
    Well, we read C as K, and most people spell English as they pronounce it, hence koronavirus :-)
  - ithkuil 5y ago
    > The only difference between languages is Latin versus Cyrillic. "a language is a dialect with an army and a navy" There are definitely more differences between the lexicon and grammar of those languages apart from the alphabet they are written with. Not very big differences, mind you. But ignoring them altogether or making them bigger than what they are enters the realm of politics. Anyway, the english wikipedia article does a decent job capturing a few key differences in the dialect continuum https://en.wikipedia.org/wiki/Comparison_of_standard_Bosnian,_Croatian,_Montenegrin_and_Serbian https://en.wikipedia.org/wiki/Comparison_of_standard_Bosnian...
    - disabled 5y ago
      Thank you for pointing this out. I kept out these differences on purpose, because it culturally divides us. I am well aware of them: Croatian is not my native language. But, I learned it and I am conversational in the Shtokavian (Štokavian) dialect. I am Štokavski. This is the standard dialect of Croatian, in Croatia. My family however were Čakavski. They spoke the Chakavian (Čakavian) dialect. They are from the islands of Croatia. Unfortunately, it is a dying dialect of Croatian that is Venetian in origin. It is not mutually intelligible with Štokavian, but everyone in Croatia seems fond of it.
      - anotherblue 5y ago
        Čakavski dialect is not Venetian in origin. It is Slavic, like rest of Croatian dialects, but with many loanwords of Italian and Venetian origin (or, more likely, from extinct Dalmatian [romance] language). While many romance loanwords and particular unique sound shifts make it sometimes hard to understand to rest of Croatian/Serbian/Bosniak crowd, it is not that you need a translator
mijotz 5y ago
panarky 5y ago
Unfortunately the Serbian registry doesn't provide a timestamp for when each test was taken. But our intrepid OSINT researcher discovered that the data in the QR code begins with a UNIX timestamp, such as cqcode=1640187792... and cqcode=1640524880... From that one might infer that the positive test actually happened 4 days after the negative test. The documents Djokovic provided to the court claim the positive test happened 7 days before the negative test.
- hanoz 5y ago
  Is there any reason to assume this timestamp represents the time the test was taken, rather than, say, the time the certificate was generated?
  - TylerLives 5y ago
    We need someone from Serbia who has done this test to verify.
    - hanoz 5y ago
      Meanwhile let's all accuse him of being a dirty cheat no matter how implausible such a potentially ruinous fraud on its inevitable discovery. After all the man is guilty of covid wrongthink, so who knows what depths he'd sink to.
      - aix1 5y ago
        The timeline doesn't look good for him regardless of which theory is correct: https://www.bbc.com/news/59939122 https://www.bbc.com/news/59939122
        logifail 5y ago
        > The timeline doesn't look good for him [..] There are scientists who state we're at the point where "we need to target the vulnerable" (rather than giving boosters to all over-12s) and that "there [is] no point in trying to stop all infections, and that at some point, society has to open up". Professor Sir Andrew Pollard, chairman of the [UK's] Joint Committee on Vaccination and Immunisation is one of them.
grujicd 5y ago
This is very sad development for me, Djokovic's countryman who really bought his story. Nut facts are facts. I can share my own (positive) test, which confirms timestamp and id theory. My test was taken on the 7th January, it was a rapid test, not a PCR. But it's in the same government database: https://pcr.euprava.gov.rs/validate.php?cqcode=1641591150Q!A!EMiAKyIGblU0kEC2nKRD2DNBb23KZ4J5dn8ruBpwqKP1PR https://pcr.euprava.gov.rs/validate.php?cqcode=1641591150Q!A... Timestamp: 1641591150, which translates to GMT: Friday, 7. January 2022. 21:32:30. That seems to be right, it was taken earlier on the 7th and probably entered later to the central database. Also, ID of my test is: 7601263. Djokovic IDs are 7371999 (16/12 test) and 7320919 (22/12 test). It really looks like IDs are incremental, and that his test that was supposedly taken on the 16th was taken on the later date. One consolation fact is that he wasn't positive when he took photos with kids on 17th. EDIT: I messed up and copied Novak's QR url! fixed now!
- grujicd 5y ago
  Ok, this is getting strange. There are two ways to get test results: - it's automatically sent to email (if they have it) - you can download it from ezdravlje.rs portal The test I shared above is the one I got on email. However, I went to portal, downloaded pdf, and now I have two copies. They're different! IDs and all the data are the same, but QR codes are different. This is the new one: https://pcr.euprava.gov.rs/validate.php?cqcode=1641923234g3DWOTqw9NocsR3M9sx2AnAAwbPVByAjUD$uXqiuc1q0gJjGwI https://pcr.euprava.gov.rs/validate.php?cqcode=1641923234g3D... Timestamp on new pdf is: 1641923234, which is GMT: Tuesday, 11. January 2022. 17:47:14 So it appears that timestamp is related to when pdf is generated, and when you download it from the portal it's generated at that point of time, i.e. there are no pdf documents sitting on government server! So this timestamp is definitely no proof of forgery. But test ID might be - that one is still suspicious. And one more thing, when I switch tabs with my two QR codes - page content is the same but shifted a bit. I didn't look into html/css to see what's different.
  - zo1 5y ago
    This is super important for everyone to see. The timestamp is not proof of time of test but rather the time that the test was "generated" for download. Anyone prominent on Twitter should respond and assist with this information. I've done these kinds of systems many times in the past and there could be any amount of reasons why a timestamp is included like this. Especially with weird government regulations, policies and rules that mandate all sorts of info to be included inside government documents. Like adding a year or date to when a company was registered to a company's company registration no.
hanoz 5y ago
I've just managed to get my ip address a 24 hour ban by tweeking the timestamp parameter once! Which is a pretty obvious DoS vulnerability if anyone wanted to disable a venue's pass verification ability.
- brokenmachine 5y ago
  How does that become a DoS? Spoofing ip's to get banned? Wouldn't you have to know the ip's that you wanted to get banned?
  - saberdancer 5y ago
    You need to be on the venues IP/WiFi. If the staff uses the same WiFi they will be banned as well.
  - hanoz 5y ago
    You turn up at a venue which is scanning these QR codes as part of some vaccinated only entrance policy, let them scan your amended code, you don't get in, nor does anyone else after you.
    - brokenmachine 5y ago
      But this isn't vaccination codes, it's a test. Do proof of vaccination codes use the same system in Serbia?

mijotz 5y ago

kleton 5y ago

'Цовид-19' has to be one of the laziest transliterations I've ever seen. Coronavirus is spelled with an initial К in every Cyrillic-using language I'm aware of, not a Ц (ts) sound in English. It's basically a keyboard IME transliteration, since in Serbian, "c" would be the Roman equivalent of "ц".

deleted 5y ago
[deleted]
disabled 5y ago
Yep, Serbo-Croatian (technically Bosnian-Montenegrian-Croatian-Serbian) "K" for "koronavirus". The only difference between languages is Latin versus Cyrillic. Croatia, for example has its official coronavirus webpage as https://koronavirus.hr https://koronavirus.hr
- bnt 5y ago
  Well, we read C as K, and most people spell English as they pronounce it, hence koronavirus :-)
- ithkuil 5y ago
  > The only difference between languages is Latin versus Cyrillic. "a language is a dialect with an army and a navy" There are definitely more differences between the lexicon and grammar of those languages apart from the alphabet they are written with. Not very big differences, mind you. But ignoring them altogether or making them bigger than what they are enters the realm of politics. Anyway, the english wikipedia article does a decent job capturing a few key differences in the dialect continuum https://en.wikipedia.org/wiki/Comparison_of_standard_Bosnian,_Croatian,_Montenegrin_and_Serbian https://en.wikipedia.org/wiki/Comparison_of_standard_Bosnian...
  - disabled 5y ago
    Thank you for pointing this out. I kept out these differences on purpose, because it culturally divides us. I am well aware of them: Croatian is not my native language. But, I learned it and I am conversational in the Shtokavian (Štokavian) dialect. I am Štokavski. This is the standard dialect of Croatian, in Croatia. My family however were Čakavski. They spoke the Chakavian (Čakavian) dialect. They are from the islands of Croatia. Unfortunately, it is a dying dialect of Croatian that is Venetian in origin. It is not mutually intelligible with Štokavian, but everyone in Croatia seems fond of it.
    - anotherblue 5y ago
      Čakavski dialect is not Venetian in origin. It is Slavic, like rest of Croatian dialects, but with many loanwords of Italian and Venetian origin (or, more likely, from extinct Dalmatian [romance] language). While many romance loanwords and particular unique sound shifts make it sometimes hard to understand to rest of Croatian/Serbian/Bosniak crowd, it is not that you need a translator

mijotz 5y ago

panarky 5y ago

Unfortunately the Serbian registry doesn't provide a timestamp for when each test was taken. But our intrepid OSINT researcher discovered that the data in the QR code begins with a UNIX timestamp, such as cqcode=1640187792... and cqcode=1640524880... From that one might infer that the positive test actually happened 4 days after the negative test. The documents Djokovic provided to the court claim the positive test happened 7 days before the negative test.

hanoz 5y ago
Is there any reason to assume this timestamp represents the time the test was taken, rather than, say, the time the certificate was generated?
- TylerLives 5y ago
  We need someone from Serbia who has done this test to verify.
  - hanoz 5y ago
    Meanwhile let's all accuse him of being a dirty cheat no matter how implausible such a potentially ruinous fraud on its inevitable discovery. After all the man is guilty of covid wrongthink, so who knows what depths he'd sink to.
    - aix1 5y ago
      The timeline doesn't look good for him regardless of which theory is correct: https://www.bbc.com/news/59939122 https://www.bbc.com/news/59939122
      - logifail 5y ago
        > The timeline doesn't look good for him [..] There are scientists who state we're at the point where "we need to target the vulnerable" (rather than giving boosters to all over-12s) and that "there [is] no point in trying to stop all infections, and that at some point, society has to open up". Professor Sir Andrew Pollard, chairman of the [UK's] Joint Committee on Vaccination and Immunisation is one of them.

grujicd 5y ago

This is very sad development for me, Djokovic's countryman who really bought his story. Nut facts are facts. I can share my own (positive) test, which confirms timestamp and id theory. My test was taken on the 7th January, it was a rapid test, not a PCR. But it's in the same government database: https://pcr.euprava.gov.rs/validate.php?cqcode=1641591150Q!A!EMiAKyIGblU0kEC2nKRD2DNBb23KZ4J5dn8ruBpwqKP1PR https://pcr.euprava.gov.rs/validate.php?cqcode=1641591150Q!A... Timestamp: 1641591150, which translates to GMT: Friday, 7. January 2022. 21:32:30. That seems to be right, it was taken earlier on the 7th and probably entered later to the central database. Also, ID of my test is: 7601263. Djokovic IDs are 7371999 (16/12 test) and 7320919 (22/12 test). It really looks like IDs are incremental, and that his test that was supposedly taken on the 16th was taken on the later date. One consolation fact is that he wasn't positive when he took photos with kids on 17th. EDIT: I messed up and copied Novak's QR url! fixed now!

grujicd 5y ago
Ok, this is getting strange. There are two ways to get test results: - it's automatically sent to email (if they have it) - you can download it from ezdravlje.rs portal The test I shared above is the one I got on email. However, I went to portal, downloaded pdf, and now I have two copies. They're different! IDs and all the data are the same, but QR codes are different. This is the new one: https://pcr.euprava.gov.rs/validate.php?cqcode=1641923234g3DWOTqw9NocsR3M9sx2AnAAwbPVByAjUD$uXqiuc1q0gJjGwI https://pcr.euprava.gov.rs/validate.php?cqcode=1641923234g3D... Timestamp on new pdf is: 1641923234, which is GMT: Tuesday, 11. January 2022. 17:47:14 So it appears that timestamp is related to when pdf is generated, and when you download it from the portal it's generated at that point of time, i.e. there are no pdf documents sitting on government server! So this timestamp is definitely no proof of forgery. But test ID might be - that one is still suspicious. And one more thing, when I switch tabs with my two QR codes - page content is the same but shifted a bit. I didn't look into html/css to see what's different.
- zo1 5y ago
  This is super important for everyone to see. The timestamp is not proof of time of test but rather the time that the test was "generated" for download. Anyone prominent on Twitter should respond and assist with this information. I've done these kinds of systems many times in the past and there could be any amount of reasons why a timestamp is included like this. Especially with weird government regulations, policies and rules that mandate all sorts of info to be included inside government documents. Like adding a year or date to when a company was registered to a company's company registration no.

hanoz 5y ago

I've just managed to get my ip address a 24 hour ban by tweeking the timestamp parameter once! Which is a pretty obvious DoS vulnerability if anyone wanted to disable a venue's pass verification ability.

brokenmachine 5y ago
How does that become a DoS? Spoofing ip's to get banned? Wouldn't you have to know the ip's that you wanted to get banned?
- saberdancer 5y ago
  You need to be on the venues IP/WiFi. If the staff uses the same WiFi they will be banned as well.
- hanoz 5y ago
  You turn up at a venue which is scanning these QR codes as part of some vaccinated only entrance policy, let them scan your amended code, you don't get in, nor does anyone else after you.
  - brokenmachine 5y ago
    But this isn't vaccination codes, it's a test. Do proof of vaccination codes use the same system in Serbia?