What will last longer, the pandemic or a poorly implemented digital identity platform?
Private keys used to sign EU Digital Covid Certificate might have been leaked
51–60 of 214 posts
Re: Private keys used to sign EU Digital Covid Certificate might have been leaked
#52Very worrying if true
Re: Private keys used to sign EU Digital Covid Certificate might have been leaked
#53Earlier quoted context omitted.
I am not using an app. I am not installing any third party apps on my phone, government or not, period. The certificate I am using is printed on a piece of paper I carry with me.
Can't you keep it in a jpeg file and show that?
Re: Private keys used to sign EU Digital Covid Certificate might have been leaked
#54Earlier quoted context omitted.
At least in UK the app will generate a new certificate on the fly.
It's definitely a solution when you have an app (assuming you have a 3rd party source of identification of users), but since it's a French key, a sizeable portion of people, mostly elderly, are not using the "official" app but a paper printed QR code that was given to them at the time of the second injection (or a picture of said code). Since the French app is pretty terrible (it used to be the barely functional cont…
Re: Private keys used to sign EU Digital Covid Certificate might have been leaked
#55What will last longer, the pandemic or a poorly implemented digital identity platform?
More than 80% of Americans have coronavirus antibodies acquired through infection or vaccination, according to a new study of over 1.4 million blood donations across the U.S.
https://www.miamiherald.com/news/coronavirus/article25398704...
And as reported on by Bloomberg and other media, the antibodies from past infection confer protection equal to or greater than Pfizer.
https://www.bloomberg.com/news/articles/2021-08-27/previous-...
"Previous Covid Prevents Delta Infection Better Than Pfizer Shot"
And those are slated to last for decades. Source:
https://www.nature.com/ articles/d41586-021-01442-9
"Had COVID? You’ll probably make antibodies for a lifetime"
On the exact terms given to us by Fauci and other public servants, there is no more reason for these covid mandates to exist. Should be optional across the board, including in EU countries where the threshold has been reached. Then there’s no more need to secure these keys.
Re: Private keys used to sign EU Digital Covid Certificate might have been leaked
#56Certificates in Sweden are valid for 3 months. So, if it's the same for Italy then it's not good but not catastrophic either.
Dunno if in the end they also put in place some kind of blacklisting for leaked certificates
Re: Private keys used to sign EU Digital Covid Certificate might have been leaked
#57Earlier quoted context omitted.
Apparently the leaked keys have already been blacklisted. So all certificates signed with the leaked keys will need to be reissued. FWIW, it wasn't the Italian key that was leaked.
They seem to be quite thorough with checking QR certificates in Italy so it doesn't surprize me if this was discovered there.
Re: Private keys used to sign EU Digital Covid Certificate might have been leaked
#58Earlier quoted context omitted.
As opposed to private entities that are known to be able to keep keys secret all the time?
Don't know if this is whst the OP has in mind, but the first thing that comes to my mind is the backdoor that many states want to impose on all encrypted communications. That would create a single point of attack, so even assuming competence, it makes the system significantly weaker. And this episode if confirmed makes competence a strong assumption.
Re: Private keys used to sign EU Digital Covid Certificate might have been leaked
#59Does it have to be the keys that are leaked? There should be hundreds of healthcare workers who have access to the covid certificate system. I find it more likely there's an option to enter custom data for non-citizens and someone was just messing around.