Live data from Hacker News

I faked tons of Covid passes – “Weak Key Cryptography in real world”

ctrsec.io

161–170 of 222 posts

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#161

Earlier quoted context omitted.

Why though when it's very little effort to use a stronger key? What's the downside?

Dystopian sci-fi is for mental immunization, not emulation.

What do you mean by that?

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#162
post #21

Good! Keep it up. Let things be, enough of this vaccine pass comrade BS. We who are vaccinated should be at peace and trust this vaccine will reduce the likelihood of severe illness. Those who aren’t, I wish them the best, but that’s their choice. Hopefully this will finally encourage smokers to quit and the obese to cut out a few sodas per day.

Deliberately scheming to sneak a deadly virus into a populated area is practically an act of war. At the very least it’s murder.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#164
post #126

This kind of breach isn't possible in Australia since their laws can beat the laws of math. Countries with less powerful laws are apparently not so lucky. https://www.gizmodo.com.au/2017/07/prime-minister-says-the-l... (Yeah, tongue firmly in cheek. Laws of math oddly enough seem to work just fine for taxation, depreciation, etc etc)

Not sure if you're aware, but the Aussie covid vaccination "certificate" from the government App uses a "digital hologram" to prevent forgery.

It's essentially an animated gif.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#165
post #67
post #42

Earlier quoted context omitted.

Choosing not to be vaccinated is a harm to society. Being vaccinated isn't just about protecting yourself. It is people's choice not to be vaccinated, and they're responsible for the consequences of that choice, including not being allowed in spaces where they're a hazard to others.

No, stripping unvaccinated people of their fundamental freedoms (as happened in countries like Lithuania and Austria) is a harm to society. More than harm, it's a complete disintegration.

High on that list of fundamental freedoms is the right of free association.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#166
post #65

Earlier quoted context omitted.

Key size determines number of bytes the signature takes up, which is one of the determinants of the complexity of a QR code. I suppose if you don't know what you are doing, and want to reduce QR code complexity, you lower the key size. To turn up speculation to 100, this might also be a third world issue, because here in the west we have high quality smartphones with good cameras, but the smartphone cameras there mig…

Take a look at QR image in the post. I haven't seen a QR code in the first world that carries more data, especially not a printed one. It's doubtful they're optimizing for poor cameras or printers any more than is done in the first world, and to be clear, in the first world we still have to optimize for poor cameras and printers. Decreasing the message size while improving security would obviously be ideal and most l…

https://nzcp.covid19.health.nz/#examples

Here is the nz version

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#167
post #126

This kind of breach isn't possible in Australia since their laws can beat the laws of math. Countries with less powerful laws are apparently not so lucky. https://www.gizmodo.com.au/2017/07/prime-minister-says-the-l... (Yeah, tongue firmly in cheek. Laws of math oddly enough seem to work just fine for taxation, depreciation, etc etc)

Not sure if you're aware, but the Aussie covid vaccination "certificate" from the government App uses a "digital hologram" to prevent forgery. It's essentially an animated gif.

Unfortunately the governments implementing these measures seem absolutely determined to treat Orwell's 1984 as a training or howto manual. As we descend further into authoritarianism, tracking and other privacy busting measures will become even more normalised and entrenched. You'll soon need to show identity and other papers to get into a shop to buy a hammer.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#168
post #120

Earlier quoted context omitted.

> That's a ridiculous narrative for covid where vaccinated people are marginally less contagious than unvaccinated people. Almost two years in and people still don't understand that there is a difference in severity of an infection. When vaccinated, you are much less likely to develop severe symptoms and very unlikely to have to get hospitalized.

I don't know what you're after but that's literally what the sentence after the one you're quoting is saying.

Not after anything. I think I just stopped reading before that.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#169

The author went out of their way to hide the factors of N, presumably so that nobody else would actually be able to generate signed certificates. However, they did this by hiding half the digits of the factors. Revealing so many digits of the factors actually allows easily factoring the original number using a version of coppersmith's method (easy as in under a second on my laptop instead of the 9 hours on a distribu…

looks like there are more digits cropped out so it's going to make it a lot harder since you won't know which bits you have

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#170
post #115

Earlier quoted context omitted.

If only there was a super cheap, safe, effective and instant medical treatment that could prevent obesity or at least its negative health effects. Because if there was, and yet obese people refused to take it and consequently soaked up a lot of health-care resources, you can be sure they would be demonized just as much as people who refuse to take COVID vaccines.

> If only there was a super cheap, safe, effective and instant medical treatment that could prevent obesity or at least its negative health effects. It's called "don't overeat" and it's cheaper than the alternative. Virtually all massively obese people eat massive portions compared to the rest of us. They always have inane excuses about "glandular problems" and "genetics" but I've seen how they eat and I believe what…

You've explained the parent's joke ;)
Post reply on HN