Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Djokovic's PCR test was manipulated?

twitter.com

Post reply on HN
Print view View original

271–280 of 383 posts

Re: Djokovic's PCR test was manipulated?

#271

Post by confiq »

input_sh wrote: post #208
bellyfullofbac wrote: post #126

Earlier quoted context omitted.

But Serbia's system seems flawed, the EU system has all the data encoded in the QR-code, including name, the date the test was performed, the sort of test (PCR or antigen), and the result, plus a digital signature to prevent changing of those fields. And the QR code is given to the person and is static. The app that checks it checks that the document hasn't been modified by verifying the digital signature. What Serbi…

Worth pointing out that this is Serbia's internal system, but you can also request EU QR from the same website. Serbia's one of 33 non-EU countries whose centralised system is up to EU standard, and as such you can get both the Serbian QR code and the EU QR code. As such, assuming no shenanigans (even though things point otherwise), he should have no problem converting it to the EU QR code and presenting that.

Ohh, so Israel is one of these 33. Good to know!

Re: Djokovic's PCR test was manipulated?

#272

Post by tut-urut-utut »

aix1 wrote: post #263
tut-urut-utut wrote: post #236

Earlier quoted context omitted.

It says results were issued / ready, not that he received it. And given they were ready at 8pm it’s quite possible that the guy that makes Djokovics mail account was long gone. It may even have landed in the Spam folder if he is using Gmail (happened to me once).

C'mon, we're all adults here (and so is he). The "dog ate my homework" defense doesn't really cut it among grown-ups.

Exactly, this is a potential criminal offence in Serbia, and school rules don’t apply here.

It’s up to the court to decide what happened. I guess that Serbian courts can get the details about the results delivery. All it has to do is ask email providers to check logs, both on the sending and receiving side.

As always, it’s the one making accusation that needs to provide a proof.

On the other side, he can claim before Serbian court that all is five and the test was fake, but he can’t be processed about that in Serbia, since he neither faked nor used it there. And in Australia he can claim test is valid, and Australia would need to prove it’s fake if the want to cancel his visa. Which they cannot prove that easily, since Serbian authorities are not obliged to jump on immediately on the Australian request.

Yes, it would be a loophole and playing two legal systems, but that’s what companies do all the time when it comes to taxes.

Re: Djokovic's PCR test was manipulated?

#273

Post by YXNjaGVyZWdlbgo »

ls15 wrote: post #237
YXNjaGVyZWdlbgo wrote: post #215

Earlier quoted context omitted.

It's totally anonymous the only thing that makes it identifable is you telling someone else your url. It's fine.

How do you use the certificate for free movement without giving away the url to people that you don't know?

Is this some sort of fallacy I don't understand? If you are travelling internationally your are identified no matter what and even before covid you had to show proof of vaccination for different parts of the world.

Re: Djokovic's PCR test was manipulated?

#274

Post by brokenmachine »

hanoz wrote: post #149
TomAnthony wrote: post #35

The negative test result: https://pcr.euprava.gov.rs/validate.php?cqcode=1640187792DOH... The positive test result: https://pcr.euprava.gov.rs/validate.php?cqcode=1640524880jk8...

I've just managed to get my ip address a 24 hour ban by tweeking the timestamp parameter once! Which is a pretty obvious DoS vulnerability if anyone wanted to disable a venue's pass verification ability.

How does that become a DoS? Spoofing ip's to get banned? Wouldn't you have to know the ip's that you wanted to get banned?

Re: Djokovic's PCR test was manipulated?

#275

Post by ithkuil »

disabled wrote: post #111
kleton wrote: post #90

Earlier quoted context omitted.

'Цовид-19' has to be one of the laziest transliterations I've ever seen. Coronavirus is spelled with an initial К in every Cyrillic-using language I'm aware of, not a Ц (ts) sound in English. It's basically a keyboard IME transliteration, since in Serbian, "c" would be the Roman equivalent of "ц".

Yep, Serbo-Croatian (technically Bosnian-Montenegrian-Croatian-Serbian) "K" for "koronavirus". The only difference between languages is Latin versus Cyrillic. Croatia, for example has its official coronavirus webpage as https://koronavirus.hr

> The only difference between languages is Latin versus Cyrillic.

"a language is a dialect with an army and a navy"

There are definitely more differences between the lexicon and grammar of those languages apart from the alphabet they are written with.

Not very big differences, mind you. But ignoring them altogether or making them bigger than what they are enters the realm of politics.

Anyway, the english wikipedia article does a decent job capturing a few key differences in the dialect continuum https://en.wikipedia.org/wiki/Comparison_of_standard_Bosnian...

Re: Djokovic's PCR test was manipulated?

#276

Post by saberdancer »

nikcub wrote: post #261
samwillis wrote: post #200

Earlier quoted context omitted.

I believe the “confirmation code” that’s higher for 16th than the 22nd test is still suspicious though. 16th: 7371999-259039 22nd: 7320919-259039 Does anyone have an explanation of how that code works. Could it have been related to a manufacturing batch of tests that’s been used out of order? Those of you here with test results how does that code relate to your testing date?

I wouldn't have bet a public accusation of this magnitude on those auto-incrementing ID's. There's a possibility the earlier positive test was conducted privately and was only registered with the government at a later date when he knew it would be required for visa purposes.

The name of the institution that conducted the test is on the test result. It's a different one but I don't know if they would constitute private or public and how it works in Serbia.

Re: Djokovic's PCR test was manipulated?

#277

Post by dang »

jgwil2 wrote: post #249
dang wrote: post #179

Earlier quoted context omitted.

Changed from https://twitter.com/zerforschung/status/1480919124117274625 . We have the deepest respect for the German language, but HN is an English language site and posts here need to be in English. It's hard enough to get people to read the articles even when they are.

If that's a hard requirement, you should consider adding it to the guidelines because it is currently undocumented.

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

There are a ton of things like that. If we added them all to the guidelines, no one would read the guidelines. I fear they're already too long.

Re: Djokovic's PCR test was manipulated?

#278

Post by saberdancer »

brokenmachine wrote: post #274
hanoz wrote: post #149

Earlier quoted context omitted.

I've just managed to get my ip address a 24 hour ban by tweeking the timestamp parameter once! Which is a pretty obvious DoS vulnerability if anyone wanted to disable a venue's pass verification ability.

How does that become a DoS? Spoofing ip's to get banned? Wouldn't you have to know the ip's that you wanted to get banned?

You need to be on the venues IP/WiFi. If the staff uses the same WiFi they will be banned as well.

Re: Djokovic's PCR test was manipulated?

#279

Post by saberdancer »

Someone plotted test result IDs and times and the outlier is Djokovic's positive test - https://twitter.com/msuvakov/status/1481018537368035330

From the whole timeline, it would look to me as someone created a later test result that they backdated for him to be able to apply for a Visa. This would explain why Djokovic was out in public at the time he was apparently positive (I doubt he would have public appearances after a day after a positive test) and it would explain the test result ID discrepancy.

It could also explain why the positive test result was generated on 26th and the negative one on 22nd.

Re: Djokovic's PCR test was manipulated?

#280

Post by hanoz »

brokenmachine wrote: post #274
hanoz wrote: post #149

Earlier quoted context omitted.

I've just managed to get my ip address a 24 hour ban by tweeking the timestamp parameter once! Which is a pretty obvious DoS vulnerability if anyone wanted to disable a venue's pass verification ability.

How does that become a DoS? Spoofing ip's to get banned? Wouldn't you have to know the ip's that you wanted to get banned?

You turn up at a venue which is scanning these QR codes as part of some vaccinated only entrance policy, let them scan your amended code, you don't get in, nor does anyone else after you.
Post reply on HN