Live data from Hacker News

I faked tons of Covid passes – “Weak Key Cryptography in real world”

ctrsec.io

101–110 of 222 posts

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#101
post #88

Earlier quoted context omitted.

How is locking down only the anti-vax retards any worse then locking down everyone?

"how is shooting one person worse than shooting two people?" how about we don't shoot anyone.

If you have the magic recipe for curing everyone that gets sick, I am all for it.

Because metaphorically "not shooting anyone" does not equate to not having a lockdown, if that results in hundreds of literal deaths every day.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#102
post #65

Earlier quoted context omitted.

The real question is why use 512 bit RSA when you can use 2048+?

Key size determines number of bytes the signature takes up, which is one of the determinants of the complexity of a QR code. I suppose if you don't know what you are doing, and want to reduce QR code complexity, you lower the key size. To turn up speculation to 100, this might also be a third world issue, because here in the west we have high quality smartphones with good cameras, but the smartphone cameras there mig…

Take a look at QR image in the post. I haven't seen a QR code in the first world that carries more data, especially not a printed one. It's doubtful they're optimizing for poor cameras or printers any more than is done in the first world, and to be clear, in the first world we still have to optimize for poor cameras and printers.

Decreasing the message size while improving security would obviously be ideal and most likely quite achievable, but there are plenty of wealthy municipalities in the US who don't exactly cover themselves in honor in similar situations.

While I'm not at all saying it's illegitimate to speculate on wealth disparities as a cause, in this case I think it's lazy to call this a "third world issue", even with speculation up to 100.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#103
post #88

Earlier quoted context omitted.

"how is shooting one person worse than shooting two people?" how about we don't shoot anyone.

If you have the magic recipe for curing everyone that gets sick, I am all for it. Because metaphorically "not shooting anyone" does not equate to not having a lockdown, if that results in hundreds of literal deaths every day.

hundreds!

my god there isn't a jak soy enough for you

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#104
post #58

Earlier quoted context omitted.

no but it's aesthetically disgusting

Please post photos of yourself. Would help us to put in context what aesthetic perfection looks like.

only if you post evidence of your possessing qualia (I have severe doubts)

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#105
post #28

Here in Mexico the gov issued vaccination certificates always have errors. People have resorted to downloading the PDF and "hacking it" (editing it in Acrobat). Nobody ever actually checks whether the certificate is valid or not.

I think most people who are smart enough to fake the certificate are smart enough to get vaccinated. What do you win by using a fake certificate vs. getting protected by the vaccine?

I know many educated and smart people who are anti vaccine, including doctors, some of them got fake certificates and that is in a modern western country. Nobody is checking it properly, they just see the green colour and let you in, nobody even compare the name to some ID. So the benefit is to get into places they couldn't get into without the vaccine.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#106
post #94

Earlier quoted context omitted.

And yet obesity whilst being a problem for decades has not caused an epidemic of obese people. Why is that ? Because obesity is not contagious and most people don't make decisions about what they eat and their activity levels based on choices other people make.

> And yet obesity whilst being a problem for decades has not caused an epidemic of obese people. Really? Over 40% of US adults being obese[1] is not an epidemic? [1] https://www.cdc.gov/obesity/data/adult.html

I know this may come as a shock but the world is bigger than the US.

COVID strikes people of all backgrounds not just those from wealthy countries who can afford to eat well.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#107

Earlier quoted context omitted.

I think most people who are smart enough to fake the certificate are smart enough to get vaccinated. What do you win by using a fake certificate vs. getting protected by the vaccine?

You can sell fake ones to retards who are scared of the vaccine. Some might be stupid enough to pay good money for it.

This is disrespectful to the countless people who have suffered injuries and death from the covid vaccine.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#108

Earlier quoted context omitted.

You can sell fake ones to retards who are scared of the vaccine. Some might be stupid enough to pay good money for it.

This is disrespectful to the countless people who have suffered injuries and death from the covid vaccine.

Please don't bring your antivaxxer lies here. The documented rates of injury/death caused by the major vaccines are incredibly low.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#109
post #65

Earlier quoted context omitted.

Key size determines number of bytes the signature takes up, which is one of the determinants of the complexity of a QR code. I suppose if you don't know what you are doing, and want to reduce QR code complexity, you lower the key size. To turn up speculation to 100, this might also be a third world issue, because here in the west we have high quality smartphones with good cameras, but the smartphone cameras there mig…

Take a look at QR image in the post. I haven't seen a QR code in the first world that carries more data, especially not a printed one. It's doubtful they're optimizing for poor cameras or printers any more than is done in the first world, and to be clear, in the first world we still have to optimize for poor cameras and printers. Decreasing the message size while improving security would obviously be ideal and most l…

Have you ever looked at the size of the standardize EU QR code[0] ? At just a glance it looks at least 2-3x denser than the one presented in the article. Also, on the specification published by the EU[1], they seem to advise for a 25-60cm size, and also warn about using When I was vaccinated, I was given an A4 sheet with those QR codes on it, and I really wouldn't want to scan those with a crappy camera.

[0]: https://gir.st/blog/greenpass.html [1]: https://ec.europa.eu/health/sites/default/files/ehealth/docs... § 4.2.2

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#110
post #23

Earlier quoted context omitted.

> Good! Keep it up. Let things be, enough of this vaccine pass comrade BS. You're going to get heavily downvoted, but I totally agree. The vaccine pass is a complete farce. I even have non-technical friends that have faked vaccine passes. For someone even remotely technical, it's trivial to Photoshop. If only we had the same fervor when it comes to demonizing weight gain, we could save 10x more lives.

5+ million people have died from COVID. Despite having most of the world being under lockdown as well as increasing vaccination. Without those measures it could easily have been hundreds of millions. It is ridiculous and baseless to compare it to obesity which is not causing any significant strain on the hospital system like COVID is.

Fatties are dying from covid at a much, much higher rate than healthy people.
Post reply on HN