Live data from Hacker News

I faked tons of Covid passes – “Weak Key Cryptography in real world”

ctrsec.io

51–60 of 222 posts

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#51
post #47

It is easier to find someone who give you just papers and flush your dose out. But anyway... Proof of anything based on digital ID is pointless and should be abandoned as soon as possible.

Security theatre, like washing streets with chlorine solution

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#52

Anyone knows if this is applicable to Covid passes used in the European Union as well?

From this [0] list it seems there are a bunch of RSA root certificates, but they all use RSA 2048 or 4096, both of which are still secure (with 4096 having diminishing returns compared to RSA 2048 [1]).

The article was about RSA 512 which has been known to be weak and crackable for a long time [2].

[0]: https://github.com/eu-digital-green-certificates/dgc-partici...

[1]: https://www.gnupg.org/faq/gnupg-faq.html#no_default_of_rsa40...

[2]: https://it.slashdot.org/story/99/08/29/0213230/512-bit-rsa-k...

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#53
post #46

Short version if they get taken down: The validation apps used a 512 bit RSA public key. They used a factoring app and spend $200 on amazon to factor the private key from the public key. They were then able to generate the COVID passes. This is for the Honai Police Dept.

Why would anyone use RSA when we have X25519?

The real question is why use 512 bit RSA when you can use 2048+?

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#54
post #45

Earlier quoted context omitted.

Trying to find some actual data, I googled "covid deaths by month" and I stumbled upon this: https://www.worldometers.info/coronavirus/coronavirus-death-... Notably, the "Growth Factor" plot looks qualitatively very similar from April 2020 until now. Before then, the data looks more noisy to me but not necessarily different on average. I believe folk started getting vaccinated in December 2020? Based on that plot, it…

"Covid deaths" are also a very meaningless metric where every country or region does whatever it wants. Excess deaths would be a better metric, but also hard to remove from there all the damage done by lockdowns, stress generated on the population, and by hospitals stopping attending other diseases in some places.

Why would you remove the excess deaths caused by hospitals not being able to handle non-COVID illnesses due to taking care of COVID patients?

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#55
post #6

I remember here in Canada there were concerns about this sort of thing when rolling out our proof-of-vaccination system, but practically speaking, the number of people with both the technical understanding and inclination to do this is surely too small to have a meaningful impact on COVID spread.

No one has actually scanned my QR code so far, only scrolled down to see it say "two doses". So it doesn't matter.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#56
post #46

Earlier quoted context omitted.

Why would anyone use RSA when we have X25519?

The real question is why use 512 bit RSA when you can use 2048+?

So it can fit on a reasonably sized QR code probably.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#57
post #42

Earlier quoted context omitted.

Choosing not to be vaccinated is a harm to society. Being vaccinated isn't just about protecting yourself. It is people's choice not to be vaccinated, and they're responsible for the consequences of that choice, including not being allowed in spaces where they're a hazard to others.

That's a ridiculous narrative for covid where vaccinated people are marginally less contagious than unvaccinated people. The main benefit of the covid vaccine is reducing symptoms when you get covid and reducing hospitalisations. If you are worried about getting covid, vaccinate yourself. That's it, you don't need anyone else to be vaccinated.

"immunisation with either the Pfizer or AstraZeneca vaccine reduced the chance of onward virus transmission by 40–60%" [1]

That is not marginally less and which is why people should be vaccinated. Also unvaccinated people place significant strain on the hospital system preventing elective surgery and increasing my costs as a taxpayer.

[1] https://khub.net/documents/135939561/390853656/Impact+of+vac...

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#58
post #32
post #23

Earlier quoted context omitted.

> Good! Keep it up. Let things be, enough of this vaccine pass comrade BS. You're going to get heavily downvoted, but I totally agree. The vaccine pass is a complete farce. I even have non-technical friends that have faked vaccine passes. For someone even remotely technical, it's trivial to Photoshop. If only we had the same fervor when it comes to demonizing weight gain, we could save 10x more lives.

weight gain isn't contagious

no but it's aesthetically disgusting

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#59
post #23
post #21

Good! Keep it up. Let things be, enough of this vaccine pass comrade BS. We who are vaccinated should be at peace and trust this vaccine will reduce the likelihood of severe illness. Those who aren’t, I wish them the best, but that’s their choice. Hopefully this will finally encourage smokers to quit and the obese to cut out a few sodas per day.

> Good! Keep it up. Let things be, enough of this vaccine pass comrade BS. You're going to get heavily downvoted, but I totally agree. The vaccine pass is a complete farce. I even have non-technical friends that have faked vaccine passes. For someone even remotely technical, it's trivial to Photoshop. If only we had the same fervor when it comes to demonizing weight gain, we could save 10x more lives.

5+ million people have died from COVID.

Despite having most of the world being under lockdown as well as increasing vaccination. Without those measures it could easily have been hundreds of millions.

It is ridiculous and baseless to compare it to obesity which is not causing any significant strain on the hospital system like COVID is.

Re: I faked tons of Covid passes – “Weak Key Cryptography in real world”

#60

Earlier quoted context omitted.

That's a ridiculous narrative for covid where vaccinated people are marginally less contagious than unvaccinated people. The main benefit of the covid vaccine is reducing symptoms when you get covid and reducing hospitalisations. If you are worried about getting covid, vaccinate yourself. That's it, you don't need anyone else to be vaccinated.

"immunisation with either the Pfizer or AstraZeneca vaccine reduced the chance of onward virus transmission by 40–60%" [1] That is not marginally less and which is why people should be vaccinated. Also unvaccinated people place significant strain on the hospital system preventing elective surgery and increasing my costs as a taxpayer. [1] https://khub.net/documents/135939561/390853656/Impact+of+vac...

> "immunisation with either the Pfizer or AstraZeneca vaccine reduced the chance of onward virus transmission by 40–60%" [1]

so why are there still soaring case rates in the countries with the most vaccines? I'll trust my lying eyes, thank you.

it's honestly insulting that you can post some pissant "study" like this and expect to be taken seriously when anyone can just look at the case rates and vax rates by country and see that it's obviously wrong.

Post reply on HN