Posted on 10/28/2021 10:30:30 AM PDT by Mount Athos
The private key used to sign EU Digital Covid certificates has been reportedly leaked and is being circulated on messaging apps and online data breach marketplaces.
The key has also been misused to generate forged certificates, such as those for Adolf Hitler, Mickey Mouse, Sponge Bob—all of which are being recognized as valid by the official government apps.
The Digital Covid certificate, or the "Green Pass" helps European Union residents travel across borders seamlessly by proving that they have either been vaccinated against COVID-19, received a negative test result, or successfully recovered from COVID-19.
"On various groups (Telegram mainly) are circulating several forged Green Pass with valid signature... There is the possibility that a database of private keys is compromised and this may [end] up in a break of the chain of trust in the Green Pass architecture," stated GitHub user Emanuele Laface.
However, tests by BleepingComputer conducted today reveal both the Android and iOS versions of the Verifica C19 app are still treating the QR code for the Adolf Hitler certificate as valid:
Additionally, forged certificates for "Mickey Mouse," "Sponge Bob," and other fictional characters were successfully recognized by the app, as seen by BleepingComputer.
Some traders are seen offering "Covid European passports with the entry as vaccinated in Poland," each at a price of $300.
OK, I’m gonna make one up under the name “Theguy Nextdoor”.
Just wait until they make everyone use a digital wallet.
fueu
Perhaps a way to elude the jab mandate...
FDA authorizes bamlanivimab and etesevimab monoclonal antibody therapy for post-exposure prophylaxis (prevention) for COVID-19 | FDA.
Aww, boo hoo, somebody broke the EU's Nazi "Papers Please" phone app!
So sad...
Great news.
They can’t stop the signal Mal.
The headline put a smile on my face. Thanks.
“ The key has also been misused to generate forged certificates, such as those for Adolf Hitler, Mickey Mouse, Sponge Bob—all of which are being recognized as valid by the official government apps.”
Bahahaha that would be fun to screw with these euroturds 🤣
LOL. If you don’t secure your private key, it is useless for validation. This is crypto 101.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.