8 ms·

EU Green Pass-generation keys stolen

55 points by Berazu 5y ago

fsflover 5y ago
https://news.ycombinator.com/item?id=29011537 https://news.ycombinator.com/item?id=29011537
bilekas 5y ago
In the original article, the picture shows exactly how the internet would react : https://www.ansa.it/sito/notizie/tecnologia/software_app/2021/10/27/sottratte-chiavi-per-generare-green-pass-ue_e239c260-812a-4836-b9d1-4c65ea20f77a.html https://www.ansa.it/sito/notizie/tecnologia/software_app/202... By generating Adolf Hitlers GreenPass ..
- ChuckNorris89 5y ago
  >By generating Adolf Hitlers GreenPass .. TBH that is pretty hitlarious :) Though it could get you in trouble in Austria and Germany.
  - NoPie 5y ago
    I think that the point – to show that the certificate system is about total nazi style control.
    - ChuckNorris89 5y ago
      I think you're wrong here. They're not showing any Nazi style control, just hackers often display their results in ways that are edgy in order to draw attention to themselves from the mainstream media.
      - NoPie 5y ago
        Well, they could have chosen the name of EU president or some head of the state, or Jesus. This one is selected with a message on top of all this attention seeking.
        ChuckNorris89 5y ago
        Nobody cares who the EU president is, but everyone in the word knows who Adolf Hitler was, so it's an edgy and effective way to grab headlines.
  - gaius_baltar 5y ago
    When a German security team discovered problems with vaccination certificates, they generated a card for Robert Koch [0]. Really better way to demonstrate the vulnerability without offending people. [0] https://www.dw.com/en/security-flaws-uncovered-in-eu-vaccination-passport/a-58129016 https://www.dw.com/en/security-flaws-uncovered-in-eu-vaccina...
    - ChuckNorris89 5y ago
      >Really better way to demonstrate the vulnerability without offending people. Who was offended?
raverbashing 5y ago
The keys are revocable and replaceable (and it was probably a member state set of keys), so it shouldn't be too big of a deal
- mr_mitm 5y ago
  Depends on how many certificates become invalid now.
  - Uberphallus 5y ago
    Yeah, if half-smart, certificates should expire relatively frequently to contain damage in such a scenario.
- WinstonSmith84 5y ago
  Are you suggesting that a few hundreds millions certificate shall be re-issued, distributed either in person, or per email, or even per post for some countries? Sounds easy :-)
ChemSpider 5y ago
Technical issues aside, the EU Green pass is a gigantic success. Super easy travel across Europe and all other participating countries.
- chitowneats 5y ago
  "Super easy travel" is not how I would describe an application designed to ease the limiting of movement of people based on medical status.
  - Uberphallus 5y ago
    Obviously it's super easy compared with the restrictions before. Pre-green pass I basically carried a thick folder as I crossed multiple countries, each with different restrictions and translation requirements.
  - mrtksn 5y ago
    >limit the movement of people based on medical status That's literally the idea behind fighting contagious diseases, widely used to defend islands and castles before the vaccines. People used to wait in ships for weeks before they can embark. We used to have castles insulated to keep an outbreak out of it's population. Through the history of humanity, countless people were lost to contagious diseases. The Green Pass thingy is essentially an enabler to open up the castle and let sailors embark without waiting for weeks to see if if they will get sick or not. It's a management tool to relieve the hardships of contagious diseases fighting methods. So let's not confuse the causality here.
    - wait_a_minute 5y ago
      When are the participating countries going to get rid of it? When is the pandemic over?
      - mrtksn 5y ago
        The virus didn't gave us an ETA of its demise. It will probably stay longer than ideal since not every country in the Europe has high vaccination rates as Portugal. It's seriously puzzling to see he immense belief in the governments power. How on earth one can demand a specific day for removal of management tools against the natural processes?
radicalbyte 5y ago
I am part of the team working on the EU-DCC, and am very active in the community (we're a proper open source project). I cannot comment on this myself, but it looks like my health ministry has: https://nos.nl/liveblog/2403253-ook-in-duitsland-stijgt-aantal-besmettingen-burgemeesters-urk-en-staphorst-doen-oproep https://nos.nl/liveblog/2403253-ook-in-duitsland-stijgt-aant...
- deleted 5y ago
  [deleted]
deleted 5y ago
[deleted]
etothepii 5y ago
And there are those that want to move our entire fiat money system on to digital ledgers. I'll pass thanks.
- sschueller 5y ago
  Who says the feds system can't be hacked and extra money couldn't be created? It's one central authority, crypto doesn't have to be.
  - jokethrowaway 5y ago
    It's because the feds are already the biggest thieves in the world, they already created 40% of all dollars in the last 12 months - they don't fear small competitors.
- tata71 5y ago
  They're already on digital ledgers, not sure how you think governments move billions to banks each and every night.
  - over_the_raibow 5y ago
    He talks about the plan to create digital blockchain coins by the central banks, official crypto coins. There are aleady talks about this, and most central banks are working on it.
EamonnMR 5y ago
Oof, non-english gdpr popup. Not sure which option I'm supposed to select.
- gpderetta 5y ago
  I'm italian and still had trouble. Anyway, I think the right options are Up, Up, Down, Down, Left, Right, Left, Right, B, A.
enzino 5y ago
let's index millions of people's personal and health data, including their exposure to dna-altering drugs that might have health repercussions for years afterwards... and secure them so well than some kid can create and sign a record for a mister adolf Hitler. what can go wrong?
- laurensr 5y ago
  The myth about vaccines equaling gene therapy has been debunked multiple times [1]. [1]: https://www.reuters.com/article/factcheck-covid-mrna-gene-idUSL1N2PH16N https://www.reuters.com/article/factcheck-covid-mrna-gene-id...
  - enzino 5y ago
    getting debunkers' attention, these days, is proof enough that the claim is true. this is not even controversial lol. "vaccines" manufacturers itself describe them as rna vectors. modeRNA has it in its name and stock ticker. it's surprising how stupid propagandists are.
- Uberphallus 5y ago
  Where's the DNA altering drug? Sounds cool.

55 points by Berazu 5y ago

https://news.ycombinator.com/item?id=29011537 https://news.ycombinator.com/item?id=29011537

In the original article, the picture shows exactly how the internet would react : https://www.ansa.it/sito/notizie/tecnologia/software_app/2021/10/27/sottratte-chiavi-per-generare-green-pass-ue_e239c260-812a-4836-b9d1-4c65ea20f77a.html https://www.ansa.it/sito/notizie/tecnologia/software_app/202... By generating Adolf Hitlers GreenPass ..

ChuckNorris89 5y ago
>By generating Adolf Hitlers GreenPass .. TBH that is pretty hitlarious :) Though it could get you in trouble in Austria and Germany.
- NoPie 5y ago
  I think that the point – to show that the certificate system is about total nazi style control.
  - ChuckNorris89 5y ago
    I think you're wrong here. They're not showing any Nazi style control, just hackers often display their results in ways that are edgy in order to draw attention to themselves from the mainstream media.
    - NoPie 5y ago
      Well, they could have chosen the name of EU president or some head of the state, or Jesus. This one is selected with a message on top of all this attention seeking.
      - ChuckNorris89 5y ago
        Nobody cares who the EU president is, but everyone in the word knows who Adolf Hitler was, so it's an edgy and effective way to grab headlines.
- gaius_baltar 5y ago
  When a German security team discovered problems with vaccination certificates, they generated a card for Robert Koch [0]. Really better way to demonstrate the vulnerability without offending people. [0] https://www.dw.com/en/security-flaws-uncovered-in-eu-vaccination-passport/a-58129016 https://www.dw.com/en/security-flaws-uncovered-in-eu-vaccina...
  - ChuckNorris89 5y ago
    >Really better way to demonstrate the vulnerability without offending people. Who was offended?

raverbashing 5y ago

The keys are revocable and replaceable (and it was probably a member state set of keys), so it shouldn't be too big of a deal

mr_mitm 5y ago
Depends on how many certificates become invalid now.
- Uberphallus 5y ago
  Yeah, if half-smart, certificates should expire relatively frequently to contain damage in such a scenario.
WinstonSmith84 5y ago
Are you suggesting that a few hundreds millions certificate shall be re-issued, distributed either in person, or per email, or even per post for some countries? Sounds easy :-)

ChemSpider 5y ago

Technical issues aside, the EU Green pass is a gigantic success. Super easy travel across Europe and all other participating countries.

chitowneats 5y ago
"Super easy travel" is not how I would describe an application designed to ease the limiting of movement of people based on medical status.
- Uberphallus 5y ago
  Obviously it's super easy compared with the restrictions before. Pre-green pass I basically carried a thick folder as I crossed multiple countries, each with different restrictions and translation requirements.
- mrtksn 5y ago
  >limit the movement of people based on medical status That's literally the idea behind fighting contagious diseases, widely used to defend islands and castles before the vaccines. People used to wait in ships for weeks before they can embark. We used to have castles insulated to keep an outbreak out of it's population. Through the history of humanity, countless people were lost to contagious diseases. The Green Pass thingy is essentially an enabler to open up the castle and let sailors embark without waiting for weeks to see if if they will get sick or not. It's a management tool to relieve the hardships of contagious diseases fighting methods. So let's not confuse the causality here.
  - wait_a_minute 5y ago
    When are the participating countries going to get rid of it? When is the pandemic over?
    - mrtksn 5y ago
      The virus didn't gave us an ETA of its demise. It will probably stay longer than ideal since not every country in the Europe has high vaccination rates as Portugal. It's seriously puzzling to see he immense belief in the governments power. How on earth one can demand a specific day for removal of management tools against the natural processes?

radicalbyte 5y ago

I am part of the team working on the EU-DCC, and am very active in the community (we're a proper open source project). I cannot comment on this myself, but it looks like my health ministry has: https://nos.nl/liveblog/2403253-ook-in-duitsland-stijgt-aantal-besmettingen-burgemeesters-urk-en-staphorst-doen-oproep https://nos.nl/liveblog/2403253-ook-in-duitsland-stijgt-aant...

deleted 5y ago
[deleted]

deleted 5y ago

[deleted]

etothepii 5y ago

And there are those that want to move our entire fiat money system on to digital ledgers. I'll pass thanks.

sschueller 5y ago
Who says the feds system can't be hacked and extra money couldn't be created? It's one central authority, crypto doesn't have to be.
- jokethrowaway 5y ago
  It's because the feds are already the biggest thieves in the world, they already created 40% of all dollars in the last 12 months - they don't fear small competitors.
tata71 5y ago
They're already on digital ledgers, not sure how you think governments move billions to banks each and every night.
- over_the_raibow 5y ago
  He talks about the plan to create digital blockchain coins by the central banks, official crypto coins. There are aleady talks about this, and most central banks are working on it.

EamonnMR 5y ago

Oof, non-english gdpr popup. Not sure which option I'm supposed to select.

gpderetta 5y ago
I'm italian and still had trouble. Anyway, I think the right options are Up, Up, Down, Down, Left, Right, Left, Right, B, A.

enzino 5y ago

let's index millions of people's personal and health data, including their exposure to dna-altering drugs that might have health repercussions for years afterwards... and secure them so well than some kid can create and sign a record for a mister adolf Hitler. what can go wrong?

laurensr 5y ago
The myth about vaccines equaling gene therapy has been debunked multiple times [1]. [1]: https://www.reuters.com/article/factcheck-covid-mrna-gene-idUSL1N2PH16N https://www.reuters.com/article/factcheck-covid-mrna-gene-id...
- enzino 5y ago
  getting debunkers' attention, these days, is proof enough that the claim is true. this is not even controversial lol. "vaccines" manufacturers itself describe them as rna vectors. modeRNA has it in its name and stock ticker. it's surprising how stupid propagandists are.
Uberphallus 5y ago
Where's the DNA altering drug? Sounds cool.