gov_can-GEDSMACHINE VS shc-extractor

So once you have an account, you can create a "Team". One may have already been created for you when you signed up. From there, you can click here to add the app to your team. There are some screen-shots and direction for what that process looks like here. I welcome feedback on the onboarding, though, if none of that is super-clear.

Hahaha. That’s blatantly false. There are many open source GitHub repos for projects that allow you to scan the QR codes and there’s nothing of the sort in them. Here is one of many. Try it yourself. https://github.com/obrassard/shc-extractor

The app is fairly irrelevant - all they get is info that’s in the QR code - and that’s not secret, you can extract that info yourself: shc-extractor (You can’t use this to verify that a QR code isn’t just made up by a random individual, that’s what you need the official app for.)

The Ontario scanner app checks the signature to verify its authenticity, and shows a big yellow "warning" symbol and a "There is a problem" message. You can see what this looks like if you try scanning the QR code here.

The article says that 12 people downloaded the wrong QR Code. That's it. It's possible to extract data from the QR Codes (which are just encoded SHC records) using this: https://github.com/obrassard/shc-extractor

There's even some pre-built software to help you do it.

You'll get the string shc:/ followed by a long sequence of numbers. The encoding is described here if you're curious. The code library used to extract the information is here if you want to read exactly what your QR code says.

It's not. It is encoded based on a specification that anyone can look at. You can scan the code to get the shc string. Then use this tool to extract the information from it.

See: https://github.com/obrassard/shc-extractor