nl-covid19-coronacheck-app-coordination VS shc-extractor

Kan zo inderdaad niet vinden dat het die altijd geldig blijft. Ik zie bijvoorbeeld ook https://github.com/minvws/nl-covid19-coronacheck-app-coordination/blob/main/architecture/sequence_diagrams/user_show_proof.png waarin staat dat de proof age word gecheckt. Zijn deze verhalen dan nep, of delen mensen die QR code sneller dan 3 minuten?

Hahaha. That’s blatantly false. There are many open source GitHub repos for projects that allow you to scan the QR codes and there’s nothing of the sort in them. Here is one of many. Try it yourself. https://github.com/obrassard/shc-extractor

The app is fairly irrelevant - all they get is info that’s in the QR code - and that’s not secret, you can extract that info yourself: shc-extractor (You can’t use this to verify that a QR code isn’t just made up by a random individual, that’s what you need the official app for.)

The Ontario scanner app checks the signature to verify its authenticity, and shows a big yellow "warning" symbol and a "There is a problem" message. You can see what this looks like if you try scanning the QR code here.

The article says that 12 people downloaded the wrong QR Code. That's it. It's possible to extract data from the QR Codes (which are just encoded SHC records) using this: https://github.com/obrassard/shc-extractor

There's even some pre-built software to help you do it.

You'll get the string shc:/ followed by a long sequence of numbers. The encoding is described here if you're curious. The code library used to extract the information is here if you want to read exactly what your QR code says.

It's not. It is encoded based on a specification that anyone can look at. You can scan the code to get the shc string. Then use this tool to extract the information from it.

See: https://github.com/obrassard/shc-extractor