Psst.

Vax pass with your charlie?

Via Irish Times:

A prolific Irish drug dealer is selling fake Covid-19 vaccine certificates on the dark web for as much as €350 each.

…The seller operates on a well known dark web marketplace for illicit items which can only be accessed using specialist software.

The price includes a digital certificate containing a custom QR code, which will display the buyer’s name when scanned.

It also includes a realistic-looking, printed HSE vaccination card. “Full Irish vaccine passport, not recorded on data base,” customers are told, meaning the code could not easily be cancelled by health authorities. Other items on the site include cocaine, LSD and ketamine.

It’s a one stop shop to par-tay DEATH.

Fake Irish vaccine passports for sale on dark web for €350 (Irish Times)

Sponsored Link

50 thoughts on “Diversifying

  1. Optimus Grime

    So if you’re provax but anti-pass do you get one?
    What about anti-vax but pro-pass?
    What about anti-vax and anti-pass?
    What about pro-ketamine and anti-vax?
    What about it’s just easier to get the vaccine at this point?

  2. SOQ

    €350???

    All you need is a scanner, MS Paint and a half decent colour printer. Nowhere checks against photo ID anyways- if at all.

    €25 each and I’ll throw in free P & P?

    The barcode must be easily deciphered if they can rewrite the name into it course. Please don’t tell me it is just a standard bar code generator?

    1. Cian

      Either:
      a) SOQ single-handedly broke the EU-wide vaccine passport with a quick internet search.
      b) SOQ is taking through his hole hat (again) on things that he can’t understand.

      I wonder which it is?

      1. SOQ

        Have you ever rolled out bar code systems Cian? I have. I can tell you that most work on a cheap or free generator which can be easily faked.

        Either way, all they have to do is crack the reader app.

        1. Cian

          Okay you’ve just proved it’s (b)

          Have you actually scanned anyone’s code – oh expert of all things barcode.

        2. SOQ

          On this system no- the only reason for me doing so would be for the craic.

          Actually come to think of it, if they are using an EU encryption standard then I am pretty sure that information is already out there- for a price obviously. Then, when generating the barcode, it is a matter of presenting the data in the sequence or protocol that the reader requires.

          It was you who said there was no centralised connection which surprised me because the security or verification of such comes usually from a database where the bar codes are all pretty standard. Clock in / out in a workplace for example.

          If such are now for sale, then all this has already happened of course.

          1. Cian

            Tell me you don’t understand Covid vaccine certs without telling me you don’t understand Covid vaccine certs

          2. Chris

            It’s the prelude to biometrics. That might be harder to hack, but where there’s a will there’s a way.

    2. Mr.T

      You need private encryption keys to “sign” the cert.
      These have been leaked & only those who have them can create valid certs.

      Once you create a cert with the private key, there is no way to tell its fake.

      1. SOQ

        Agreed but if no central verification process then the app is vulnerable. Once they know what the reader expects, the rest can be replicated.

        As anyone ever just tried scanning a screen grab of someone else’s bar code I wonder?

        1. Micko

          Yep.It works.

          And the app (web-based) for scanning doesn’t work unless you’re connected to the web. So it’s sending the data somewhere for verification.

          Wait till they bring in the “too many people a sharing certs” excuse, so now we have to “track you” option.

          1. SOQ

            I asked that question before- if disconnected from connectivity, does the app work?

            As someone who lost half my hair because of differing mobile devices and differing health statuses of said devices- there is no way they can all function properly without some sort of central verification.

            First rule of tech- if it can happen, it will happen- which is why I always prefer thin client browser based solutions.

            Most websites should now be designed as scalable meaning they will adjust to your device display.

            I’ll go further and say that as connectivity improves, mobile apps are on the way out.

        2. Cian

          have you ever surfed the web? and seen a “https”? and been told your data is secure? (it is secure in transit)

          The internet has no central verification process… how does that work? Magic probably. Or maybe the internet is vulnerable?

          https://www.youtube.com/watch?v=iDbyYGrswtg

          As anyone ever just tried scanning a screen grab of someone else’s bar code I wonder?yes. it seems that Edouard Philippe (Mayor of Le Havre) showed off his covid passport for the media, it was photographed and copied “for the LOLs”.

          1. Cian

            I don;t think the vaccine passport should be used to prevent entry to pubs/restaurants.

            But that doesn’t excuse non-technical people who completely misunderstand how they work sharing their techno-babble with others.

          2. GiggidyGoo

            https means sfa as Cian says. Any site can get ssl certification. Secure Socket Layer. What does that mean to ordinary folk? The site is ‘secure’? Oh yeah – there’s a little ‘lock’ logo, so it must be ok?
            How and ever, the simple creation of a barcode with the free barcode generators is enough to get a document to pass the guardians of the restaurants – that’s because their ‘scanners’ are mostly on mobile phones, and for show only. Try it.

          3. Chris

            Nothing about the web is secure, everything gets recorded through the NSA, and most likely – CCP.

    3. scottser

      ‘Nowhere checks against photo ID anyways- if at all.’
      not true. myself and herself went to the bull & castle last week and they checked the name on the covid cert against the booking. then when we went to vicar street they checked tickets, covid pass and id.
      so there now.

          1. SOQ

            Rage Against The Machine are playing vaccine only concerts apparently- who would ever have thought that Right Said Fred would put Rage Against The Machine to shame?

          2. Micko

            Ah Rage were a sham in the first place – fake outrage.

            I still love them though and Morello’s guitar work is stellar.

            And sure, as I said before, disconnect the artist from their political opinions.

            Enjoy their art as stand alone – you’ll never be disappointed.

            Right Said Fred’s where it’s at sure

            “Deeply dippy…”

      1. SOQ

        Places doing all the checks in Dublin CC are one thing but when one third are not checking at all, you can be pretty certain there are just as many others doing the bare minimum- with a nod and a wink of course.

        Even that one third figure is questionable.

        1. johnny

          …do you ever get out and about in Dublin,or is New York more your virtual stomping grounds ?
          do your own research.

          1. johnny

            oh dharling if only walter mitty wasn’t already taken.
            check yo self
            in dublin city center ?
            ”you can be pretty certain there are just as many others doing the bare minimum- with a nod and a wink of course…”
            based on ?

  3. K. Cavan

    Because the vaccines are as fake as the pandemic. Weak, short-term protection is the best they can offer, with death, serious injury & completely unknown long-term side-effects also a possibility.
    Anyone prepared to risk their life under such circumstances probably needs an immediate appointment with Gamblersanonymous.ie.

  4. K. Cavan

    Klaus is still going in about “ze cyberattack”, the internet is alive with scammers, grifters, spammers & hackers but the Vax Pass system will work, definitely, for sure, mostly, hardly a doubt about it.
    Recently, some clever lads created a Vax Pass for der Fuhrer, no, not Klaus, Adolph.

  5. phil

    Wont take the vaccine, cause they don’t trust big pharma, cocaine, however this guys Coke, LSD and ketamine are fine …

  6. johnny

    now this is FAKE

    hold on
    Prolific
    Drugs
    Profit
    he would double his cash per pound

    ah small time street addict feeding his habit…got it

  7. f_lawless

    From the IT article:
    “Several countries have so far reported the leaking of their vaccine certificate source codes”

    Call me cynical but my gut feeling is that this isn’t just a series of unforeseen accidents. It’s puts us a step closer to having face recognition technology imposed upon us. By undermining the security of the qr code system, it creates the perfect pretext to present face recognition as the next phase ‘solution’.

    https://www.sonata-software.com/blog/analytics/say-good-bye-qr-codes-get-ready-enter-facial-recognition-era

    “QR codes are just a step in the evolution of mobile payment technology and they may soon be a thing of the past. In fact, soon people may be able to forget about QR codes and pay with virtually nothing but… themselves. This new payment method we are talking about is facial recognition, which has been implemented by many tech giants in various industries. The facial recognition market is expected to grow to $7.7 billion in 2022 from $4 billion in 2017. That’s because facial recognition has all kinds of commercial applications. It can be used for everything from surveillance to marketing”

  8. ce

    Worried about private data getting out from government agencies and evil corporate types etc… but likely to give private data over to somebody on the Dark Web so they can go for a bit of sun during the winter… nice…

  9. Cian

    One other thing.
    The unvaxxed (as of last week) were calling for a boycott of places that demanded a passport…. now the self same people are extolling using fake passports so they can go to places that demanded a passport..

    I suppose that makes as much sense as the rest of what they sprout.

Comments are closed.

Broadsheet.ie