Hacker News Reader

Hacker News

Comment by seesawtron | Hacker News Reader

Parent Full thread

seesawtron

Is this one of the many examples of German government wasting taxpayer's money?

View on HN

yes and its super easy to just create random valid qr codes: https://wolf128058.gitlab.io/schmudo2go/

also they don't have any rate limit on the sms service...

so anybody can build a loop and call the sms endpoint...

More fails:

- https://github.com/mame82/misc/blob/master/luca_traceIds.md

- https://lucatrack.de/

- development private and public key in the repo ( not harmful but a bad sign)

- more that i forgot

What do these QR codes do?

The QR codes let you "check in" at venues that use Luca to make contact tracing possible.

These qr codes should only valid after you verified that you are an real person.

So the health department could call you.

This was done by SMS but the verification of an account does not check against that SMS verification but its just a simple else/if on the client.

Yes. This is what you get when incompetent officials jump on any offered solution that promises to make their awful track record of "digitalization" projects look better. Of course without listening to actual experts and instead looking for buzzwords.

The absurd thing is like CCC mentioned the german covid app (state payed, kinda decentralized, very privacy respecting contact tracing app) does not only potentially cover some of the cases (if people are close to each other and the phone can detect it using Bluetooth tokens) but also seem to be getting a feature "to handle meetings" in a privacy friendly way.

Exhibit B: Ubirch and their 5 Blockchains

https://www.heise.de/news/Digitaler-Corona-Impfpass-IBM-Ubir...

An issue with the reporting is that the ubirch standard solution is confused all the time with the actual project. Especially since it is mostly guessing, not knowledge of the actual technology behind it.

Can't really blame the reporting there imho. At the time that article was written they actively marketed towards the blockchain solution and the government side wasn't really forthcoming with public information. Luckily that changed a few days ago but this article in particular is from March 9th.

Yes.

Especially since there is already a government funded app (whose developers also make a much more competent impression) which is scheduled to receive similar functionality as the Luca app with the next update.

And which doesn't have to plan for a business model post-pandemic.

It does not need to. Its open source and funded by the government

Its not run by a private company which only thinks about money.

That was probably his point already

May I present to you that the government spend over 430 million Euro for external consultants in the last year?

That's just a raise of about 46% in comparison to 2019...

Reply on news.ycombinator.com