Hacker News Reader

yes and its super easy to just create random valid qr codes: https://wolf128058.gitlab.io/schmudo2go/

also they don't have any rate limit on the sms service...

so anybody can build a loop and call the sms endpoint...

More fails:

- development private and public key in the repo ( not harmful but a bad sign)

- more that i forgot

What do these QR codes do?

The QR codes let you "check in" at venues that use Luca to make contact tracing possible.

These qr codes should only valid after you verified that you are an real person.

So the health department could call you.

This was done by SMS but the verification of an account does not check against that SMS verification but its just a simple else/if on the client.