Hacker News Reader

Comment by meibo | Hacker News Reader

No server is involved in scanning/verifying the QR codes, the only privacy violation would possibly be the people scanning the code taking the name/DoB for themselves but that would be a GDPR violation and I'd guess no legitimate business would try that.

I'd be showing my ID/vax record to those restaurants either way so it just seems like a technicality in the end. If you don't like it, don't use it, like all covid apps in the EU.

View on HN

In Austria you could use https://qr.gv.at to check the qr codes without installing an app. I don't think that it does any further verification than parsing the data.

This includes more information than necessary to verify whether a person has been vaccinated.

Which information do you think is unnecessary?

Almost all of it. The only thing it needs to contain is name, whether you are "immune" (vaccinated or natural antibodies), and a signature to verify it hasn't been tampered. When you were born, which vaccine you received, and when you received it are not necessary to show that you won't be spreading the disease.

Some EU countries have restrictions that get lifted after the first shot (e.g. entry to Austria), some after the 2nd shot, some 14 days after the 2nd. So the number of doses, the date of the most recent one and which vaccine (not all countries accept Sputnik).

How does "Name: John Doe. Vaccinated (or 'Immune'): Yes" tell anyone that you, who are flaunting this pass, are the John Doe who is vaccinated? Names suck as identifiers.

And downvotes suck as counterarguments.

And they don't improve with repetition.

Reply on news.ycombinator.com