Hackers claim they cracked Quebec's vaccination QR codes; government says they're 'completely secure'
There are new privacy and security concerns over the QR codes given out to Quebecers as proof of vaccination.
A cyber security team of experts tested whether or not it could crack the codes and they say they were able to do so fairly easily.
While the roll-out of the QR codes has already begun, only a few details have been released about how and when they will be used.
Health minister Christian Dubé has said that if the epidemiological situation deteriorates in Quebec, the QR codes will be required for residents to access some non-essential services, such as bars and gyms.
The government said it hopes to never have to use the digital proof of vaccination for such a reason and is instead relying, quite desperately, on the population to get their two doses of the vaccine by Aug. 31.
Recently, a team of cybersecurity experts got together to test the security and safety of the QR codes sent to hundreds of thousands of Quebecers so far.
The so-called “ethical hackers” were able to crack the codes using a fairly rudimentary program that decodes the visual symbols.
Those involved in the hack are asking why the government did not opt for a more robust security method involving encryption, which is far more difficult to crack.
“There are a lot of people that say, in social media, we’re already giving that (kind of personal) information. The thing is we’re giving this information voluntarily to a private company,” said Patrick Mathieu, co-founder of Hackfest, billed as the largest hacking event in Canada.
“(But) now it’s the government forcing us to access a public space or private event. Facebook doesn’t require you to give your information when you want to go to a cinema, but the government might ask you to do so.”
Even if the QR codes are never needed to be used within the province, they can be shown abroad when travelling to countries, such as those in Europe, that require proof of vaccination for entry.
In a statement, the ministry of health said the QR code is “completely secure and the government would “never put Quebecers’ data at risk.”
“The Ministry of Health is studying and following international standards in this major operation. And for double authentication, the QR code will have to be accompanied by a proof of identity on site. The QR code is designed to be read and is unencrypted, in accordance with the international standard determined by the WHO, a position supported by the VCI (Vaccination Credential Initiative) for Smart Health Card (a group of public and private organizations),” the statement read.
“The QR code is not forgeable. It contains an encrypted signature from the Quebec government. It does not constitute proof of identity. Therefore, to avoid fraud or identity theft, the QR code must be combined with proof of identity.”
The ministry added that there are still several weeks of testing left to iron out technical details of the QR code program.
Mathieu said the current codes were relatively easy to create and that encrypted codes would require more elaborate set-ups, but would require more people and more money to develop.
CTVNews.ca Top Stories
Most of Canada to receive emergency alert test today
The federal government will test its capacity to issue emergency alerts today, with the exception of Ontario, where the test will take place on May 15.
OPINION What King Charles' schedule being too 'full' to accommodate son suggests about relationship with Prince Harry
Prince Harry, the Duke of Sussex, has made headlines with his recent arrival in the U.K., this time to celebrate all things Invictus. But upon the prince landing in the U.K., we have already had confirmation that King Charles III won't have time to see his youngest son during his brief visit.
Ontario man devastated to learn $150,000 line of credit isn't insured after wife dies
An Ontario man found out that a line of credit he thought was insured actually isn't after his wife of 50 years died.
Boy Scouts of America is rebranding. Here's why they're now named Scouting America
After more than a century, Boy Scouts of America is rebranding as Scouting America, another major shakeup for an organization that once proudly resisted change.
Stormy Daniels describes meeting Trump during occasionally graphic testimony in hush money trial
With Donald Trump sitting just feet away, Stormy Daniels testified Tuesday at the former president's hush money trial about a sexual encounter the porn actor says they had in 2006 that resulted in her being paid to keep silent during the presidential race 10 years later.
Rape, terror and death at sea: How a boat carrying Rohingya children, women and men capsized
In March, Indonesian officials and local fishermen rescued 75 people from the overturned hull of a boat off the coast of Indonesia. Until now, little was known about why the boat capsized.
These adults born in the '90s partnered with their parents to buy homes in Ontario
An Ontario woman said it would have been impossible to buy a house without her mother – an anecdote that animates the fact that over 17 per cent of Canadian homeowners born in the ‘90s own their property with their parents, according to a new report.
For their protection, immigrants critical of China and India call for speedy passage of Canada's foreign interference legislation
Canadian immigrants threatened by hostile regimes are urging parliamentarians to quickly pass the 'Countering Foreign Interference Act' so they can feel safe living in their adopted home.
How Drake and Kendrick Lamar's rap beef escalated within weeks
A long-simmering feud between hip-hop superstars Drake and Kendrick Lamar reached a boiling point in recent days as the pair traded increasingly personal insults on a succession of diss tracks. Here’s a quick overview of what’s behind the ongoing beef.