September 24, 2021

TechNewsInsight

Technology/Tech News – Get all the latest news on Technology, Gadgets with reviews, prices, features, highlights and specificatio

TousAntiCovid Verif verifies passes very quickly within a specific configuration

TousAntiCovid Verif verifies passes very quickly within a specific configuration

With the Constitutional Council set to rule on the extension of the health pass for restaurants and certain transport this Thursday, August 5th, the IN Committee (formerly the National Print Office) finally released Code proof Of the application TousAntiCovid Verif It is used by professionals to scan passes. This code, which is only partially available, has been analyzed by the developer GilpsJilps, He noted several contradictions.

One big problem is that if we convert the Android phone to English (used to verify the pass, not to issue the pass), the application will consider all QR codes valid. We were able to verify a malfunction:

On the left, the built-in Android smartphone in French indicates that the pass is invalid. On the right, the built-in smartphone in English indicates that the same pass is valid.

This is a pretty total growth bug that can lead to problems this holiday season. Travel professionals who use an Android device built in English will get the green light for all QR codes, even the incorrect ones, until the disorder is resolved. In the iOS version of TousAntiCovid, this is not a problem because the implementation is different.

gilbsgilbs also criticizes the source code license for privacy and binding. It forbids fork (alternative versions based on the same code) and redistribution of resources. There is one such application in Switzerland Open source, He believes France should do the same and not play safely in the dark. Recently, INGroup added encryption from end to end to transfer certificates that pass through US Agama’s servers. Orange should be soon To take responsibility.

See also  Indicates compatibility for the Windows Update update