Follow up PSA 🧵: The QR codes used for Covid vaccine certificates are *totally safe* unless you share photographs of them publicly. In my zeal to get the word out to protect people from unintentional privacy leaks, I didn't get to all the details. Here are some vital things 1/
Private details like name and ID number *are* embedded in the QR codes but this is by design and a necessary evil. They must be able to replicate the same usability as paper certificates. That means they cannot rely on internet connections or bespoke encryption solutions 2/
...and when I say "embedded" that means as a piece of meta data (technically a "certificate") - this is something that only someone with technical software know-how can get hold of. Someone with an ordinary QR code reading app *cannot* steal your data. 3/
The reason for my original PSA is that clever hackers CAN and WILL find public photos of these QR codes and steal the data. But unless you take and post a clear photo of the QR code (a selfie saying "look at my cool vaccine pass!") you are not in any danger. 4/
This might all sound like yet another failure of government, but this is actually a worldwide standard. It is not perfect - but to be closer to perfect (like, for example, credit cards) would require a planet-wide system that does not exist. This is good enough. 5/
Finally here is Mia's excellent thread on the rollout of these QR codes:
https://twitter.com/miamalan/status/1445747137296273420?s=20(Be sure to follow Mia, she is the real deal)
• • •
Missing some Tweet in this thread? You can try to
force a refresh
