With the simplest means, the vaccination pass app CovPass can be induced to show a complete vaccination protection. But this is not a good idea for several reasons.
Until now, anyone who wanted to prove a vaccination usually did so to the doctor. And then dug the yellow vaccination certificate out of the depths of the document drawer. Because this is not compatible with the corona vaccination and the additional freedoms associated with it, the digital solution decided by the EU states was introduced this week. A few days after the start, it becomes clear that the German app can be made to display a complete vaccination status with little effort. At least if it is not checked properly.
The vaccination status is displayed in the app under the large QR code that is used to check the digital certificate. “Complete vaccination protection from …” it says there followed by a date. Once this has been reached, the date disappears – and the app only attests to complete vaccination protection. You shouldn’t rely on it: The display can be manipulated with a simple trick.
Sneakiest protection ad
All you have to do is switch the date display from the default setting synchronized with the Internet to a manual display. If the newly set date is after the date shown, the app shows the after a restart “Complete vaccination protection” at. Although the period of two weeks after the last vaccination appointment has not yet expired.
The Ministry of Health is aware of this. “A change to the system date in the smartphone may lead to incorrect information about the validity of the vaccination status in the CovPass app or Corona warning app”, confirmed a spokesman at the request of the stern. “However, this has no effect on the check by the CovPass Check app”, the answer also explains why this is not a big problem from the point of view of the authorities. “The information about the vaccination status in the CovPass app or Corona warning app is only a convenience function for the user.”
Exam not affected
The actual check of the vaccination status does not take place through the manipulable information. It can only be read out with the specially developed CovPass-Check app. “This app reads the data from the QR code, which is protected from changes by a digital seal”the spokesman explains. The code then forwards the app to a certificate file specially prepared for the user, which contains the vaccination status, the dates and the vaccine used. “The CovPass-Check app only shows a valid vaccination status if the second vaccination was actually two weeks ago. Since it uses the vaccination data stored in the QR code for this, the check app cannot be tricked into changing the date on the vaccinated person’s smartphone.”
The ministry does not expect any misunderstandings about the vaccination status via the manipulated advertisement. Because: “The validity of the vaccination certificate must always be checked with the CovPass-Check app.” A quick look at the vaccination status is simply not enough to check whether the other person has actually already been vaccinated and, for example, can do without a current corona test when visiting the hairdresser. The hurdle for the check is very low: the CovPass Check app is available as a free download from the Apple App Store and Google’s Playstore, anyone can simply install it on their private smartphone and check the authenticity of vaccination certificates themselves.
Do not try this
Hoping that the other person will not take the check seriously and will fall for a manipulated report is not a good idea, according to the ministry. “It should also be noted that it is punishable if someone knowingly uses a false vaccination certificate”it says in the answer. The sentence is up to two years in prison, Health Minister Jens Spahn had already made it clear that one wanted to crack down on the falsification of vaccination cards. “Counterfeiting is not a trivial offense”he told the newspapers “Funke”-Group.
The ministry left unanswered the question of why the app even deletes the date from the display when the deadline has expired. There was also only an indirect answer as to whether the display should be changed. “Basically: As soon as technical problems become known, they are solved immediately”is the answer to this question. So it will soon be seen whether the confusing ad is considered a bug.
David William is a talented author who has made a name for himself in the world of writing. He is a professional author who writes on a wide range of topics, from general interest to opinion news. David is currently working as a writer at 24 hours worlds where he brings his unique perspective and in-depth research to his articles, making them both informative and engaging.
