“It is easy with a graphics program to change the text on the pass, but the QR code is what looks scary and hard to forge, no? Actually, this is very easy,” Ran Bar-Zik, an expert on cybersecurity, wrote in a Facebook post Tuesday.
Bar-Zik explained that the QR code on the Health Ministry “green pass” has no encryption, and corresponds directly to a string of text, with the holder’s personal information, including name, ID number, and date of vaccination, identical to the text printed on the pass itself.
“Whoever scans the false pass will see the exact same details as are printed on the pass, and there are already tens of thousands of people forging,” Bar-Zik exclaimed.
Health Ministry Vaccination Certificate example (Screenshot: YouTube/MoH)
A black market for counterfeit vaccination certificates is already thriving on Telegram, where more than 100,000 users have joined groups that offer the forgeries at a price, Channel 12 reported.
Wait the moment... It is REALLY so easy ?
Then why they need to pay for it ? Simple qr software generator would do the job.
By the way - it is bad news it is so well known,further generations would be done "better"...