[News] CSEC's acceptable proof of vaccination for Saddledome games

[mdubz]

Any updates on PortPASS or will it just be swept under the rug and forgotten?

[Scroopy Noopers]

Originally Posted by TorqueDog

But you can get ten fully vaccinated people from as many households as you have people together for a dinner, birthday party, etc. at a restaurant all sitting at the same table.

Don't worry, they all wore their masks from the door to the table, so all good.

All I am saying is it shouldn’t blow anyone’s mind that someone has only spent time in one other persons house through the course of the pandemic. It’s not new information. And it doesn’t make someone “abnormally afraid of Covid” or whatever.

[Inglewood Jack]

Originally Posted by mdubz

Any updates on PortPASS or will it just be swept under the rug and forgotten?

they are updating

[rohara66]

Originally Posted by mdubz

Any updates on PortPASS or will it just be swept under the rug and forgotten?

Such a joke.



I'm going to ask our rep again when their third party security reviews will be completed.

[klikitiklik]

Originally Posted by rohara66

Such a joke.



I'm going to ask our rep again when their third party security reviews will be completed.

You guys have any direct contact info for the flames? I'm having trouble getting a reply from their voicemail system or general inquiry email.

I even tweeted @ them

[opendoor]

Originally Posted by chedder

On the topic of QR codes. Does anyone really think this inept government will use them properly? I'm betting they will just be a choice and the forgers will be able to continue using their paper home printed fake documents.

That's all but a guarantee. That's basically what's happening in BC, where businesses are allowed to visually verify QR codes and not scan them (how anyone thought visually verifying a code that's designed to be only machine readable makes sense is beyond me). Because it's simpler (no need for a charged device) most businesses are going that way, which means anyone can quickly throw together proof with a random QR code on it and get into almost anywhere.

[photon]

Has there been any indication on who is doing these third party security reviews? I.e. well known orgs?

[powderjunkie]

Originally Posted by Scroopy Noopers

All I am saying is it shouldn’t blow anyone’s mind that someone has only spent time in one other persons house through the course of the pandemic. It’s not new information. And it doesn’t make someone “abnormally afraid of Covid” or whatever.

Pretty sure I've also only been on one other house since this all started (my parents, who we are exclusively bubbled with for childcare). Yet I've done plenty of outdoor-distanced socializing and don't feel the least bit isolated/locked down.

[chedder]

Originally Posted by opendoor

That's all but a guarantee. That's basically what's happening in BC, where businesses are allowed to visually verify QR codes and not scan them (how anyone thought visually verifying a code that's designed to be only machine readable makes sense is beyond me). Because it's simpler (no need for a charged device) most businesses are going that way, which means anyone can quickly throw together proof with a random QR code on it and get into almost anywhere.

Maddening. And here I thought we were alone here in Alberta in our incompetence.

I guess we can only hope most of the antivaxxers don't have the balls or initiative to forge documents so that they make up a very small number of people we have to mingle with.

[jtfrogger]

Here is an interesting podcast interviewing Sarah Rieger, the CBC reporter that broke the security flaws, about PortPass: https://link.chtbl.com/TheBigStoryCYOA?sid=email1006

Not too much new information in there, other than that the Calgary Police are investigating. I don't think I heard that anywhere previously.

[Bring_Back_Shantz]

Originally Posted by jtfrogger

Here is an interesting podcast interviewing Sarah Rieger, the CBC reporter that broke the security flaws, about PortPass: https://link.chtbl.com/TheBigStoryCYOA?sid=email1006

Not too much new information in there, other than that the Calgary Police are investigating. I don't think I heard that anywhere previously.

And still not a peep from CSEC.
So infuriating.

[Firebot]

Originally Posted by mdubz

Any updates on PortPASS or will it just be swept under the rug and forgotten?

The real question you should be asking that isn't being given enough scrutiny...where is everyone's personal information stored at this very moment...because it most certainly wasn't safe or encrypted as claimed initially.

And I sure as heck don't expect this data to have been deleted (and kill off a very valuable precious information treasure throve that without it and its userbase, the app is worthless), let's just say.

[tvp2003]

Looks like their website was updated yesterday; however nothing substantive in terms of what went wrong or whether anything was fixed:

https://portpass.ca/press/latest-upd...ober-8th-2021/

To our valued PORTpass users, we are committed to providing you with the safest platform to expedite the process of providing proof of vaccination or negative COVID-19 test results.

Thank you for putting your trust in us.

We have been made aware of potential unauthorized viewings and we want to ensure that we have taken immediate steps and measures to verify that any potential threats have been mitigated and eliminated.

We sincerely apologize for any undue stress that this may have caused.

Stay tuned for updates in the coming weeks as we get set to launch a new and improved PORTpass mobile app!

Nope. Still too wishy-washy for a breach of this nature. “Potential unauthorized viewings”? Get real…

[Beatle17]

Jeezus people, it came out that the site wasn't secure (whoever used it in the first place are the morons) and now everyone is hanging out wanting to hang CSEC, PortPass etc. Move on and use the government approved site. If you don't want your info on the internet, don't put it into websites.

[djsFlames]

Aren't the QR codes displayed via phone/paper making these apps obsolete?

They had a small window to make their thing viable, I think that window is just about closed now. Going to guess the security holes haven't been patched up either.

[calgarywinning]

QR codes are barcodes that can carry larger amounts of data. They don't authenticate the data. Nor do they encrypt it.

In order to have a QR passport of some kind that preserved the individual privacy it would have to be encrypted end to end with the government. Then an external return of valid or not from the encrypted database.

[GordonBlue]

Originally Posted by Beatle17

Jeezus people, it came out that the site wasn't secure (whoever used it in the first place are the morons) and now everyone is hanging out wanting to hang CSEC, PortPass etc. Move on and use the government approved site. If you don't want your info on the internet, don't put it into websites.

Unfair to call people morons for signing up.
I don't think it was unbelievable to believe CSEC did their due diligence and the app was vetted, legit and safe.

They should be getting ripped, especially for sweeping it under the rug.

[Northendzone]

It will be interesting to see how long it takes to get everyone in the door for the first 4 or so home losing streak. If I was going I’d be shooting to be there about 70m prior to game time

[tvp2003]

Originally Posted by Beatle17

Jeezus people, it came out that the site wasn't secure (whoever used it in the first place are the morons) and now everyone is hanging out wanting to hang CSEC, PortPass etc. Move on and use the government approved site. If you don't want your info on the internet, don't put it into websites.

Yes, let’s just sweep it all under the rug, nothing to see here, no harm no foul.

I mean, there’s a reason why the police are investigating this, and why the OIPC (privacy commissioner) is involved. If you don’t think that warrants further attention then feel free to hit the back button; I think the people that trusted CSEC that the app was vetted and safe to use deserve an answer here.

[Beatle17]

Originally Posted by tvp2003

Yes, let’s just sweep it all under the rug, nothing to see here, no harm no foul.

I mean, there’s a reason why the police are investigating this, and why the OIPC (privacy commissioner) is involved. If you don’t think that warrants further attention then feel free to hit the back button; I think the people that trusted CSEC that the app was vetted and safe to use deserve an answer here.

So should everyone get together and head down to the Dome and protest, or just attack CSEC. IF you chose to sign up on some unknown site that is on you (not you specifically) when there were other options.

Sure people can forge the documents but I would bet that is 1 in 100,000 people that think they are proving something cool, they are morons also. People need to take some personal responsibility for choosing to sign up on an unknown website.