[News] CSEC's acceptable proof of vaccination for Saddledome games

[kermitology]

The server falling over with less than 20k users at a time is evidence of poor planning and architecture. I mean, the fact that there is unencrypted access to the website is bad enough, but this guy is just a liar. The Flames did not do their due diligence here. I get that they don't hire a development team, but someone should have been brought in to do a technical audit.

[Inglewood Jack]

womp womp

https://www.nhl.com/flames/fans/vaccination-policy

[alexle]

Not good... https://www.cbc.ca/news/canada/calga...each-1.6191749

[Cecil Terwilliger]

CSEC you incompetent ####s. How did you partner with a scam artist for your vaccine app?

Between this and the easily faked passport, there’s no reason to even require proof to enter the game.

[calgarygeologist]

Originally Posted by alexle

Not good... https://www.cbc.ca/news/canada/calga...each-1.6191749

I believe there are pretty strict rules governing access and security with respect to health records and information. If PortPass is exposing that information through their app/database I assume that the company is going to be in some deep trouble soon.

[Inglewood Jack]

Originally Posted by alexle

Not good... https://www.cbc.ca/news/canada/calga...each-1.6191749

CBC is not sharing how to access those profiles, in order to protect users' personal information, but has verified that email addresses, names, blood types, phone numbers, birthdays, as well as photos of identification like driver's licences and passports can easily be viewed by reviewing dozens of users' profiles.

The information was not encrypted and could be viewed in plain text.

what in the actual ffff...not only has this put hundreds of thousands of users' confidential information at risk, it's also going to be used as anti-vax and anti-passport ammunition going forward. I'm quite pissed that I actually put in my real email and phone number just to get to the photo ID upload step.

[tvp2003]

That's brutal. They need to shut the whole thing down before more damage is done.

[djsFlames]

It should just be PDF plus ID for every one. Why bother with any other alternative? More options just complicates things when one falls through like the app.

[Torture]

I love how much of an ####### the CEO seems like. Really inspring confidence.

Hussein said Tuesday morning that the breach only lasted for minutes, and repeated that claim when CBC pointed out it had reviewed the personal information for more than an hour — and it's unknown how long the information was exposed before that tip was received.

"Someone that's out there is trying to destroy us here, and we're trying to build something good for people," he said.

"There's holes, and what I'm realizing is I think there are some things that we need to fix here. And you know, we're trying to play catch-up, I guess, and trying to figure out where these holes are."

Guys, give us a break, there's only 650,000 people that we may have compromised privacy of, we're trying our hardest!

Earlier in the day, the Calgary-based company's CEO Zakir Hussein had denied the app had verification or security issues and accused those who raised concerns about it of breaking the law.

Did you know there's privacy concerns with your app? NO UR BREAKIN THE LAW

Hussein had also said security concerns Yeung had raised about the app were false, and suggested he may contact authorities over his social media posts. He said he wished Yeung and others publicly posting concerns instead had privately reached out to the company.

"Instead he did that maliced behaviour. That, you know, that's not nice," he said.

StoP BeING MeAN tO mE oN thE InTERnET

Yeung had tested the Portpass app by uploading a photo of an actor as an ID photo, and editing a fake vaccination record to display the actor's name that the app verified as legitimate.
However, earlier on Monday, Hussein had denied that the app validated Yeung's false information, despite it appearing to do so, because he said the fake picture would be a giveaway.

"That's not true. We saw it on the back end and we were watching it.… So even if that user showed up, he wouldn't be able to utilize that picture because that's not him. So you wouldn't be able to get in. Secondly, that QR code, if someone scanned it, it would show that picture again," he said at the time.

Ah, ok, it verifies fake details but as long as they check the photo id of all 20,000 people going to the hockey game it'll be fine. (so the app does...what exactly aside from generating a QR code?) Yup. What happened to the blockchain privacy verifying (insert other high tech buzzwords) technology?

[Knightslayer]

Have the Flames back tracked? This isn't looking good for them.

[btimbit]

Originally Posted by Knightslayer

Have the Flames back tracked? This isn't looking good for them.

Yes, few posts above you. They're not accepting it anymore

[JackIsBack]

Just by reading this thread... if you don't all start to see what a slippery slope you're on, then no one can help you.


First some definitions:

Traditionally a vaccine prevented the recipient from contracting the disease, or more to the scientific point, prevented the virus or pathogen from getting hold in the recipient even though they could be exposed to the pathogen and have some of the pathogen within their bodies. A therapeutic, is a treatment for the disease that would either cure it or reduce the symptoms.

Now what are the COVID 19 vaccines?

Hypothetically (LOL), let say that the vaccine don’t prevent you from actually contracting the disease and don’t prevent you in infecting others if you have contracting it. Let’s also assume that people who are vaccinated, tend to get tested for COVID less frequently because of various reasons due to their vaccination status, and lets also hypothetically assume that they have greater viral loads when they are infected and even asymptomatic vaccinated individuals tend to spread the disease, while asymptomatic unvaccinated people do so less frequently (if at all)… lets also assume that unvaccinated people who are infected tend to seek treatment and tend to stay isolated while vaccinated individuals tend to carry on in public spreading the disease.

So without debating the above…. If this is all found out to be the truth, I then can assume that all pro-vax-passport people here would agree, that we should ban them from everything they want to ban the unvaccinated for today – can I get you word on that.


Be careful what you wish for.

[TheScorpion]

Originally Posted by JackIsBack

Just by reading this thread... if you don't all start to see what a slippery slope you're on, then no one can help you.


First some definitions:

Traditionally a vaccine prevented the recipient from contracting the disease, or more to the scientific point, prevented the virus or pathogen from getting hold in the recipient even though they could be exposed to the pathogen and have some of the pathogen within their bodies. A therapeutic, is a treatment for the disease that would either cure it or reduce the symptoms.

Now what are the COVID 19 vaccines?

Hypothetically (LOL), let say that the vaccine don’t prevent you from actually contracting the disease and don’t prevent you in infecting others if you have contracting it. Let’s also assume that people who are vaccinated, tend to get tested for COVID less frequently because of various reasons due to their vaccination status, and lets also hypothetically assume that they have greater viral loads when they are infected and even asymptomatic vaccinated individuals tend to spread the disease, while asymptomatic unvaccinated people do so less frequently (if at all)… lets also assume that unvaccinated people who are infected tend to seek treatment and tend to stay isolated while vaccinated individuals tend to carry on in public spreading the disease.

So without debating the above…. If this is all found out to be the truth, I then can assume that all pro-vax-passport people here would agree, that we should ban them from everything they want to ban the unvaccinated for today – can I get you word on that.


Be careful what you wish for.

Bro what

[Torture]

Originally Posted by JackIsBack

Just by reading this thread... if you don't all start to see what a slippery slope you're on, then no one can help you.


First some definitions:

Traditionally a vaccine prevented the recipient from contracting the disease, or more to the scientific point, prevented the virus or pathogen from getting hold in the recipient even though they could be exposed to the pathogen and have some of the pathogen within their bodies. A therapeutic, is a treatment for the disease that would either cure it or reduce the symptoms.

Now what are the COVID 19 vaccines?

Hypothetically (LOL), let say that the vaccine don’t prevent you from actually contracting the disease and don’t prevent you in infecting others if you have contracting it. Let’s also assume that people who are vaccinated, tend to get tested for COVID less frequently because of various reasons due to their vaccination status, and lets also hypothetically assume that they have greater viral loads when they are infected and even asymptomatic vaccinated individuals tend to spread the disease, while asymptomatic unvaccinated people do so less frequently (if at all)… lets also assume that unvaccinated people who are infected tend to seek treatment and tend to stay isolated while vaccinated individuals tend to carry on in public spreading the disease.

So without debating the above…. If this is all found out to be the truth, I then can assume that all pro-vax-passport people here would agree, that we should ban them from everything they want to ban the unvaccinated for today – can I get you word on that.


Be careful what you wish for.

[Freeway]

So how many people signed up for this thing?

[saillias]

Originally Posted by Torture

I love how much of an ####### the CEO seems like. Really inspring confidence.


Guys, give us a break, there's only 650,000 people that we may have compromised privacy of, we're trying our hardest!


Did you know there's privacy concerns with your app? NO UR BREAKIN THE LAW


StoP BeING MeAN tO mE oN thE InTERnET



Ah, ok, it verifies fake details but as long as they check the photo id of all 20,000 people going to the hockey game it'll be fine. Yup. What happened to the blockchain privacy verifying (insert other high tech buzzwords) technology?

I don't know how litigious this guy is so I will speak carefully. but it sure seems like he has the exact same tone and language and problem with Conrad Yeung as the individual who impersonated a cop to intimidate Conrad Yeung....

Is he really that stupid and brazen? It's hard to believe

[Gondi Stylez]

I am fuming. I uploaded all my actual information and 2 days later this has all come out. I have filed a complaint with the Office of the Privacy Commissioner of Canada (OPC). I suggest those of you exposed do the same.

https://www.priv.gc.ca/en/report-a-concern/

[Gondi Stylez]

Originally Posted by Freeway

So how many people signed up for this thing?

[Gaskal]

They have my email but that's about as far as I got. Even before reading all the shady stuff, something seemed very, very wrong to me about uploading an actual picture of a government issued photo ID. So I stopped there and am very glad I did.

[Leondros]

Originally Posted by JackIsBack

Just by reading this thread... if you don't all start to see what a slippery slope you're on, then no one can help you.


First some definitions:

Traditionally a vaccine prevented the recipient from contracting the disease, or more to the scientific point, prevented the virus or pathogen from getting hold in the recipient even though they could be exposed to the pathogen and have some of the pathogen within their bodies. A therapeutic, is a treatment for the disease that would either cure it or reduce the symptoms.

Now what are the COVID 19 vaccines?

Hypothetically (LOL), let say that the vaccine don’t prevent you from actually contracting the disease and don’t prevent you in infecting others if you have contracting it. Let’s also assume that people who are vaccinated, tend to get tested for COVID less frequently because of various reasons due to their vaccination status, and lets also hypothetically assume that they have greater viral loads when they are infected and even asymptomatic vaccinated individuals tend to spread the disease, while asymptomatic unvaccinated people do so less frequently (if at all)… lets also assume that unvaccinated people who are infected tend to seek treatment and tend to stay isolated while vaccinated individuals tend to carry on in public spreading the disease.

So without debating the above…. If this is all found out to be the truth, I then can assume that all pro-vax-passport people here would agree, that we should ban them from everything they want to ban the unvaccinated for today – can I get you word on that.


Be careful what you wish for.

Lol this is hilarious...