“The failings are dramatic”: Further security flaws leave Australia’s vaccination certificates open to forgery

“The failings are dramatic”: Further security flaws leave Australia’s vaccination certificates open to forgery

Another tech-savvy Aussie has pointed out how easy it is to forge the government’s COVID-19 vaccination certificates, which could be a huge problem for domestic, and, potentially international travel.

Melbourne-based software developer Finn Bailey told ABC News the government was using “high-school grade” security to protect the document from being copied or altered.

He said the failings are “dramatic” to anyone who is fairly qualified in this field, and that the name and vaccination status on the certificate can both be altered using a well-known technique.

“One could argue that this means these [documents] are not certificates, in that they fail to meet the definition of being certified as authentic,” Bailey said.

“You can make it say whatever you want.”

Last month, a Sydney-based software engineer Richard Nelson posted to Twitter about an “obvious” security flaw that made it possible to forge the vaccine certificates in just 10 minutes using free software including anti-forgery animation used in the background.

Nelson notified the government with details about flaw, but ABC News reported that he had still not heard back as of this morning.

On Wednesday, Tourism Minister Dan Tehan said the government would have a “vaccine passport”, which Australians could use to travel overseas, up and running in the coming weeks.

The certification scheme will be separate from the certificates currently available to Australians through the Express Plus Medicare app.

Tehan said the government was developing a QR code with the International Civil Aviation Organisation that would allow the new certificates to be recognised across the globe.

Australians will be able to use the easily-forged certificates to access greater freedoms in locked-down areas of New South Wales next week, including more time outdoors, with more privileges expected to be added as the vaccination rate grows.

According to ABC News, the NSW government will trial its own “vaccine passport” on the Services NSW app which the state currently uses to check in to venues.

It is now known whether the app will be similar to the Medicare version or feature a QR code like the federal government plans to use for international travel.

A Services NSW spokesperson told ABC News that the vaccination certificate and check-ins would have “a number of security features which can be validated to help reduce risk of fraud”.

Forging proof of vaccination appears to be on the rise overseas, with a 24-year old woman facing charges for using a forged COVID-19 certificate to skip quarantine requirements while travelling to Hawaii.

And she may have gotten away with it if she hadn’t misspelt the name of the vaccine she claimed to have received.

Reuters has reported a booming market for fake vaccine certificates has cropped up online, with the head of a cyber intelligence firm telling the news outlet he has seen “hundreds” of websites on the dark web selling the forgeries for as little as $12.

Latest News

  • Aviation
  • Travel Agents

Webjet relaunches partnership with AirAsia with a huge Asia flights sale

Online travel agency Webjet has have relaunched their partnership with AirAsia with a huge Asia flights sale, available until 2 June. To give customers a greater breadth of choice and price point, hundreds of new flight options to Aussie favourite destinations have been added, including Bali, Kuala Lumpur and Bangkok via AirAsia, AirAsiaX, Thai AirAsia […]

  • Luxury

Why luxury clients are opting for immersive experiences over material items

The Luxury Travel Collection’s (LTC) inaugural business owners Soiree took place on Hayman Island last week. The event saw luxury leaders gathering to find out more about the key trends shaping the industry. The Immersion Day, held on Thursday 16 May 2024, followed the growing luxury client trend of valuing immersive experiences over material items. […]

  • Conferences

Empowering underserved communities: Expedia Group’s drive for more inclusive travel

Expedia Group has used the EXPLORE conference at the Aria Resort in Las Vegas to highlight initiatives that empower underserved communities worldwide.   In a groundbreaking move towards fostering diversity and inclusion within the travel industry, Expedia’s Global Social Impact and Sustainability Team is dedicated to shaping a travel landscape that is safe, welcoming, and accessible […]

  • Cruise

P&O rescues Rotary volunteers after collapse of Air Vanuatu

P&O Cruises Australia has answered a plea for help from a group of young Australian Rotary volunteers, stranded in Vanuatu following the collapse of Air Vanuatu. The students, many of them teenagers from Albury, NSW, were volunteering for a youth project run by the Hive Rotary Club Australia when the airline abruptly cancelled all flights, […]

  • Destinations

Intrepid continues expansions with launch of first DMC in Jordan

Intrepid has increased its presence in the Middle East with the opening of its first destination management company in Jordan. Based in Amman, the local team will operate Intrepid’s range of nine experiential small group tours in Jordan from this summer, with a view to expanding the range for 2025 and beyond. Zina Bencheikh, managing […]

  • Appointments

Minor hotels appoints Puneet Dhawan to key Asia role

Global hotel owner and operator Minor Hotels has appointed Puneet Dhawan as head of Asia as the group plots its growth in Asia and India. From July, Dhawan will be responsible for the performance of all Minor Hotels properties in Asia, working in close collaboration with the Minor Hotels senior leadership team and will report […]

  • Appointments

Abercrombie & Kent and Crystal appoint Evon Ler to director of sales, Asia

Abercrombie & Kent Travel Group have announced that Evon Ler will join them in the new role of director of sales, Asia. She will work closely with Tony Archbold (VP, Sales, APAC, Crystal) and Susan Haberle (VP, Sales & Partnerships, APAC, A&K) with trade support across the region. Ler comes to the A&K family with more […]