“The failings are dramatic”: Further security flaws leave Australia’s vaccination certificates open to forgery

“The failings are dramatic”: Further security flaws leave Australia’s vaccination certificates open to forgery

Another tech-savvy Aussie has pointed out how easy it is to forge the government’s COVID-19 vaccination certificates, which could be a huge problem for domestic, and, potentially international travel.

Melbourne-based software developer Finn Bailey told ABC News the government was using “high-school grade” security to protect the document from being copied or altered.

He said the failings are “dramatic” to anyone who is fairly qualified in this field, and that the name and vaccination status on the certificate can both be altered using a well-known technique.

“One could argue that this means these [documents] are not certificates, in that they fail to meet the definition of being certified as authentic,” Bailey said.

“You can make it say whatever you want.”

Last month, a Sydney-based software engineer Richard Nelson posted to Twitter about an “obvious” security flaw that made it possible to forge the vaccine certificates in just 10 minutes using free software including anti-forgery animation used in the background.

Nelson notified the government with details about flaw, but ABC News reported that he had still not heard back as of this morning.

On Wednesday, Tourism Minister Dan Tehan said the government would have a “vaccine passport”, which Australians could use to travel overseas, up and running in the coming weeks.

The certification scheme will be separate from the certificates currently available to Australians through the Express Plus Medicare app.

Tehan said the government was developing a QR code with the International Civil Aviation Organisation that would allow the new certificates to be recognised across the globe.

Australians will be able to use the easily-forged certificates to access greater freedoms in locked-down areas of New South Wales next week, including more time outdoors, with more privileges expected to be added as the vaccination rate grows.

According to ABC News, the NSW government will trial its own “vaccine passport” on the Services NSW app which the state currently uses to check in to venues.

It is now known whether the app will be similar to the Medicare version or feature a QR code like the federal government plans to use for international travel.

A Services NSW spokesperson told ABC News that the vaccination certificate and check-ins would have “a number of security features which can be validated to help reduce risk of fraud”.

Forging proof of vaccination appears to be on the rise overseas, with a 24-year old woman facing charges for using a forged COVID-19 certificate to skip quarantine requirements while travelling to Hawaii.

And she may have gotten away with it if she hadn’t misspelt the name of the vaccine she claimed to have received.

Reuters has reported a booming market for fake vaccine certificates has cropped up online, with the head of a cyber intelligence firm telling the news outlet he has seen “hundreds” of websites on the dark web selling the forgeries for as little as $12.

Latest News

  • Destinations
  • Tour Operators

Mat McLachlan Battlefield Tours advises final call for Anzac Day 2025

Mat McLachlan Battlefield Tours has advised that the final call for Anzac Day 2025 is on 31 January 2025 with pre-registration also available for Anzac Day 2026. Travellers are encouraged to book their spot for either the 10-day Anzac Day on the Western Front departing on 19 April from Paris or the 8-day Anzac Day […]

  • Destinations
  • Hotels

Two destinations to visit in Mexico for Valentine’s Day

Valentine’s Day is quickly approaching and here are two romantic getaway destinations in Mexico to make any traveller’s day with their special someone even better. Casona Roma Norte, Mexico City This Valentine’s Day is the perfect time to visit Mexico City, as the streets come alive with roses, heartfelt gifts, and the city basks in […]

  • Aviation
  • Luxury

Emirates debuts new uniform for Premium and VIP Passenger Services team

Emirates has debuted a new uniform designed for its Premium & VIP Passengers Services team, who are responsible for the seamless transfer of VIPs through Dubai International Airport. The new uniform has echoes of the iconic Emirates cabin crew look, however, exclusively represents Emirates’ elite unit that caters to high profile customers. A new look […]

  • Appointments
  • News

BEIA appoints Rachel Cook as its new chair

The Business Events Industry Aotearoa (BEIA) Approved Professional Conference Organisers (PCO) Group has appointed Rachel Cook as its new chair. Cook is the business director of Conference Innovators (CI) and since joining CI 20 years ago has been instrumental in the company’s continuing growth and success. She plays a pivotal role in building and supporting […]

  • Hotels

Gaya Island Resort unveils its Wildlife Wonders package

Gaya Island Resort has unveiled its Wildlife Wonders package, a meticulously crafted 4-day, 3-night adventure designed for nature enthusiasts eager to discover the island’s rich biodiversity. The resort is nestled on the tranquil shores of Pulau Gaya, the largest island in Tunku Abdul Rahman Marine Park just off Kota Kinabalu. Its location makes it the […]

  • News

New Caledonia is open and ready for business as Smartraveller downgrades warning

Eight months after the civil unrest, the South Pacific destination of New Caledonia has reopened and is ready to welcome Australian tourists. Smartraveller has recently downgraded its travel advice to the destination following the removal of the nation’s curfew on the 2nd of December. The island is currently rated as amber – ‘exercise a high […]

  • Business Travel
  • Hotels

Atura Wellington unveils newly refurbished rooms in the New Zealand hotel

Atura Wellington, the former Thorndon Hotel by Rydges, has unveiled its newly refurbished rooms in the New Zealand hotel. The rooms were completed following a full refurbishment of all public spaces as part of a broader redevelopment plan. All 108 guest rooms have now been upgraded. The hotel is in the historic Thorndon neighbourhood and […]