“The failings are dramatic”: Further security flaws leave Australia’s vaccination certificates open to forgery

“The failings are dramatic”: Further security flaws leave Australia’s vaccination certificates open to forgery

Another tech-savvy Aussie has pointed out how easy it is to forge the government’s COVID-19 vaccination certificates, which could be a huge problem for domestic, and, potentially international travel.

Melbourne-based software developer Finn Bailey told ABC News the government was using “high-school grade” security to protect the document from being copied or altered.

He said the failings are “dramatic” to anyone who is fairly qualified in this field, and that the name and vaccination status on the certificate can both be altered using a well-known technique.

“One could argue that this means these [documents] are not certificates, in that they fail to meet the definition of being certified as authentic,” Bailey said.

“You can make it say whatever you want.”

Last month, a Sydney-based software engineer Richard Nelson posted to Twitter about an “obvious” security flaw that made it possible to forge the vaccine certificates in just 10 minutes using free software including anti-forgery animation used in the background.

Nelson notified the government with details about flaw, but ABC News reported that he had still not heard back as of this morning.

On Wednesday, Tourism Minister Dan Tehan said the government would have a “vaccine passport”, which Australians could use to travel overseas, up and running in the coming weeks.

The certification scheme will be separate from the certificates currently available to Australians through the Express Plus Medicare app.

Tehan said the government was developing a QR code with the International Civil Aviation Organisation that would allow the new certificates to be recognised across the globe.

Australians will be able to use the easily-forged certificates to access greater freedoms in locked-down areas of New South Wales next week, including more time outdoors, with more privileges expected to be added as the vaccination rate grows.

According to ABC News, the NSW government will trial its own “vaccine passport” on the Services NSW app which the state currently uses to check in to venues.

It is now known whether the app will be similar to the Medicare version or feature a QR code like the federal government plans to use for international travel.

A Services NSW spokesperson told ABC News that the vaccination certificate and check-ins would have “a number of security features which can be validated to help reduce risk of fraud”.

Forging proof of vaccination appears to be on the rise overseas, with a 24-year old woman facing charges for using a forged COVID-19 certificate to skip quarantine requirements while travelling to Hawaii.

And she may have gotten away with it if she hadn’t misspelt the name of the vaccine she claimed to have received.

Reuters has reported a booming market for fake vaccine certificates has cropped up online, with the head of a cyber intelligence firm telling the news outlet he has seen “hundreds” of websites on the dark web selling the forgeries for as little as $12.

Latest News

  • News
  • Tour Operators

CATO Touring Academy doubles achievements

The Council of Australian Tour Operators (CATO) Touring Academy has surpassed all expectations, with over 1,000 enrolments, 11,000 course completions, and more than 600 agents earning their CATO Touring Certification since its mid-2024 launch. As the travel industry gears up for another dynamic year, the CATO Touring Academy is empowering travel professionals to elevate their […]

  • Destinations
  • Tour Operators

Mat McLachlan Battlefield Tours advises final call for Anzac Day 2025

Mat McLachlan Battlefield Tours has advised that the final call for Anzac Day 2025 is on 31 January 2025 with pre-registration also available for Anzac Day 2026. Travellers are encouraged to book their spot for either the 10-day Anzac Day on the Western Front departing on 19 April from Paris or the 8-day Anzac Day […]

  • Destinations
  • Hotels

Two destinations to visit in Mexico for Valentine’s Day

Valentine’s Day is quickly approaching and here are two romantic getaway destinations in Mexico to make any traveller’s day with their special someone even better. Casona Roma Norte, Mexico City This Valentine’s Day is the perfect time to visit Mexico City, as the streets come alive with roses, heartfelt gifts, and the city basks in […]