TousAntiCovid Verif verifies passes very quickly within a specific configuration

With the Constitutional Council set to rule on the extension of the health pass for restaurants and certain transport on Thursday, August 5, the IN Group (formerly the National Print Office) finally released Code proof Of the application TousAntiCovid Verif It is used by professionals to scan passes. This code, which is only partially available, has been analyzed by the developer GilpsJilps, He noted several contradictions.

One big problem is that if we convert the Android phone to English (used to verify the pass, not to issue the pass), the application will consider all QR codes valid. We were able to verify a malfunction:

This is a pretty total growth bug that can lead to problems this holiday season. Travel professionals who use the built-in Android device in English will get the green light for all QR codes, even if incorrect, until the anomaly is resolved. In the iOS version of TousAntiCovid, this is not a problem because the implementation is different.

gilbsgilbs also criticizes the source code license for privacy and binding. It forbids fork (alternative versions based on the same code) and redistribution of resources. There is one such application in Switzerland Open source, He believes France should do the same and not play safely in the dark. Recently, INGroup added encryption from end-to-end conversion of certificates passing through US Agama’s servers. Orange should be soon To take responsibility.