Pictures of cats, Mickey Mouse, even a takeout menu from a BBQ restaurant: Users of New York City’s COVID SAFE app have discovered they can upload just about any photo into the new vaccine verification software.
Though the app only debuted this week, its vulnerabilities have come under scrutiny as the city announced a new policy to require proof of at least one dose of a COVID-19 vaccine for entry to indoor dining, gyms and entertainment performances.
“The New York City app is nothing more than a glorified photo storage app,” said Brian Linder of cybersecurity research company Check Point. He added, “When someone shows a picture of a card in this app, it’s believed that it’s real, but there’s absolutely no verification of it whatsoever.”
Hellbound and Down 