Le fameux code QR fourni par le Québec suite à la vaccination contre la COVID-19 expose relativement facilement des données personnelles sans aucune sécurité (mot de passe ou autre): nom, prénom, date de naissance, genre (homme/femme) ainsi que d’autres données qui sont cependant moins personnelles (par exemple: lieu de vaccination, date de vaccination, dose, lot de vaccin…etc).
Voici par exemple, le résultat de l’explication qui suit faite avec mon code QR fourni suite à l’administration de mes doses (j'ai masqué les informations personnelles pour des raisons évidentes) :
Comment faire?
Cette démonstration requiert l’utilisation d’un ordinateur utilisant Linux, tous les logiciels utilisés sont gratuits et disponibles à tout le monde sur Internet. Le code QR contient un code "SHC" (Smart Health Card). 1. Sauvegarder le code QR (reçu par PDF) au format image PNG (découper l'image autour du code QR afin de garder seulement le code QR dans l'image). 2. Installer “git”, “npm” et “nodejs” (“npm” est contenu dans “nodejs”)
sudo apt-get install git
sudo apt install nodejs 3. Télécharger et installer SHC Extractor.
git clone https://github.com/obrassard/shc-extractor.git
cd shc-extractor npm install 4. Sauvegarder l’image PNG de l’étape 1 sur votre ordinateur dans le dossier de votre choix (exemple: /home/user/qr_code.png) 5. Utiliser ensuite la commande suivante :
node shc.js ‘/home/user/qr_code.png’
6. Vous verrez la dernière ligne au format suivant :
JSON data was extracted to ./out/XXXXX.json
7. Vous pouvez simplement lire ce fichier avec n’importe quel éditeur de texte (c'est le fichier montré dans l'image au début de cette page).
cat ./out/XXXXX.json
0 Comments
Run in SQLExpress:
ALTER DATABASE DataBaseName SET SINGLE_USER with ROLLBACK IMMEDIATE
USE DataBaseName DBCC CheckTable ('dbo.TableName', REPAIR_ALLOW_DATA_LOSS) ALTER DATABASE DataBaseName SET MULTI_USER You try to start Google Chrome, window opens up but content of pages, tool bars...etc are not visible (some black some white) but you can't do anything else than moving the window or closing it.
I tried deinstall/reinstall, reboot, still the same... Finally there seems to be an issue with GPU parameters for Chrome version > 45.x. To fix it: start Chrome with parameter --disable-gpu. Right click on your Chrome shortcut > Properties, at the end of the box called "Target" add a white space and "--disable-gpu", see picture below. Then it works !
I recently needed to hide the cursor upon boot in the GUI on a Raspberry Pi running Raspbian. I found the following method which is easy to install and works great.
Install Unclutter and edit the LXDE autostart script:
sudo apt-get install unclutter
nano ~/.config/lxsession/LXDE-pi/autostart Turn the cursor Off by adding the following line:
@unclutter -idle 0
Then you can reboot and cursor will disappear.
I recently purchased a PIR Detector HV-SR501 and here is a simple program to use it in Python with a Raspberry Pi 3.
Let's look at the wiring:
CAUTION: Verify on the PIR sensor's board that it has to be wired as displayed, the pinout on the PIR sensor is, on some models, inverted compared to the picture.
Once wired, below is a Python program that reads from the Raspberry Pi 3's GPIO ping #11 and prints every second if a movement has been detected.
import RPi.GPIO as GPIO
import time GPIO.setmode(GPIO.BOARD) GPIO.setup(11, GPIO.IN) while True: i=GPIO.input(11) if i==0: print time.ctime(),": no mouvement detected" else: print time.ctime(),": !!!!!!!!!! mouvement detected !!!!!!!!!!" time.sleep(1) You can change the two resistances on the other side of the PIR sensor using a screw driver to vary the delay and sensibility of the sensor. Planning a two days trip to Vermont from Montreal on the bike: - ~600km+ - friendly weather... check - extra battery pack for the phone... check - pre-cached map on the phone... check - hotel booked... check - paper road map, just in case... check - tire repair kit, just in case... check - bike "Canadianized"... check Left in the morning ahead of schedule, beautiful weather. I get to Plage-Desranleau border's, turn the bike off while second in line to pass the CA/US border because a mini-van in front seems to have issues with immigration as it's taking a long time in the US office. I try to start the bike... Battery's dead ! So close to the US ! Probably the only thing I do not have a backup for ! I try to start it several times, I try to push start it... Nothing works. I decide to turn around and pushed the bike back to Canada through Canadian border office. I tried to push start the bike several times next to the border, so hard that I dropped the bike and broke a turn signal light, bike is ok though thanks to protection bars. With some help from a super nice guy (Sasha) and his family to who I asked for help, he went back to his home get cables and went back to boost the battery. Bike starts, I am super happy even though at that point the trip is cancelled, at least I'll be able to go back home, buy a new battery and a new turn signal light. But it isn't over yet. I thank Sasha an his family for helping me, he leaves. I engage first gear on the bike and... the kick stand protection triggers and stalls the bike ! I forgot the remove the kick stand . FML ! At that point I take a break on the side of the road, good thing the weather was really nice this day. I try to push start the bike again... Does not work. I refuse the help of a friend from Montreal to come and help me since it's more than an hour away from Montreal. Me stubborn ? Maybe a little =) Asked for help to another local who help me boost the battery again. This time I was on my way back to Montreal for real without stalling. Road trip #1, postponed. La Presse's news, McDonald's job offers' website has been hacked: www.lapresse.ca/techno/actualites/201703/31/01-5084192-le-site-dembauche-de-mcdonalds-canada-pirate.php
From Windows XP to latest Windows 10 affected by the DoubleAgent vulnerability allowing to inject custom DLL into applications even antiviruses: see the full article on The Hacker News and also a link to the Youtube demo:
- thehackernews.com/2017/03/hacking-windows-dll-injection.html - www.youtube.com/watch?v=-ZL9WSuDAqk Very good API for MAC address lookup, free, fast and reliable macvendors.com/
|
Archives
July 2021
Categories
All
|