I decided to test the information system of Nizhny Novgorod for those who "want to go out" - a quote from the website of the government of the Nizhny Novgorod region . I don’t know on the basis of what federal and regional laws it is necessary to obtain a qr code for a walk with a dog, what legal status a qr code has, so I suggest leaving these questions behind the scenes. If there are legalists here - write your post; for me, like many, it would be interesting to read the explanation. I will focus on the technical component.
If in one sentence, the system is made quite conveniently (at least on a desktop computer, I didn’t look at a mobile device), but, at the time of writing this post, it does not seem to work.
The interface is pretty simple. The user is invited to identify by phone number, and authenticate with a one-time password from SMS. I got into the system two times out of five. Another SMS did not come, and the message "server is unavailable" appeared twice.
Next you need to fill in your personal data
and application form:
As you can see, there is no field validation (there is no binding of addresses to the GIS, the format of the document number is not checked). Well, okay, I'm sure that conscious citizens will fill out the address fields honestly. The following is the most confusing form of the interface.
. , — , , . , . — , , .
:
qr-, ,
https://nn-card.ru/policeman-page?covid_token={guid}
, , policeman qr-, . , , .
.
- . , . . , , , . — smoke-.
— , , , . , , — , .
, qr , .
( qr- ). , endpoint, . — endpoint, . — .
https://nn_card.ru . , .
, , . qr- — .
152- « ». . , (, GUID , ).
- . . — , , .
This is where cyberpunk comes sooner than expected - hackers will distribute illegal applications on the black market that generate qr codes to deceive patrolmen. It will be quite easy to make it, because no technical and cryptographic means of protection are used, the legal aspects of using digital means of personal identification without the use of electronic digital signatures are unclear, and the logic of work is based solely on the conscientiousness of users.