Email or username:

Password:

Forgot your password?
blinry's posts Post Back to profile
Top-level
bitman

@blinry @piko quick question: do you know anything about the two QR codes found in the back of Mexican voter's ID? It seems to not only have the user's information encoded, but also a color picture and they don't seem to be readable by most QR code reader apps.

21 Jan 2024 at 22:16 | Wall-to-wall | Open on infosec.exchange
3 comments
ewanm89

@bitman @blinry @piko I'll start with that only if they have the 3 square alingnment boxes in the corners is it a QR code. Most of the data on said cards from what I can see from a google search is not in a QR Code format, but a variant of PDF417 (this is not the same PDF as the file format from adobe). Such a format is a bit more complex than QR Code with using a base 929 encoding of the data.

22 Jan 2024 at 17:55 | Open on intahnet.co.uk
ewanm89

@bitman @blinry @piko
Said PDF417 is used by quite a few governments for government ID data, including "RealID" by US Homeland Security on US driving licences and Israel uses it on their visa documents. It is a format designed for being read by uncordinated linear scan rather than image sensor. I doubt the image is actually stored on the card in that data, but a reference to where to find the image in government database.

22 Jan 2024 at 17:57 | Open on intahnet.co.uk
bitman

@ewanm89 @blinry @piko oh, I see where the confusion might be coming from, as OLDER versions of the INE card USED PDF417, however, newer ones use two high-density QR codes on the back, and there's even an official app from the Electoral Authority to read and validate IDs by scanning said codes, which results in the full name and other data of the holder, as well as a color picture.

Here's is a link to both versions of the app. You might find a specimen going around, but after scanning it, it says is invalid. I also tried using the official app WITHOUT any sort internet connection and it worked just fine, meaning the data is indeed contain within those QR codes to the best of my understanding:

Apple App Store: apps.apple.com/mx/app/valida-i

Google Play Store: play.google.com/store/apps/det

Newspaper talking about it and specimen with QR codes: eluniversal.com.mx/nacion/poli

If you want a real ID to be able to scan the codes, PM me and I'll *see what I can do.

@ewanm89 @blinry @piko oh, I see where the confusion might be coming from, as OLDER versions of the INE card USED PDF417, however, newer ones use two high-density QR codes on the back, and there's even an official app from the Electoral Authority to read and validate IDs by scanning said codes, which results in the full name and other data of the holder, as well as a color picture.

23 Jan 2024 at 14:42 | Open on infosec.exchange
Go Up