Hello, welcome to the Thursday, October 21st, 2021 edition of the Sansonet Storm Center's Stormcast.

My name is Johannes Ulrich, and I'm recording from Riyadh, Saudi Arabia.

A lot of jurisdictions these days do require COVID vaccination certificates in order to gain entry into public places like restaurants

or for travel.

Often these certificates are presented in form of a printed copy that contains a QR code.

And of course, various health information items that are identifying which vaccines you took

and when in order to qualify you as vaccinated. So with all these documents floating around,

Xavier went on a hunting expedition in order to see how many of these documents he can find on virus total.

Sadly, it looks like there's still a lot of organizations that are sending, for example,

email attachments by default to virus total, not realizing that essentially they're making

these documents public. So, for example, in order to qualify for a vacation or something like

this, you needed to send this certificate to a company and well, they may now have leaked it

to a virus total or possibly other sites. And Xavier found numerous examples with his simple search. I bet you probably could find

similar leaks also just by doing specific Google searches for these documents. Of course,

another issue is the use of QR codes here. Now, the certificates may not be so much of an issue, but in many

places also you are required to scan QR codes as you're entering venues using some specific

contact tracing applications. And Chrome has removed FTP in yet another sign that the good old file transfer protocol is going away in Chrome 95, which was released yesterday.

The complete codebase for FTP was removed.

Now, at least since about half a year ago or so, I believe, Google Chrome has no longer

supported FTP by default. Firefox did remove it July, if I remember correctly, and well,

Safari never really supported FTP. So at this point, the only place where you will likely find FTP in a web browser is probably Internet Explorer if you still keep that around.

But at the same time, be aware if you are relying on FTP servers, you probably should find another way to distribute the files, maybe HDPS,

...