Kent Access Permit

[darmstadt]

Apparently the system (Check an HGV is ready to cross the border (Kent Access Permit) - GOV.UK) is not working that well in that you can put in anything to get a QR code for your HGV number plate. So far there is someone with the number plate 'Cockwomble' and then this:

[NotAllThere]

The QR code is text - 245 characters - I don't know how the text decodes, but on the tests I did, you get a different code generated according to date, plates and other information entered before it's generated.

So yes, you can generate from any number plate. But so what? Presumably when you arrive at the port, they scan it, and they just might notice the number plate doesn't match (which will give you a £300 fine and you may be turned away).

[Mordac]

The QR code is text - 245 characters - I don't know how the text decodes, but on the tests I did, you get a different code generated according to date, plates and other information entered before it's generated.

So yes, you can generate from any number plate. But so what? Presumably when you arrive at the port, they scan it, and they just might notice the number plate doesn't match (which will give you a £300 fine and you may be turned away).

Some Cockwomble on Twatter gets his 15 seconds of fame though.

[courtg9000]

they have fixed it to 16 characters for the reg plate I have a permit coming for the reg plate P155FLAPS

[Paddy]

they have fixed it to 16 characters for the reg plate I have a permit coming for the reg plate P155FLAPS

This sort of behaviour is unacceptable. The next thing you know people will be using the PMs and MPs email addresses to make rude permits. Do not do this to boris.johnson.mp@parliament.uk

[clearedforlanding]

The QR code is text - 245 characters - I don't know how the text decodes, but on the tests I did, you get a different code generated according to date, plates and other information entered before it's generated.

So yes, you can generate from any number plate. But so what? Presumably when you arrive at the port, they scan it, and they just might notice the number plate doesn't match (which will give you a £300 fine and you may be turned away).

It is a very clear attack vector. The potential for degradation of the service is the issue, not a 300GBP fine for someone making a silly plate.

[NotAllThere]

It is a very clear attack vector. The potential for degradation of the service is the issue, not a 300GBP fine for someone making a silly plate.

Well, you know that. And I know that. But I bet Phil Dore doesn't. And I suspect Paddy doesn't.

Has anyone tried Robert'); DROP TABLE Registrations;