I would expect that might be a problem and would advise against it. If we are required to keep contact tracing for attendees for conventions in Las Vegas in the event of an outbreak, so they can be informed of an outbreak, we wouldn't have the contact information of the person that attended. Under the present plan, if your 11 year old does not have proof of vaccination, they wouldn't be allowed to pick up a badge.Īs for transferring your badge or donating it, that might be a problem. The policy that is posted as of now requires proof of vaccination at time of badge pick-up and masks to be worn. I may not speak on what the policy will be or provide any exceptions. I would love to come on-site this year, I just don't understand yet how that can be made reasonably safe. I'm open to hearing that smarter people than me have this problem solved. If there was a reasonable way to administer antibody tests on-site, that would solve this, but that can not be done in a cost-effective and/or logistically reasonable way. I do not think there is any *reasonable*, *safe*, and * cost-effective* method that can be used to verify proof of vaccination and without that, it seems irresponsible to me to invite thousands of hackers to Vegas to share a space. A vaccination card is easy to forge and there are too many people in this community that has already been very vocal about not getting the vaccine. If we were talking about "a night out at the bar" with a dozen people then the risk profile is much lower than at a Los Vegas convention with a community that prides itself in its ability to break rules. As the US, and most of the rest of the world is not issuing any sort of "proof" of vaccination, there is no answer here. "Would a vaccination card and photo ID work? Isn't that too much PII? If a photo ID could have "all but essential data for confirming the details on the vaccine card match the photo ID" what would that include? Is there a way for people to "mask out" details on a photo ID and vaccination card but still provide the *minimum* required to complete a chain of validating the person present is the one that matches the vaccination card? Is there a way to complete this process and not record data about attendees but meet enough requirements that the convention is not shut down?" Would a vaccination card and photo ID work? Isn't that too much PII? If a photo ID could have "all but essential data for confirming the details on the vaccine card match the photo ID" what would that include? Is there a way for people to "mask out" details on a photo ID and vaccination card but still provide the *minimum* required to complete a chain of validating the person present is the one that matches the vaccination card? Is there a way to complete this process and not record data about attendees but meet enough requirements that the convention is not shut down? Badge purchases pay for running the convention. If a DoS can stop badges from being sold, that would be a problem. In order to avoid DoS, network-based systems are a bit problematic, so might be a non-starter. If you were DT, and you wanted to create a system that could avoid Denial of Service, but meet the requirements from (1) Hotel/Casino, (2) City of Las Vegas, (3) state of Nevada, (4) US Government for conventions/gatherings (if any) *and* avoid access to people's PII, or at least reducing access to PII to the least amount required, and record only what was required, what would you suggest? Better to have it and not need it than need it an not have it.Īs for "how the COVID-19 vaccine status will be checked" I don't have an answer for you on this, but new ideas are welcome. In case it is required, I would bring whatever card/evidence was provided to you as proof of vaccination. "Also, how will the Covid vaccine status be checked and verified? Do you need to bring your CDC Covid vaccine certificate?" If the DEF CON in-person event is cancelled, then the present plan (as of May 21, 2021) is to total the difference in price between in-person badge and the virtual badge, then subtract the cost of shipping from that, and use that result as a partial refund, then use a postal service to mail a virtual badge to the person. If you paid for a "virtual badge" those are to be mailed through some sort of postal service. If you paid for an "in-person badge" those are picked up in-person if the in-person DEF CON happens.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |