"Absolutely wrong.
Timestamp is the time of pdf download. Everytime you repeat the process timestamp will change.
Difference in confirmation code is because he used 2 different state labs on 16th and 22nd.
Very poor analysis, I have to conclude."[1]
"You need to understand that these papers are not fakes. Both tests, database records as well as pdf certificates are 100% legit.
He and his family have enough influence in state institutions to organize 100% original PCR certificate but with false positive result."[2]
"I have now checked your theory with my PCR test from October 1st. I have downloaded it now from http://e-zdravlje.gov.rs, scan QR code and timestamp from URL is 1641917096 (Tue Jan 11 2022 16:04:56 GMT). So timestamp in URL is not when test is done, but when test is downloaded"[3]
I wouldn't have bet a public accusation of this magnitude on those auto-incrementing ID's. There's a possibility the earlier positive test was conducted privately and was only registered with the government at a later date when he knew it would be required for visa purposes.
It could very well be a unique ID not for the test but for the generated pdf document. 100% have done a system like this and we put the ID of the "doc" rather than the internal entity. This is also not a smoking gun in my opinion.
The Spiegel article [1] additionally claims (and supports with screenshots) that the 7371999-259039 certificate reported a negative result at a previous point in time. Unfortunately there is no way to verify that, but still: Any ideas how it could be explained?
They claim that they got both negative and positive results yesterday, which almost has to be user error or a software bug. Even if someone at the Serbian health agency had write access and were dedicated to helping Djokovic, why would they want to change the results a week after he landed in Australia? (A bad table join could easily cause this, although I'm not sure why that wouldn't have caused larger issues in Serbian test tracking.)
Regarding (2): in French we call those "faux vrai papiers", fake real papers. They are records that are issued via the legitimate system, but fraudulently. There is an epidemic of fake Covid vaccination records coming from France of this type, and being bought at least in Switzerland, and probably all over Europe
This is very sad development for me, Djokovic's countryman who really bought his story. Nut facts are facts.
I can share my own (positive) test, which confirms timestamp and id theory. My test was taken on the 7th January, it was a rapid test, not a PCR. But it's in the same government database:
Timestamp: 1641591150, which translates to GMT: Friday, 7. January 2022. 21:32:30. That seems to be right, it was taken earlier on the 7th and probably entered later to the central database.
Also, ID of my test is: 7601263. Djokovic IDs are 7371999 (16/12 test) and 7320919 (22/12 test).
It really looks like IDs are incremental, and that his test that was supposedly taken on the 16th was taken on the later date.
One consolation fact is that he wasn't positive when he took photos with kids on 17th.
EDIT:
I messed up and copied Novak's QR url! fixed now!
Ok, this is getting strange. There are two ways to get test results:
- it's automatically sent to email (if they have it)
- you can download it from ezdravlje.rs portal
The test I shared above is the one I got on email. However, I went to portal, downloaded pdf, and now I have two copies. They're different! IDs and all the data are the same, but QR codes are different.
Timestamp on new pdf is: 1641923234, which is GMT: Tuesday, 11. January 2022. 17:47:14
So it appears that timestamp is related to when pdf is generated, and when you download it from the portal it's generated at that point of time, i.e. there are no pdf documents sitting on government server!
So this timestamp is definitely no proof of forgery. But test ID might be - that one is still suspicious.
And one more thing, when I switch tabs with my two QR codes - page content is the same but shifted a bit. I didn't look into html/css to see what's different.
The question I have is this - is the test ID generated when the test results are generated for the first time (either sent by email if they have it, or accessed through eGov or eHealth portal), or are they generated as soon as test results are complete? If it's the former, then it's theoretically possible that the first (positive) results have been downloaded for the first time on Dec 26, and thus have a higher ID number.
Unfortunately, no data points from me, even though I have been tested MANY times due to my profession. They've got my email, so they obviously get generated immediately.
However, I do have a data point for screenshots when QR code of the positive test stated that the result was negative. This is something that happened to me as well (back in 2020, once, and never since then). It was a bug, obviously. The second part of the ID is person-specific (all my test results have that second part identical, regardless of when they were taken) - it seems that if a positive test is followed by a negative test, that happens sometimes.
Additionally, on Novak's PCR test from Dec 16th on the website, the test result "NEGATIVE" had been changed to "POSITIVE" sometime around 14h00 on January 10th.
Noticed by several people, including myself (took screenshot even myself before and after).
BTW, apparently my IP address has now been blocked accessing to that website :)
I get this message now:
"Ваша адреса је блокирана 24 сата!
Vaša adresa je blokirana 24 sata!
Your address is blocked for 24 hours!"
Skipping the part where I discuss my general doubt of intellectual capabilities of the fellow commenters here.
- Datum uzorkovanja (Date of sampling): 22.12.2021 14:12:10
- Datum izdavanja rezultata (Date of issuance of results): 22.12.2021 16:15:49
=> I will ignore the time needed to get the actual swabs to the laboratory and do the necessary paperwork etc and round this to ~2 hours of time available for testing.
- Vrsta analize i proizvodjac testa (Type of analysis and test manufacturer): Real Time PCR test-SARS-CoV-2, , Sansure Biotech INC; Hunan Province
See, unless my fellow countrymen have developed a way to do PCR tests 5 times faster than the fastest tests available in the (rest) of the world, this test in itself is a joke. This is the reason PCR testing: costs, is usually indicated by symptoms already present/positive antigen test.
Unfortunately the Serbian registry doesn't provide a timestamp for when each test was taken.
But our intrepid OSINT researcher discovered that the data in the QR code begins with a UNIX timestamp, such as cqcode=1640187792... and cqcode=1640524880...
From that one might infer that the positive test actually happened 4 days after the negative test.
The documents Djokovic provided to the court claim the positive test happened 7 days before the negative test.
'Цовид-19' has to be one of the laziest transliterations I've ever seen. Coronavirus is spelled with an initial К in every Cyrillic-using language I'm aware of, not a Ц (ts) sound in English. It's basically a keyboard IME transliteration, since in Serbian, "c" would be the Roman equivalent of "ц".
Yep, Serbo-Croatian (technically Bosnian-Montenegrian-Croatian-Serbian) "K" for "koronavirus". The only difference between languages is Latin versus Cyrillic.
I've just managed to get my ip address a 24 hour ban by tweeking the timestamp parameter once! Which is a pretty obvious DoS vulnerability if anyone wanted to disable a venue's pass verification ability.
We have the deepest respect for the German language, but HN is an English language site and posts here need to be in English. It's hard enough to get people to read the articles even when they are.
Good for Serbia for implementing some centralized system. A PCR test result in the U.S has absolutely no way of being verified, either negative or positive
In Israel, which swabs every person who lands at the airport. There is a suspiciously steady stream of people flying in from the U.S who were negative before take off and positive 10 minutes after landing
For Omicron, with an incubation period of three days, one should expect negatives to turn positive with a transatlantic flight.
Google suggests that it takes 10-12 hr to fly from NYC to Israel. That's a long time with a fast virus. (Even with a week's incubation period, you'd still expect to see it, just less.). Furthermore, many of those negative tests will have been 24-48 hr prior to takeoff, depending upon legal requirements that day.
It's okay to suspect malice, but it may not be necessary here :).
Doesn't the thread suggest someone has fiddled the system on Djokovic's behalf? If that's the case then the centralized PCR verification system is nothing but a house of cards.
No centralised government conspiracy needs to be invoked here.
The corresponding QR codes in the documents still point to a negative and a positive test result in the Serbian database. The charge is that the Date of Sampling/Sample ID/Date of Results was swapped in what appears a Word document [1]
The timestamp is likely when the entry was opened in the system.
Not when the test was made.
Normally that's the same.
But it's not enforced, as for example a test center which lost it's internet connection temporary is still allowed to add tests once the connection is back up.
So we don't know for sure that the test is manipulated.
We only know for sure that it was placed later in the system, not that it was made later.
Depends on where you got tested in the US. States like NY, NJ, CA and others have mandatory reporting requirements, so test results get returned to the county or state DOH and are verifiable.
The problem is at the state level, you have a lot of weird political stuff that influences what and how each state performs certain processes.
There’s also a huge flow of travel from US to Israel, and lots of weird corner cases and loopholes. (Just like Canada and Mexico)
But Serbia's system seems flawed, the EU system has all the data encoded in the QR-code, including name, the date the test was performed, the sort of test (PCR or antigen), and the result, plus a digital signature to prevent changing of those fields. And the QR code is given to the person and is static. The app that checks it checks that the document hasn't been modified by verifying the digital signature. What Serbia seems to have done is to have a PDF with the timestamp, and QR code which goes to a website showing a database entry with no timestamp (except for the URL which apparently does contain a Unix timestamp, but that's not authoritive nor easily parsable by huamns).
So if I got a negative test in July and a positive one yesterday, and I want to fly somewhere, it seems I can just copy the QR code from the test in July and paste it into a Word document that says "The test was performed on January 10, 2022, and the result is available through this link: [QR code with the link to the results from July 2021]". And it seems this document doctoring (with a document with a result that allows unvaxed entry) is what Team Djokovic has done.
I do not think that is entirely true - all my PCR tests have contained the name of the lab where the test was performed as well as the performing (or, in some cases), supervising physician.
That does not mean it is easy to verify test results, but it should be possible.
I find it funny how some countries suddenly make your life a lot easier if you have a positive test history.
Canada has a fairly annoying requirement to have a negative PCR test taken within 72h of takeoff (or arrival by car), which can be dicey/expensive in many parts of the world to get, but if you have a positive PCR result from 14-180 days, this requirement drops and travel gets a lot easier than those that never got a positive covid test. Regardless of vaccination status.
A rapid or PCR test from within the last calendar day is required to enter the USA. It's pretty hard to get that in many countries now b/c the winter/omicron surge. Plus, it's often expensive.
USA only requires that for air passengers. Requiring overseas checkin agents to be disease doctors was okay, but asking CBP to verify paperwork and stop threats at the border was too much to ask.
I had a friend in Mexico and took PCR on Monday for Tuesday flight. Tuesday flight got cancelled. Couldn't get ahold of 2 major airlines on phone on Tuesday so just showed up to airport on Wednesday to get any flight into Canada before 72 hour test expired. A bit of a mess.
PCR tests can come back positive for several months post-infection, so there may be no point in testing people in that post-infection period, because it will come back with too many false positives to be useful. 180 days sounds long for that, but people do test positive for months sometimes.
The reason you can test positive for so long is that it takes time for remnant RNA from the virus to totally leave your system, and even though it's not replicating (you aren't infected or infectious), the PCR test is just detecting the RNA.
Sure, and in isolation, it's even a reasonable guideline. The issue is that combined with most of the other covid guidance, the incentives are misaligned.
The choices become
1. Follow the majority guidance, wear masks, avoid large gatherings, get vaccinated, get tested often.
In which case you will have to continue paying for testing to travel (and risk not being able to travel at the last minute)
OR...
2. Intentionally go get covid (usually by neglecting all the above guidance). Get a positive result. Avoid expensive testing, have easier travel, get easier access to gatherings.
I wouldn’t call it more durable, but it can be more diverse/flexible (there’s more to covid-19 than a specific spike sequence).
But if it was more durable (long-lasting), they wouldn’t have the 180d limit. They put that limit in because of the (lowwwww) risk of continuing to test positive after recovery, but the worst case report I’ve seen is in the 6 week after recovery range.
It’s mostly Canada trying to be punitive when it comes to travelling by requiring PCR, when a within-24h antigen test would be cheap, easy, catch as many asymptomatic cases as a less-fresh PCR, and near zero-risk of false positives immediately after recovery.
Please cite your supporting sources for that assertion. What I have been hearing does not support that, and even seems to be slightly the opposite (but not a lot of weight on those).
From the whole timeline, it would look to me as someone created a later test result that they backdated for him to be able to apply for a Visa. This would explain why Djokovic was out in public at the time he was apparently positive (I doubt he would have public appearances after a day after a positive test) and it would explain the test result ID discrepancy.
It could also explain why the positive test result was generated on 26th and the negative one on 22nd.
Thank you. I'd say that is very convincing, especially with him walking about on 16, 17th and 18th.
When scanning a QR code, is the date visible anywhere on the page? I am trying to guess whether someone just edited a PDF with a different date (might explain why they chose 16.12 - you need to change a single number). Alternative would require someone back dating a test in the system.
Apparently the qr code (and related timestamps) are generated when the result document is downloaded, not when the test is performed. Der Spiegel should have confirmed their theory with other serbians who have access to test results.
"You need to understand that these papers are not fakes. Both tests, database records as well as pdf certificates are 100% legit. He and his family have enough influence in state institutions to organize 100% original PCR certificate but with false positive result."[2]
"I have now checked your theory with my PCR test from October 1st. I have downloaded it now from http://e-zdravlje.gov.rs, scan QR code and timestamp from URL is 1641917096 (Tue Jan 11 2022 16:04:56 GMT). So timestamp in URL is not when test is done, but when test is downloaded"[3]
[1]https://twitter.com/CharlieWafflees/status/14809568793249955...
[2]https://twitter.com/CharlieWafflees/status/14809588647617003...
[3]https://twitter.com/blokovi/status/1480938239515148297
16th: 7371999-259039
22nd: 7320919-259039
Does anyone have an explanation of how that code works. Could it have been related to a manufacturing batch of tests that’s been used out of order?
Those of you here with test results how does that code relate to your testing date?
[1] https://www.spiegel.de/international/world/novak-djokovic-we...
https://pcr.euprava.gov.rs/validate.php?cqcode=1640187792DOH...
The positive test result:
https://pcr.euprava.gov.rs/validate.php?cqcode=1640524880jk8...
I can share my own (positive) test, which confirms timestamp and id theory. My test was taken on the 7th January, it was a rapid test, not a PCR. But it's in the same government database:
https://pcr.euprava.gov.rs/validate.php?cqcode=1641591150Q!A...
Timestamp: 1641591150, which translates to GMT: Friday, 7. January 2022. 21:32:30. That seems to be right, it was taken earlier on the 7th and probably entered later to the central database.
Also, ID of my test is: 7601263. Djokovic IDs are 7371999 (16/12 test) and 7320919 (22/12 test).
It really looks like IDs are incremental, and that his test that was supposedly taken on the 16th was taken on the later date.
One consolation fact is that he wasn't positive when he took photos with kids on 17th.
EDIT: I messed up and copied Novak's QR url! fixed now!
- it's automatically sent to email (if they have it)
- you can download it from ezdravlje.rs portal
The test I shared above is the one I got on email. However, I went to portal, downloaded pdf, and now I have two copies. They're different! IDs and all the data are the same, but QR codes are different.
This is the new one: https://pcr.euprava.gov.rs/validate.php?cqcode=1641923234g3D...
Timestamp on new pdf is: 1641923234, which is GMT: Tuesday, 11. January 2022. 17:47:14
So it appears that timestamp is related to when pdf is generated, and when you download it from the portal it's generated at that point of time, i.e. there are no pdf documents sitting on government server!
So this timestamp is definitely no proof of forgery. But test ID might be - that one is still suspicious.
And one more thing, when I switch tabs with my two QR codes - page content is the same but shifted a bit. I didn't look into html/css to see what's different.
Unfortunately, no data points from me, even though I have been tested MANY times due to my profession. They've got my email, so they obviously get generated immediately.
However, I do have a data point for screenshots when QR code of the positive test stated that the result was negative. This is something that happened to me as well (back in 2020, once, and never since then). It was a bug, obviously. The second part of the ID is person-specific (all my test results have that second part identical, regardless of when they were taken) - it seems that if a positive test is followed by a negative test, that happens sometimes.
BTW, apparently my IP address has now been blocked accessing to that website :) I get this message now: "Ваша адреса је блокирана 24 сата! Vaša adresa je blokirana 24 sata! Your address is blocked for 24 hours!"
- Datum uzorkovanja (Date of sampling): 22.12.2021 14:12:10
- Datum izdavanja rezultata (Date of issuance of results): 22.12.2021 16:15:49
=> I will ignore the time needed to get the actual swabs to the laboratory and do the necessary paperwork etc and round this to ~2 hours of time available for testing.
- Vrsta analize i proizvodjac testa (Type of analysis and test manufacturer): Real Time PCR test-SARS-CoV-2, , Sansure Biotech INC; Hunan Province
See, unless my fellow countrymen have developed a way to do PCR tests 5 times faster than the fastest tests available in the (rest) of the world, this test in itself is a joke. This is the reason PCR testing: costs, is usually indicated by symptoms already present/positive antigen test.
You're welcome.
Take care
Deleted Comment
Dead Comment
Dead Comment
But our intrepid OSINT researcher discovered that the data in the QR code begins with a UNIX timestamp, such as cqcode=1640187792... and cqcode=1640524880...
From that one might infer that the positive test actually happened 4 days after the negative test.
The documents Djokovic provided to the court claim the positive test happened 7 days before the negative test.
https://twitter.com/blokovi/status/1480945535620108296
Croatia, for example has its official coronavirus webpage as https://koronavirus.hr
Deleted Comment
Dead Comment
Dead Comment
We have the deepest respect for the German language, but HN is an English language site and posts here need to be in English. It's hard enough to get people to read the articles even when they are.
In Israel, which swabs every person who lands at the airport. There is a suspiciously steady stream of people flying in from the U.S who were negative before take off and positive 10 minutes after landing
Google suggests that it takes 10-12 hr to fly from NYC to Israel. That's a long time with a fast virus. (Even with a week's incubation period, you'd still expect to see it, just less.). Furthermore, many of those negative tests will have been 24-48 hr prior to takeoff, depending upon legal requirements that day.
It's okay to suspect malice, but it may not be necessary here :).
The corresponding QR codes in the documents still point to a negative and a positive test result in the Serbian database. The charge is that the Date of Sampling/Sample ID/Date of Results was swapped in what appears a Word document [1]
[1] https://twitter.com/zerforschung/status/1480924213309550594/...
The Netherlands could make up 5000 ghost identities and issue them passports. How would passport control at JFK airport know?
Not when the test was made.
Normally that's the same.
But it's not enforced, as for example a test center which lost it's internet connection temporary is still allowed to add tests once the connection is back up.
So we don't know for sure that the test is manipulated.
We only know for sure that it was placed later in the system, not that it was made later.
Which is still very suspicious.
The problem is at the state level, you have a lot of weird political stuff that influences what and how each state performs certain processes.
There’s also a huge flow of travel from US to Israel, and lots of weird corner cases and loopholes. (Just like Canada and Mexico)
Those states have no rapid tests? Nobody in those states can buy a test at CVS and take it at home?
https://ec.europa.eu/info/live-work-travel-eu/coronavirus-re...
Deleted Comment
So if I got a negative test in July and a positive one yesterday, and I want to fly somewhere, it seems I can just copy the QR code from the test in July and paste it into a Word document that says "The test was performed on January 10, 2022, and the result is available through this link: [QR code with the link to the results from July 2021]". And it seems this document doctoring (with a document with a result that allows unvaxed entry) is what Team Djokovic has done.
That does not mean it is easy to verify test results, but it should be possible.
Canada has a fairly annoying requirement to have a negative PCR test taken within 72h of takeoff (or arrival by car), which can be dicey/expensive in many parts of the world to get, but if you have a positive PCR result from 14-180 days, this requirement drops and travel gets a lot easier than those that never got a positive covid test. Regardless of vaccination status.
Edit: Also, the cost is much higher. In Mexico I paid $25 for an antigen test. The PCR test cost $100.
Source: That's how I re-entered the country recently.
The reason you can test positive for so long is that it takes time for remnant RNA from the virus to totally leave your system, and even though it's not replicating (you aren't infected or infectious), the PCR test is just detecting the RNA.
The choices become
1. Follow the majority guidance, wear masks, avoid large gatherings, get vaccinated, get tested often.
In which case you will have to continue paying for testing to travel (and risk not being able to travel at the last minute)
OR...
2. Intentionally go get covid (usually by neglecting all the above guidance). Get a positive result. Avoid expensive testing, have easier travel, get easier access to gatherings.
Dead Comment
But if it was more durable (long-lasting), they wouldn’t have the 180d limit. They put that limit in because of the (lowwwww) risk of continuing to test positive after recovery, but the worst case report I’ve seen is in the 6 week after recovery range.
It’s mostly Canada trying to be punitive when it comes to travelling by requiring PCR, when a within-24h antigen test would be cheap, easy, catch as many asymptomatic cases as a less-fresh PCR, and near zero-risk of false positives immediately after recovery.
From the whole timeline, it would look to me as someone created a later test result that they backdated for him to be able to apply for a Visa. This would explain why Djokovic was out in public at the time he was apparently positive (I doubt he would have public appearances after a day after a positive test) and it would explain the test result ID discrepancy.
It could also explain why the positive test result was generated on 26th and the negative one on 22nd.
Only outlier is Djokovic's positive test. It perfectly fits to 26. December, the same date timestamp was created.
When scanning a QR code, is the date visible anywhere on the page? I am trying to guess whether someone just edited a PDF with a different date (might explain why they chose 16.12 - you need to change a single number). Alternative would require someone back dating a test in the system.
In any case, not a good look for Djokovic.
Apparently the qr code (and related timestamps) are generated when the result document is downloaded, not when the test is performed. Der Spiegel should have confirmed their theory with other serbians who have access to test results.