Comment by Reelin | Hacker News Reader

Comment by Reelin | Hacker News Reader

Parent Full thread

> like contact tracing APIs, however well-intentioned they may be

I share many of the concerns you've expressed, but worrying about the contract tracing API that was recently put forward is (hopefully) unwarranted. A faithful implementation of the joint spec published by Apple and Google would preserve your anonymity until and unless you published your secret keys. Moreover, the overall design is cryptographically sound (unless I missed something recently?) and appears to be decentralized (at least in principle) so in theory you won't have to trust the behavior of any binary blobs unless you choose to do so.

For more insight into the design (and security) of such systems, you might take a look at the TCN protocol (https://github.com/TCNCoalition/TCN) or the DP-3T protocol (https://github.com/DP-3T/documents).

Let's assume there is no technical way the contact API can be misused. You've still conditioned massive swaths of the population to be electronically tracked, boiling frog and all.

> You've still conditioned massive swaths of the population to be electronically tracked, boiling frog and all.

I don't understand what you mean by tracked here? Until and unless you release your secret keys, the numbers your phone was broadcasting are just random gibberish to anyone other than you.

If you have Bluetooth enabled in the first place, you're already broadcasting a MAC address. Many devices now rotate that specifically to prevent tracking, making it equivalent. In fact the only real differences from your device's MAC are the bit width (tracing numbers are significantly larger) and the fact that tracing numbers are cryptographically derived from an underlying secret.

As far as conditioning massive swaths of the population to be electronically tracked, I'm afraid that ship sailed quite some time ago. Cellphones inherently reveal your (coarse) location in order to operate, modern vehicles carry extensive electronics packages that phone home to the manufacturer, and a seeming majority of people voluntarily upload significant portions of their geotagged lives to various service providers.

I'm about as privacy conscious as you'll find these days, but my only concerns regarding the contract tracing API relate to battery life and the security implications of leaving Bluetooth on all the time (it seems like there's always another zero day being announced).

Reply on news.ycombinator.com