Re:‘Anonymous’ Chat App Hijacks Contact Data
by saurik on Thursday August 31, 2017 @10:48AM
(#15140667)
FWIW, it isn't just not meaningfully privacy-preserving: it offers essentially no privacy preservation at all. There are 10 billion possible US phone numbers, and we know from Bitcoin that you can search that space in something like ten seconds on a typical PC. You also only have to do this once to construct a lookup table that would only take a terabyte to store and index, and then you could offer anyone instantaneous reverse lookup from truncated hash to phone number. It is essentially meaningless "privacy theater".
[ Parent
| on HN ]
Re:‘Anonymous’ Chat App Hijacks Contact Data
by colejohnson66 on Thursday August 31, 2017 @11:19PM
(#15145861)
You wouldn’t even need a terabyte if you didn’t mind comparing against every hash to find the right one. 16 bytes/number at 10 billion numbers is only 160 billion bytes (160 GB). Store the hashes one after another in a flat binary file, then `i` in `file[16*i]` is your number.
If you included the 10 byte phone number, that only adds 100 GB. Then just store each entry as a 26 byte hash/number struct sorted by hash.