News for hackers. Stuff that matters.

A comment on NHS rejects Apple-Google coronavirus app plan. Parent comment

Re:NHS rejects Apple-Google coronavirus app plan by 0xBeefFed on Monday April 27, 2020 @03:42PM (#22999207)
The difference is that the old system relied on human memory which is fallible, not to mention you can omit details which would lead to further trouble (infidelities for one). In this system the only control a user has is to turn off bluetooth, or leave their phone at home if Apple/Google override the users ability to turn this off.
[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by skybrian on Monday April 27, 2020 @04:01PM (#22999384)
I think it's up to you to upload the data? It seems like it depends how the app is designed. The protocol doesn't specify it.
[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by 0xBeefFed on Monday April 27, 2020 @04:08PM (#22999460)
The protocol states that it will upload the Diagnosis Keys, a set of Daily Tracing Keys relevant to your exposure. So in short, if this is the case it forces the user to either upload all their keys or none.

I would like to note that a v1.1 has recently been released, my information is about v1.0.

[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by Reelin on Monday April 27, 2020 @07:36PM (#23001509)
The specification (at least v1.1) contains nothing about uploading keys. The API appears to provide only the minimum required for protocol implementation.

The ENSelfExposureInfoRequest class can be used by an app to obtain diagnosis keys for the previous 14 days. What an app does with those keys is up to whoever implements it.

https://covid19-static.cdn-apple.com/applications/covid19/cu...

[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by 0xBeefFed on Monday April 27, 2020 @08:27PM (#23001940)
That does not seem to line up with their cryptography specification, which is where I am getting my information from. Thank you for mentioning this
[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by gruez on Monday April 27, 2020 @10:03PM (#23002567)
I thought only the DTKs are uploaded? That is, you can censor your activity on a day-to-day basis but not on an hourly basis.
[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by closeparen on Monday April 27, 2020 @04:27PM (#22999655)
Under what circumstances do you think it would be okay for an infected person to hide their contacts? Surely you’re not valuing your marriage over the lives that will be lost in the resulting spread?
[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by 0xBeefFed on Monday April 27, 2020 @04:31PM (#22999716)
If a user is in close confinement with someone they fear will lash out at them if they test positive, for one. Off the top of my head, lets say you take an Uber home and the driver now has your home address, you don't know if they will try and attack you.

This is an example off the top of my head, as other comments in this thread have explained, violence against people who have the virus is happening around the world and is something that must be accounted for in these protocols.

Edit: a link to a story from another comment (https://www.washingtonpost.com/world/the_americas/coronaviru...). I hope you can see that this technology can worsen this.

[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by closeparen on Monday April 27, 2020 @05:21PM (#23000190)
The system doesn’t say who your affected contact is, only that you have one. The driver has no way of knowing it was you.
[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by 0xBeefFed on Monday April 27, 2020 @06:18PM (#23000779)
If you have a Bluetooth receiver logging the different IDs you've come in proximity with and when, its easy to deduce who the positive user is by who you were in proximity of at that time.
[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by burke on Tuesday April 28, 2020 @01:36AM (#23003766)
This is why the Framework only reports matches with a very coarse granularity.
[ Parent | on HN ]
Re:NHS rejects Apple-Google coronavirus app plan by closeparen on Tuesday April 28, 2020 @12:15AM (#23003302)
At what time? It could be any user you’ve been in contact with for two weeks.
[ Parent | on HN ]