Live data from Hacker News

Massachusetts health notifications app installed without users’ knowledge

play.google.com

351–360 of 407 posts

Re: Massachusetts health notifications app installed without users’ knowledge

#351
post #326
post #261

I was reading about this yesterday and confirmed that I did not have gov.ma.covid19.exposurenotifications.v3 nor gov.ma.covid19.exposurenotifications installed. I turned off auto-updates in the Play store (Settings -> Network preferences -> Auto update apps -> Don't auto update apps) and went to sleep. This morning I woke up with a cheerful notification that Google can help with COVID notifications and gov.ma.covid19…

Remember when Tim Cook put Bono's album in the iTunes library of everybody? That's when it felt that the smartphones are not our devices. Someone you don't know can and U2 album to your library without you ask for it or being able to do anything about it. You can understand it with an OS update. It's the new shiny thing that comes with bunch of stuff and this new one has this new app. However, getting it without acti…

I quite like Bono’s U2 album. Also it doesn’t come with any downsides like the Massachusetts app does.

Re: Massachusetts health notifications app installed without users’ knowledge

#353
post #296

Most of the comments on that app as well as here are probably wrong. I'd suspect that everyone who had the app "installed without their permission" opted into the Android COVID-19 Exposure Notification program. This was deployed by Google as part of an update to Google Play Services. When you go to your phone's settings with this update, there's an option to enable COVID-19 Exposure Notifications. When you turn it on…

This speculation is 100% wrong. I checked for this app after seeing this and had it listed under updates available (it was installed already) So I decided to check if I was in fact opted in and I was not opted in. Everything was off and this app was still installed without my consent. I do have automatic UPDATES turned on, but that shouldn't tell Google to just push whatever they want to me. You should probably edit…

lol, just got installed on my tablet. Wasn't there earlier.

Re: Massachusetts health notifications app installed without users’ knowledge

#355
post #272

Earlier quoted context omitted.

Did you check your covid19 exposure opt-in settings? Of everything you mentioned you checked, I didn’t see you say you checked that setting. That setting could be what caused the install

Yes, I confirmed last night that Settings -> Google -> COVID-19 Exposure Notifications was off. (Aside, I read somewhere but have not confirmed this myself that manually enabling that setting leads to a flow for installing the gov.ma.covid19.exposurenotifications app, whereas the forced update is gov.ma.covid19.exposurenotifications.v3 -- note the extra v3). By the way, MassNotify app is not visible from Play Store s…

This is scary.

How could the publisher MA Department of Public Health do this themselves, or why would Google allow this?

If Google is pushing it themselves, why the Massachusetts one?!

Re: Massachusetts health notifications app installed without users’ knowledge

#356
post #343
post #341

Earlier quoted context omitted.

> From a technical standpoint, it is the same. Yes, of course, but this isn't a technical issue. Look at the webpage that this hn page references. When people say, "an app was installed on my device without my consent or knowledge," the exact method the device used to listen isn't important. The first issue is that Google software allows non-authorized software installations. The second issue is that a government for…

This subthread is about the technical issue. The root comment asks "the real question is what mechanism allows them to push a random app to some phones?".

From what you've written, it appears that you are guessing as to the implementation details that correspond to the mechanism for pushing random apps to phone, which is in this case means un-authenticated apps. There may be an entirely different method used than the standard push method from selecting an app on the website.

Re: Massachusetts health notifications app installed without users’ knowledge

#357

Earlier quoted context omitted.

Read up on how the contact tracing apps work. They do not upload your data to the cloud. Phones broadcast a rolling random identifier, other phones collect received identifiers, and only on confirmed infection does the person's phone upload its last two weeks of broadcast IDs to the cloud, where other phones can grab them and cross-check. Having someone's phone number allows you (via the phone company) to trace their…

I think the low adoption is because it's hard to explain. No one on my street, none of the most vulnerable people would understand your paragraph. No wonder it's not being adopted by those who should be adopting it, but just being used by vigilant young tech savvy and already covid safe people. So not only are only a small number of people using it, these people are least likely to make a difference using it.

Well what do we expect? We've been shoving privacy down peoples throats for years.

You can't now expect them to be rational and trust us with: "don't worry we know privacy is bad, but THIS privacy breach is okay. Again trust us this is because of covid, we're the good guys."

Re: Massachusetts health notifications app installed without users’ knowledge

#358

Earlier quoted context omitted.

Isn't contact tracing actually more useful when the number of cases are reasonably low?

Only if coupled with a public health program that does something. We might reach the ring vaccination stage, where each case triggers contact tracing and testing and vaccination of all contacts and the people around them. That's how smallpox was wiped out.

As far as I can tell, you can't ring vaccinate for this. 1) SARS-CoV-2 vaccines don't work after exposure. 2) You don't have exceedingly obvious symptoms when you become infectious. 3) IFR is not that high for most people, and if they care about that they are already vaccinated. Smallpox is very different in all of those metrics, making ring vaccination possible. Pulse vaccination might work better, but only with vaccines that majorly reduce transmission for quite a long time (BioNTech-Pfizer, Moderna, probably NovaVax), it's possible you would have to pulse J&J too often to be practical. Hopefully the original antigenic sin issue won't be so bad that re-targeting antibodies is not effective in most people, otherwise giving up on transmission control and trying to reduce deaths might be the only option, if new strains arise.

Re: Massachusetts health notifications app installed without users’ knowledge

#359

Earlier quoted context omitted.

Isn't contact tracing actually more useful when the number of cases are reasonably low?

Only if coupled with a public health program that does something. We might reach the ring vaccination stage, where each case triggers contact tracing and testing and vaccination of all contacts and the people around them. That's how smallpox was wiped out.

> Only if coupled with a public health program that does something

Isn't that what this whole Massachusetts thing a step towards? But my point is that the public health program can't really do something when there's thousands of cases, but the lower case count means this can be effective once more.

Re: Massachusetts health notifications app installed without users’ knowledge

#360

Earlier quoted context omitted.

I don't think it will happen or that we particularly need to do it, but at this point, contact tracing (I'm talking about in the US) would be cheap and effective. Especially if it traced back to likely exposure events.

I'm already vaccinated and so is everyone I'm around. It's something I would have enabled maybe 10 months ago but not even worth it at this point

Yeah, vaccinated people wouldn't benefit much. Other people would though.
Post reply on HN