Live data from Hacker News

First look at Apple/Google contact tracing framework

twitter.com

1–10 of 113 posts

Re: First look at Apple/Google contact tracing framework

#4
No clue who/what a moxie is (presumably some guy) and it makes this threads title seem even more absurd.

OP feeling like we all need to know what moxie thinks about this reminds me of this [Chappelle Show skit](https://www.youtube.com/watch?v=Mo-ddYhXAZc) about getting Ja Rule's hot take on current events.

Re: First look at Apple/Google contact tracing framework

#5

No clue who/what a moxie is (presumably some guy) and it makes this threads title seem even more absurd. OP feeling like we all need to know what moxie thinks about this reminds me of this [Chappelle Show skit]( https://www.youtube.com/watch?v=Mo-ddYhXAZc ) about getting Ja Rule's hot take on current events.

the person behind the double-ratchet algorithm used in WhatsApp and the inventor of Signal

Re: First look at Apple/Google contact tracing framework

#6

No clue who/what a moxie is (presumably some guy) and it makes this threads title seem even more absurd. OP feeling like we all need to know what moxie thinks about this reminds me of this [Chappelle Show skit]( https://www.youtube.com/watch?v=Mo-ddYhXAZc ) about getting Ja Rule's hot take on current events.

the person behind the double-ratchet algorithm used in WhatsApp and the inventor of Signal

Ah, that makes sense then. Though I do think "Founder of Signal comments on new Google/Apple contact tracing proposal" would be a far less absurd title than "Moxies take on...", further adding "private" in quotes is a bit cheeky and definitely imparts bias into the discussion.

None of us developers here are dumb enough to think an api whose goal is to literally track and trace human beings is 100% private. The question is really, is it private _enough_.

Re: First look at Apple/Google contact tracing framework

#7

Earlier quoted context omitted.

the person behind the double-ratchet algorithm used in WhatsApp and the inventor of Signal

Ah, that makes sense then. Though I do think "Founder of Signal comments on new Google/Apple contact tracing proposal" would be a far less absurd title than "Moxies take on...", further adding "private" in quotes is a bit cheeky and definitely imparts bias into the discussion. None of us developers here are dumb enough to think an api whose goal is to literally track and trace human beings is 100% private. The questi…

We've changed the title now. (Submitted title was "Moxie's take on Apple/Google's “private” contact tracing framework")

Re: First look at Apple/Google contact tracing framework

#8
Of course Google promises [1]:

“ adhering to our stringent privacy protocols and protecting people's privacy. No personally identifiable information, such as an individual's location, contacts or movement, will be made available at any point."

[1] https://turnto10.com/news/local/privacy-advocates-raise-conc...

Re: First look at Apple/Google contact tracing framework

#9
Note that years ago, Moxie has studied a similar problem of how to let users know if their contacts use Signal or not without uploading the whole address books like e.g. WhatsApp does [0]. It's similar because in both instances you want to "match" users in some fashion using a centralized service while keeping their privacy.

He ruled out downloads of megabytes of data (something that the Google/Apple proposal would imply) and couldn't find a good solution beyond trusting Intel's SGX technology, arguably not really a good solution but better than not adopting it at all [1].

You have kind of a computation/download/privacy tradeoff here. You can increase the time interval of the daily keys to weeks. Gives you less stuff to download but the devices have to do more hashes to verify whether they have been in contact with other devices. You can increase the 10 minutes to an hour. That means less privacy and more trackability, but also less computation needed.

My guess to why Google/Apple didn't introduce rough location (like US state or county) into the system was to prevent journalists from jumping onto that detail and sensationalizing it into something it isn't (Google/Apple grabbing your data). Both companies operate the most popular maps apps on the planet as well as OS level location services that phone home constantly so they are already in possession of that data.

[0]: https://signal.org/blog/contact-discovery/

[1]: https://signal.org/blog/private-contact-discovery/

Post reply on HN