It's kind of far down in the page so I missed it the first time I scanned it.
"We are working around the clock to finalise our protocol reference documents and reference implementation, to open source what we have built, so that others may deploy their own flavours of TraceTogether - each implementing the BlueTrace protocol. We appreciate your patience in the meantime."
I feel like this would be a lot easier and have a higher rate of usage/compliance if our tech companies actually worked with people to release or opt-into sharing this information for when it's necessary (information which is already secretly shared with governments for security).
For the majority of people if they go to https://www.google.com/maps/timeline they'll have a tracker of everywhere they've visited and the time they were in each location.
If you could take people's accounts who've been infected and give them the ability to opt-into sharing this information you could have a pretty good source of information about the locations where they dwelled for long periods of time and who should go into self-isolation.
I don't think anyone trusts Google enough. They can help by providing governments with anonymized data they already have. Immediately what comes to mind is identifying to governments public hot spots while lockdowns are supposed to be going on so that they can send people to disperse the gatherings. I'm sure people can come up with better ideas
I don’t in my case because I’m not comfortable with the commercial information that gives Google.
One of the gestures I think Google could make in this fight is to allow people to opt into that data sharing on a strictly limited basis. I’d opt in if it was only going to be provided for the purposes of medical infection contact tracing while this pandemic is rife.
If this gets any sort of public traction it'll be built in to shop doorways, public transport, police cars, and street lights within a couple of months.
Yeah, in a new york minute. This is already built into iOS in their newer Find My Phone. The carriers also know who and where we are just need to add in covid testing data. The problem is that even if it is decentralized and OSS, then the average user can't/won't install it. If it is simple and easy (centralized), then it becomes a honey pot for the government.
You can't, but apparently Find My Phone uses Bluetooth to find nearby phones and thats the same technology that Bluetooth contact tracing for coronavirus would use.
This is needlessly cynical. TraceTogether uses client-side logging so as to leave data in the hands of the users up until it's actually needed for contact tracing.
Would you suggest that we not have public health departments engage in contact tracing at all to combat the pandemic? If so, I'm not sure what to tell you.
Otherwise, apps may go a long way to improve the speed and accuracy of contact tracing. Here in the US, I'd much rather use a protocol like TraceTogether's Bluetrace that goes out of its way to preserve privacy, than adopt an actually-privacy-violating centralized approach where the government simply gathers everyone's location data and processes it centrally (Israel's approach, for example).
Cynical for sure, don't know about that "needlessly" given it's an endless fight where everytime you give up a right it's taken away forever. This time they give you the opensource bit, next time it's "a matter of emergency", then they stop asking and just punish you if you don't comply.
>Would you suggest that we not have public health departments engage in contact tracing at all to combat the pandemic? If so, I'm not sure what to tell you.
I have never said that so I am not sure what to tell you. The only method that works is quarantine, remote control is a copout to address the lack of contact with the population. Moreover, what I am addressing is how the tracking is NEVER going to go away even after the emergency is gone.
> Israel's approach for example
On this topic, Israel tech companies are right now sending out business proposals to the Italian government to try and implement their methods (viz. https://www.ilgazzettino.it/nordest/primopiano/coronavirus_z... last thing Europe needs during this crysis is ANOTHER political mindset shift towards walls and a iron boot.
Literally nobody in the epi community believes that. Would you please state your credentials, or cite a credible source for that statement? (For the opposite, please do read takes from Trevor Bedford, Mark Lipsitch, Carl Bergstrom, Andy Slavitt or really pretty much anybody in the field)
We (the US) are currently in a state were suppression is the only prudent tool. As SK has shown, contact tracing & testing help a lot once you're not completely inundated by cases (and actually have a meaningful supply of equipment)
Yes, there are privacy concerns. Work on them. Address them. But blanket statements like "only quarantine works" are extremely detrimental to public health efforts - the last thing you want is an "all or nothing" mindset
> We (the US) are currently in a state were suppression is the only prudent tool
How do you know that this is the current state?
> As SK has shown, contact tracing & testing help a lot once you're not completely inundated by cases (and actually have a meaningful supply of equipment)
"meaningful supply of equipment" means this option is not possible in the US?
Look at the number of cases and their regional distribution, realize that those are tested cases and thus, with a) asymptomatic carriers and b) really bad testing in the US, the number of active cases is at least 10x that. Then realize you're dealing with an exponential process. United States are thoroughly infected already.
> "meaningful supply of equipment" means this option is not possible in the US?
Not now, but if and when the US implements proper suppression measures, and the number of cases goes down to manageable levels (while at the same time the supply chain of PPE catches up to demand), then the supply of equipment will be meaningful.
The point of contact tracing is to find out who to quarantine, so you don’t have to lock down the entire population. It’s not a “copout,” it’s the bread and butter of epidemic mitigation. It’s why most of them don’t get to this point.
>But "stay at home" has been a mantra for weeks anyway, with everybody acting as if they and everyone else is infected.[..] But we are at this point already.
Singapore isn't. (the government that is building this app). Neither is Taiwan. Through a combination of contact tracing, surveillance, national health databases and enforcing compliance of quarantined individuals by for example regularly checking in on them they have been able to both contain the spread of the disease and keep a reasonable amount of economic and social life intact.
I will continue to be mystified by this weird and abstract notion of privacy that keeps others away from my data but results in mass lockdown, quarantines, shutdowns and curfews, while people in Singapore give some data to authorities and they can still go out and live their lives. I want material freedom to buy groceries and go to work, not some sort of religious dogmatic privacy while some plague wreaks havoc and I need to haul up in my apartment for months.
Stay at home is the mantra, but because there is zero enforcement of it, there's no shortage of stupid people coughing in grocery stores, or visiting out-of-state relatives, or fleeing the epidemic centers, bringing the virus into rural communities.
Lockdown buys time to introduce new measures. Those measures are:
1. Quarantining positive individuals.
2. Physically enforcing that quarantine. The honor system doesn't work. People are very clearly not obeying voluntary quarantine.
3. Contact tracing, and testing of everyone that positive individuals have interacted with.
Once we get a system that can handle 1, 2, and 3 in place, we can lift the lockdown. This is how Korea and Singapore are beating the virus. This is how China's going to be lifting their lockdown.
That doesn't mean we have to be forever. Extreme distancing / lockdown will be needed to get the outbreaks under control, but once that point is reached, extensive testing and contact tracing will be needed to relax those measures without triggering a massive resurgence, unless we want to wait a year or more for a vaccine.
> But "stay at home" has been a mantra for weeks anyway, with everybody acting as if they and everyone else is infected.
That's because every single Western country has fucked up the handling of initial stages of the pandemic. Everyone has seen what's going on in China and then Italy, and we all ended up on the spectrum of doing too little, too late (US in particular is leading here).
"Stay at home", social distancing, closing up businesses - those are suppression strategies. They're meant to shut the virus spread down. But they don't have to last all the way until the vaccine - if the number of cases and infection rate go down enough, these measures can be lifted - and then contact tracing can be used to do local quarantines and shutdowns with surgical precision, ensuring most people can live their daily lives as if no pandemic was happening.
> Moreover, what I am addressing is how the tracking is NEVER going to go away even after the emergency is gone.
Wouldn’t people just stop using any tracking applications once there is no tracking needed?
The way I see it is so long as there is a pandemic we have no freedom anyway. It might seem like tracking your citizens is infringing a freedom, but if the option is house arrest I don’t mind.
Any government that would be ready to monitor everyone all the time for no obvious reason isn’t democratic. I trust my government because I live in a functioning democracy. I wouldn’t trust the Chinese government, or even the Hungarian one, and I‘d have second thoughts about trusting the US govt to do the right thing. But most democracies should be able to use technology to provide more freedom in this situation, not less.
It’s a true test of a democracy to do this right. But not trying of fear of a perpetual big brother society I think is the wrong choice.
> Wouldn’t people just stop using any tracking applications once there is no tracking needed?
There's a risk that once the capacity is tried and tested, governments and private companies alike will try to make it enticing and useful for different means. The role of privacy activists should be nipping all these follow-up ideas in the bud. Ensuring that emergency measures are used only during actual emergencies. But not fighting them in situations like this.
I completely agree. To that end, it actually seems like fully decentralized client side contract tracking would be a useful technology to have a set of government supported open specifications for. Building the functionality into the OS, securely encrypting (no key escrow!) with a user supplied password, and requiring a warrant to seize (but good luck without the password) would proactively enable a robust response to future pandemics.
Actually I suppose this matches my view on location histories. I like them as an idea, but current implementations exfiltrate all the data off of my device which bothers me to no end.
Israel already moved from a central system to a different one called Hamagen which is not centralised and keeps the privacy of the people. This is the one they recommend for Italy. It is open source so you can verify it yourself.
https://github.com/MohGovIL/hamagen-react-native
Wasn't the same said after 9/11 and the patriot act? I'd guess it was just a tin foil hat conspiracy to think several three letter agencies would use the provisions from the patriot act to track pretty much all communications? You can't just accuse people of being conspiracy theorists over and over again and tell them that this time would be different because... Reasons? Also, who needs martial law when you can just do the same with duly passed laws?
> I'd guess it was just a tin foil hat conspiracy to think several three letter agencies would use the provisions from the patriot act to track pretty much all communications?
It was and still is. How do you believe this nonsense?
Also, several provisions from the Patriot Act haven't been renewed, so your example proves my point.
Sorry, but we are long past the point of calling out privacy advocates as "tinfoil hat wearers" - just look at everything that came out after Snowden. Beforehand, most people would have derided others for mentioning "such conspiracy nonsense" (I likely would have myself), and yet the truth was wilder than even hard-core, paranoid conspiracy theorists could have dreamt up.
Since 9/11 in particular, the Western world has seen constant attempts to increase mass surveillance, lower the burden of proof, and dampen human rights, always in the name of whatever they have the public most fearful of at the time - drugs, terrorists, paedos, criminals, the Russians, the Chinese, the Mexicans, communists, Islam, foreigners taking our jobs, the boogey man de jour.
I'm absolutely certain that we'll see politicians try to use coronavirus as an excuse for their Orwellian schemes.
Business as usual has come after Snowden; that's the reason people who have a default-antagonistic reaction to any new technology that could be employed by a government for tracking get labeled "tinfoil-hat wearers."
The future of society isn't no surveillance. That's not tractable. Genie's out of the bottle (as this release of a population tracking tool as open source demonstrates). The question isn't how to stop it; it's how to live with it.
> Would you suggest that we not have public health departments engage in contact tracing at all to combat the pandemic? If so, I'm not sure what to tell you.
If the result is (another) permanent loss of privacy and freedom akin to the PATRIOT act, then yes.
Technology has immense power to do good for people, but only if those who deploy it do so ethically. How many governments around the world can we honestly predict to do so?
Agree to disagree, because my liberty is useless without my life.
Balance can be found. And increasingly, it looks like in the modern era, the balance is found in a situation where the PATRIOT act exists and we find a new normal around its existence.
Which government of more than a few million people do you assume doesn't have a line into monitoring intra- and interstate digital communications in this era?
I'm curious how many people who now say "give me privacy or give me death!" will change their tune in a hurry once they are themselves, perhaps for the first time in their lives, in real danger of dying.
I regret that - assuming my own ongoing case of COVID-19 resolves without fatal complication - I'm quite likely, I think, to have that curiosity satisfied. I regret it because this isn't a cause for change of perspective which I would wish on anyone. But everything I'm seeing suggests it's a cause for change of perspective that many millions of people are going to have.
My hope is that people don't lose sight of the long term in spite of the short term suffering we may experience. You can only surrender your rights once, the effects of losing those rights will last forever. How many movements would have been impossible if a local government could spy on everyone to break it up before it even begins? I'm thankful we didn't have the same technology we have now during the civil rights movement, for example.
>I'm curious how many people who now say "give me privacy or give me death!" will change their tune in a hurry once they are themselves, perhaps for the first time in their lives, in real danger of dying.
> I'm curious how many people who now say "give me privacy or give me death!" will change their tune in a hurry once they are themselves, perhaps for the first time in their lives, in real danger of dying.
The weak ones we shouldn't be prioritizing over the strong. Harboring weakness is just asking to be taken advantage of. It may seem empathetic at first, but all you end up doing is undermining the individuals growth and selling out the security of future generations. If you're an adult, you need to come to terms with death, and recognize that extending your life isn't worth stealing from future generations. They deserve more freedom than we've had. Not less.
It's a mercy you won't be held to this when you get sick, and find it's somewhat easier to talk in the abstract about coming to terms with death than to face the imminent possibility.
edit: Well, you won't be held to it assuming we haven't reached a need for sufficiently severe triage, I suppose. Otherwise, you might get a chance to quite literally put your life on the line for the principle you've just espoused! I wish you joy of it.
> Would you suggest that we not have public health departments engage in contact tracing at all to combat the pandemic? If so, I'm not sure what to tell you.
It's fine, but as Jean Yang pointed out on Twitter, no-one would ordinarily call disclosing everyone you'd shared a location with over weeks "privacy-preserving". And once you've done it for some large fraction of infected people, you end up with a country-wide social graph built up, even though you weren't conducting mass surveillance in the usual meaning.
It's a loss of privacy either way (whether done via location or Bluetooth contact). I'd rather just have the conversation about how we've decided to suspend physical metadata privacy to combat the pandemic, than act like the Singapore model is going to preserve it.
What data is collected? Are you able to see my personal data?
The only data that we collect is your mobile number, so that MOH can contact you more quickly if you were in close proximity to a COVID-19 case.
With your consent, TraceTogether exchanges Bluetooth proximity data with nearby phones running the same app. However, this data is anonymised and encrypted, and does not reveal your identity or the other person's identity. Also, this data is stored only on the user’s phone. Should MOH need the data for contact tracing, they will seek your consent to share it with them.
"Never let a serious crisis go to waste" - Rahm Emanuel.
I agree with this and your sentiment, but I think it is misplaced in this instance.
As I understand it, the TraceTogether app collects (and stores locally), information on other users running the TraceTogether app nearby. If our government's contact tracers contact us, we can provide the information, and it can help in contact tracing. This seems to me to be at or near the minimum amount of information collection necessary to fulfil the function. Assuming voluntary widespread adoption, it is useful, and can be uninstalled at any time once the crisis blows over.
Honestly, as both a free software and privacy advocate... yeah. If contact tracing significantly improves our ability to eliminate the epidemic, and my current understanding is that it does, this seems like a pretty good implementation. So long as the data collection is explicitly voluntary, I'm asked for my permission first, and it's for an important cause like this one... I really don't mind!
I would much rather have a system like this than to be indiscriminately tracked and lose more privacy potentially indefinitely. The tracking can't be indefinite if I'm asked for permission, because if I don't think there's good reason for it I'll just say no. And if I'm worried the app's privacy measures aren't good enough and it'll be abused, I'll just uninstall it.
You can still turn it off by heading to settings and turning it off there (both WiFi and Bluetooth).
It turns the functionality off completely, and stays off until you manually turn it back on.
In control centre it only partially turns off. But that’s not unreasonable as many people don’t understand how many feature rely on Bluetooth. They would probably get annoyed when the stop working, just because they wanted to quickly disconnect some headphones.
That’s tricky without building a phone yourself from opensource hardware and software.
At least with Apple, they’re under so much scrutiny you can be fairly confident that if their software was lying it would quickly appear in the news.
Finally the above clearly shows that your assertion you can’t turn off the WiFi or Bluetooth radios is false (assuming the software isn’t outright lying, if think that then you should have said so in your first comment).
This is much better than tracking people via facial and video recognition captured with near-omnipresent camera feeds. This is tracking signals that an optional device optionally broadcasts (and has for years). You can easily avoid this tracking by not having your phone broadcast bluetooth or by not carrying a phone.
Not to mention any number of actors could have already been tracking this signal for years. It's the nature of how bluetooth devices broadcast their presence.
I'm curious as a non-expert what's specifically worrying about their privacy model?
My intuition is that rapid adoption of a relatively transparent privacy-preseving option could preempt more heavy-handed approaches to what could be a very valuable public health intervention.
I'd agree if remote tracking was the only option, and if there was a guaranteed policy against public backslash towards those that don't comply out of privacy reasons (which would skyrocket in a health hazard emergency).
These privacy exceptions all affected goverments are talking about (Italy being a great example, viz. Veneto region governor asking for a change in privacy laws the other day) are not going to magically disappear once the coast is clear, just like post 9/11 emergency laws still being used in the US.
I believe there are other ways to help people and that, if you are a government that claims having to resort to remote control its popoulation, maybe your power is either insufficient for your secret expansion goals or you're an inefficient populist.
Every (western) government publicly hates the Chinese government but they do seem to have wet dreams about the population control bit, especially when backed by corporations.
Exactly. People are decrying this because it gives governments capabilities, as if decrying its existence changes that capability model or implies that in the absence of this tool and in a state of emergency, governments wouldn't be stuck trying to accomplish the same goals this tool enables using cruder methods that would be more intrusive to people's lives.
It's like hating gunpowder exists because people can make bullets and fight wars with it.
We all carry around a radio that broadcasts our location. I guess we'll end up switching off Bluetooth except to known good devices, or when we intentionally want to discover what's around us.
I don't know, I'd probably turn mine on just so that I can get notified if I am within proximity of a high infection risk stranger. I would love to have that kind of notification.
I can imagine something like that could lead to people abusing, beating up or killing the infected. It might sound far-fetched, but this was happening in Kenya quite recently.
I think in these extraordinary times, it’s nice to see the government proactively trying to do more to counteract the worst pandemic the country has ever seen. As much as we might all cry foul over the curtailing of freedom, there is a lot to be said in this current environment about contact tracers immediately knowing who a known covid carrier has come in contact with, which in turn means a speedier response from the medical teams.
That being said though, the app is absolute garbage on iPhone. Obviously not really their fault, but needing to have the app actively on for it to work is absolutely going to lead to people not bothering to turning it on.
I agree this is bad, but I don't understand why it is. Not an iOS developer but I was under the impression apps can run in the background to maintain Bluetooth connections.
Assuming Apple's policies are in fact preventing them from running in the background, does Apple have a mechanism to grant them an exception for this use case? Does someone have a contact at Apple who could reach out to them?
It should be opt-in, if you don't opt-in,mandatory quara tine for you. And this should not be something they can renew after the crisis like the US Patriot act.
Sadly this won't happen in the US. Even if it's really private, people won't install it unless it's pushed down to them as an update from above, and no company will want to be the first to push it.
I suspect the bigger issue is people don't want to be told by an app that they need to go get tested.
Come to think of it, cities like New York could push it as part of a bigger, more comprehensive covid app...
It is not a mobile app. You export your data from Google (thanks GDPR!), and filter out personally identifiable data points before submitting. We also let you know exactly who is about to use your donated data (we only allow academic researchers to have access), and give you advance notice so you can delete it if you don’t want your data to be used in a particular project.
We are MIT licensed and are figuring out how to make data donation safe via UX and engineering. We need all the help we can get - even if it’s just feedback. Feel reach out! Nessup@gmail.com
Once you have an identified case, you trace who they have been in close contact with recently and start contacting/testing/isolating them and trace it further from there
E.g. In Switzerland this was done manually (by medical staff mostly i think) in the very beginning, but they gave up very quickly on it because of lack of resources.
For context, Singapore has a team of 20 that can call contacts of confirmed cases, they are able to make 4000 calls a day. Those in contact with confirmed cases are made to a mandatory home quarantine, i think something like 35k people in Singapore are currently serving home quarantines.
As I understand, contact tracking is recording which people come into proximity so that if one gets sick the task of contact tracing can be facilitated by the contract tracking data.
[1] https://www.wsj.com/articles/mit-researchers-launch-location...
[2] https://safepaths.mit.edu/