[tastroder]

To ease on the fear mongering front here: This proposal relies on an app implementing these protocols, you're free to uninstall the app after the pandemic - or not install it in the first place. It is furthermore trivial to check if your device sends out these BTLE packets.

It's not a "can we put the genie back in the bottle" scenario if the genie is wearing a bright warning vest announcing its presence everywhere. You can directly measure if it's still there. All other concerns are not technical ones. If you acknowledge digital contact tracing to be a thing, this is better for privacy than any other proposal so far. The framework is designed to prevent abuse even in case it would not go away.

[IanCal]

I'm not sure I'd count this as fearmongering. I think I know which way the tradeoffs work in my mind but there's not an unreasonable set of paths that lead to this being more permanent.

Given the broad powers passed recently in the UK they could make having this app a legal requirement to go in any shop if they wanted, and whether apps can be uninstalled reasonably is down to whoever controls the OS.

Would it not make sense to require everyone who is able to to install and use this? Or require Google and apple to force install it?

[tcd]

> they could make having this app a legal requirement to go in any shop if they wanted

If they can legally mandate an "app" they can mandate me having a device to run said "app".

It'd be absolutely absurd to mandate you having a spy with you at all times to exist in society.

"Sorry, don't have a phone, kthx", "Sorry, my phone doesn't use gapps, it's using a custom ROM", and what about these Linux phones?

Yeah, that's not going to work.

[IanCal]

The idea that the vast majority of people would not be running a stock OS seems less likely to me than measures like that being introduced.

[tastroder]

It's not like that scenario does not worry me either, sure. From a purely "fight the disease, nothing else matters" standpoint, yes, more installs mean better coverage and would make digital contact tracing work more efficiently. I haven't heard of any western government considering such a reductionist approach though, that would not be a proportional response and honestly a bit bizarre. Even in such a case the proposal by Google/Apple would be beneficial since it limits the usefulness of this data for other purposes, being designed with privacy in mind and far less intrusive than other tracking methods we could draw up.

I would still maintain that this nightmare scenario is a problem with any particular government that would implement and misuse such measures, not with an anonymization effort for the BTLE stack. We absolutely should push back against the former and insist on what's missing for a full system to be implemented in a sensible manner without infringing on basic human rights, that's a worthy hill to die on, this particular aspect is not.