Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Your own carrier knows where you are and where you've been. Unless your a person of very high interest I doubt that the NSA is even concerned of your activities.
This gets thrown around a lot, but actually carriers have only a rough idea of your location. Their network-side location information is not accurate enough to determine who you have been in close contact with (otherwise we wouldn't need BT based solutions for contact tracing). Depending on the cell size, it can be off by miles.
 


Using this method, they can only track an ID for 15 minutes, and it's impossible to know which ID belongs to which person. That information never leaves the phone, so without physical access and a forced unlock, no one can directly bind the random IDs to a particular person.

In a big city, it's unlikely that they can bind a random ID to an actual person based on a 15-minute chunk that could be anyone in the crowd. However, in extreme rural areas, such as the Sierra Nevada, the Australian Outback, Siberia, with very low traffic, it may be a different story. If they have your license plate on a traffic camera, and only 2 other cars on the same camera, they can trace you, or at least put your journey together based on time stamps.

Or consider a small sleepy village with mostly old people, and one person moving in the middle of the night. There may be 1 or 2 other IDs moving along the same path. If anyone saw someone who looks like you, at least in theory you could be implicated while being innocent.



Also when you flag yourself positive, you are flagging all your random IDs together. If this happens exactly at the same time, someone could use time stamps to potentially bind all IDs to the same person. To implement this correctly, flagging someone positive should introduce a random delay to the IDs, so they are not all flagged together exactly at the same time.

You misunderstand. All that's being transmitted to the servers is a list of IDs. Not their timestamps or locations.

So once you learn you're infected, you use the app to submit the IDs your phone broadcast over the last, say, five days, rotating every 15 minutes. That's 480 IDs with nothing else attached to them.

All the server can infer is that those are the IDs you've broadcast. If you put them in random order (which makes no difference to the functionality of the service), you can't even tell which ID was broadcast when (assuming phones don't also just swap IDs at random times close to 15 minutes, rather than exactly 15).

That can't be used to create a movement profile of you, unless you believe some super powerful secret government agency has antennas that defy basic laws of physics and thus can track every bluetooth device in the country, but somehow not already track every cell phone ;)
 
  • Like
Reactions: iGeneo and Andy-V
This gets thrown around a lot, but actually carriers have only a rough idea of your location. Their network-side location information is not accurate enough to determine who you have been in close contact with (otherwise we wouldn't need BT based solutions for contact tracing). Depending on the cell size, it can be off by miles.
Passively, yes because what you’re describing is cell tower triangulation. But if they want to, they can ping your phone to find a precise location with its GPS.
 
  • Like
Reactions: Dwalls90
I would like the ability to see where I've been; see it in iOS Maps. Something I can view in Maps whenever I want to see it. This info could be on a layer I can export. Perhaps overlay exported paths to see where and when they overlap.

Our smartphones should be used to track and contain a virus.
 
Last edited:
"They", as in the CDC or whoever, are not getting a list of people you have been in contact with. They are just getting the IDs that your phone transmitted during the last few days. Other phones download these IDs (and all others that reported as positive) and compare it to the local list of IDs their phone has seen over the last 14 days.
They are getting the IDs of all people who upload theirs. Then they can easily correlate them. Then de-anonymize the indivduals using the IP address. And voila, they have a complete contact graph.
You mean by a code modification that Apple and Google perform to always send your IDs and location to, say, the government?
No, I mean a simple flag that would skip the "Do you really want to upload your keys" question. And BTW, the government could also seize your phone, extract the keys (both your own and the ones the phone has detected), and effectively get a complete list of people you have recently been in contact with.
[automerge]1586548235[/automerge]
Passively, yes because what you’re describing is cell tower triangulation. But if they want to, they can ping your phone to find a precise location with its GPS.
No they can't. The carriers have no access to the device's GPS hardware or location APIs. The only situation where they may get GPS-based location data is if you make an emergency call (since modern phones are programmed to provide the information in this case).
 
Contact Tracing on one hand is innocent; you ask who someone's been in touch with and them them who they've been in touch with...

Enabling this on an API and Bluetooth level is straight up Dark Knight Rises, and we don't have Batman looking out for us.

High-Frequency_Generator.jpg
 
The virus is a death sentence for a small percentage of those infected, yes. Or at least they live with permanent damage to their lungs and must carry an oxygen bottle around for the rest of their lives. Because they have pre-existing conditions, because they're old, because their immune system is compromised, because they're smokers (!), because they're getting a cancer treatment, because they have diabetes (!), whatever.

Let's say, for simplicity's sake, that one percent of all people die. It's really irrelevant for the purpose of the discussion if we're using one percent, five percent, or 0.1%.

The R0 of this virus is somewhere close to 3, meaning while you have the disease, you on average infect three other people.

You infect three, first step of the spread. Each of these three infect another three. That's nine new infections in the second step. Nine people now infect 27 people in the third step. Those 27 infect 81. And so forth.

By the tenth step, you have ~60,000 new infections. By the 12th, ~530,000. By the 17th, ~129 Million.

It happens slowly at first, then suddenly all at once.

And now a percentage of these people dies.

If you have millions of people who are infected over a short period of time, then your mortality rate goes way up, because you don't have enough hospital beds, respirators (which often cause severe and permanent lung damage in COVID-19 patients!), ambulances, doctors, nurses, etc. Now you're getting a mortality rate of, say, 2%, or 4%, or 10%. That's what happened in Italy, and other places where the disease spread quickly without initial containment.

If you only have hundreds of thousands of people who are infected over the same period of time (because the disease is spreading more slowly), then the health care system doesn't get overwhelmed. It can treat all severe cases, save most of them, and you have a mortality rate of, say 0.1%.

I really don't understand why people are even debating this. There are enough examples, current and past, where exactly this happened. Be it the Spanish Flu, or the initial weeks of the outbreak in Wuhan, or the now slowly improving situation in Italy/Spain/France, or the current situation in New York City.

The medical community have estimated the R0 to be at 2.2, again there is no definitive number yet, so I am not sure where you are getting your R0 of 3, please explain?

I understand how exponential number work, no requirement to explain. But you have over simplified it with making wide assumptions that the death rate is 100% once infected. There are people who get infected and are asymptomatic that means even in your scenario three people get infected that does not mean they are doomed, it just means these asymptomatic people go on they merry life infecting others who may also be asymptomatic while some may get ill and recover without hospitalization and others may get severe and some may be out on ventilators and some on them may still die, there is no definitive. What transpired in Wuhan, Italy, Spain, New York, etc still require investigation you are making claims that you know for certain what occurred there.

FYI did you know that ventilators can also kill COVID-19 patients as it goes counter to a cytokines storm and makes things worse. There have also been reports that some recovered patients have been reinfected, are you able to explain that if these individuals have antibodies. If I am a user of substance abuse and get a cold/flu and go to the hospital where they incorrectly label it as COVID-19 to boost numbers and predictions, I have willfully placed my immune system in a determent position. That is to say that I could have easily landed in the emergency room for overdosing, once again these are examples as to we have no definitive yet what most people lack is nutrition that would aid their immune system to do what nature intended, yes you can be over the age of 70 and survive COVID-19 if you feed your body with the right nutrients. Stop spreading FUD.
 
My issue with this whole thing, assuming I’ve understood the implementation correctly, is that anonymity depends on the assumption that all of us come into contact with more people than we can keep track of.

But for some of us, that’s not true at all.

In the past month, the only person I talked to face to face, albeit over twenty feet away, was my neighbor. If this app lets me know I came into contact with someone with Covid, I would reasonably count on her because there’s been nobody else in my vicinity, assuming all in my family were to test negative. Even when things were normal, I spent most weeks just making the school run and coming into contact with a very limited number of people, most of whom I know in my relatively small community.

Getting back to my neighbor and her hypothetical Covid positive status pinging me “anonymously” via the app, if I were like some of the neighbors I’ve lived among previously, I’d go banging on her door and cuss her out. I have known and unfortunately lived among people who are that primitive and aggressive. They don’t think deeply at all. About anything. Ever. They just react. Their lives are a series of reactions and over-reactions to slights real and perceived.

Forget law enforcement or the government, vigilante behavior is going to be pretty rough. Even if really, people still can’t reasonably pinpoint who the person is, they are going to assume or think they can. Some people are bullheaded like that. They’re going to get a notification from the app, think back on the people they talked to and go off half cocked and make trouble over it.

We already got people using social media to “name and shame” people over gross assumptions about all sorts of things, like people with hidden disabilities who rightfully use handicapped parking spaces. Really just a moment’s thought and some courtesy could avoid trouble but some people are incapable of implementing those things.

The great wide world does not consist of wise and educated calm reasonable people. If we struggle with reading comprehension here on a tech forum, can you imagine what the reaction of the greater populations of “Karens” and their male counterparts is going to be?

That is one potential drawback I see to all of this. But even my reading comprehension is not all I could wish it to be. I am certainly open to correction.
 
It's not going to be anonymous the moment anyone using this tests positive for CoV.

• The cellular providers know who is using the phone.
• Google knows who is using Android
• Apple knows who is using their iPhones
• And the place that tests you to find out you're positive for CoV has your identity which will be reported back to the motherships to "make the app more accurate".

It's impossible for this scheme to be anonymous
 
  • Disagree
  • Like
Reactions: Wombert and Juan007
Contact Tracing on one hand is innocent; you ask who someone's been in touch with and them them who they've been in touch with...

Enabling this on an API and Bluetooth level is straight up Dark Knight Rises, and we don't have Batman looking out for us.

High-Frequency_Generator.jpg

It was actually the second of the Batman Trilogy ‘The Dark Knight’ where they were trying to locate The Joker... But I totally agree with your sentiment.


In the words of Mr Fox, this is wrong.
 
I'm not sure if we're just quibbling over the word "access" or what, but your carrier can ping your device's GPS to determine your precise location. It is done all the time and has been done for years. Here's one example from 2012:
Can you please describe what exactly you mean by "ping your device's GPS"? Devices only contain a GPS receiver. It cannot be "pinged" by a carrier. This only works in the movies.

Also, please provide a quote of what exactly you're referring to in this document.
 
Can you please describe what exactly you mean by "ping your device's GPS"? Devices only contain a GPS receiver. It cannot be "pinged" by a carrier. This only works in the movies.

Also, please provide a quote of what exactly you're referring to in this document.
What you're saying cannot be done is done literally every day by law enforcement across the United States. It requires a warrant, but it is 100% technologically possible and has been for many years.

As for the quote in the document, it's the very beginning of the opinion:
The police quickly identified the defendant as the person suspected of murdering the victim with a sawed-off shotgun. In an attempt to pinpoint the location of the fleeing suspect, the police caused the defendant's cell phone to be "pinged." They did so without a warrant. The legality of that ping in these circumstances is the central legal issue in this murder case. The police had learned the defendant's cell phone number within approximately four hours of the shooting. After receiving this information, the police contacted the defendant's cellular service provider (service provider) to request the real-time location of his cell phone […] The service provider eventually "pinged" the defendant's cell phone, an action that caused the defendant's cell phone to transmit its real-time global positioning system (GPS) coordinates to the service provider. Once received, the cell phone's GPS coordinates were relayed to the police […].

Again, this is a case from 2012. This is utterly commonplace.
 
What you're saying cannot be done is done literally every day by law enforcement across the United States. It requires a warrant, but it is 100% technologically possible and has been for many years.

As for the quote in the document, it's the very beginning of the opinion:


Again, this is a case from 2012. This is utterly commonplace.
They are not "pinging the GPS". They are "pinging" the phone's cellular stack (e.g. by sending a silent SMS), which causes it to respond to the network (otherwise it may be in idle mode to save battery life, in which case the network doesn't necessarily know which cell the phone is in). That still only allows the carrier to learn the rough location based on the cell the user is in, not a precise location as required for contact tracing.
 
  • Like
Reactions: Nuvi
...and what if someone is accused of committing a crime when this functionality is enabled - will Apple and Google comply with a warrant to release this information to police? This information doesn't reside on an individual's phone (it's beamed back to Apple/Google), so device level encryption doesn't help here.

and who cares... don’t commit a crime for starters. Problem solved now deal with Corona.
 
They are not "pinging the GPS". They are "pinging" the phone's cellular stack (e.g. by sending a silent SMS), which causes it to respond to the network (otherwise it may be in idle mode to save battery life, in which case the network doesn't necessarily know which cell the phone is in). That still only allows the carrier to learn the rough location based on the cell the user is in, not a precise location as required for contact tracing.
No, they are pinging the GPS. Did you real the part of the opinion that I quoted that says "The service provider eventually 'pinged' the defendant's cell phone, an action that caused the defendant's cell phone to transmit its real-time global positioning system (GPS) coordinates to the service provider."? Here's a discussion of a Second Circuit opinion from 2016 that talks about Sprint pinging the GPS of the suspect's device:

It's a technique that's existed for maybe a decade now. There are literally countless published legal cases in which this is talked about.
 
Contact Tracing on one hand is innocent; you ask who someone's been in touch with and them them who they've been in touch with...

Enabling this on an API and Bluetooth level is straight up Dark Knight Rises, and we don't have Batman looking out for us.

High-Frequency_Generator.jpg
Exactly. No sane person believes that Apple and Google will keep identities private, maintain opt-in or dismantle this once it is activated. It will be leveraged into our lives in countless ways.
 
No, they are pinging the GPS. Did you real the part of the opinion that I quoted that says "The service provider eventually 'pinged' the defendant's cell phone, an action that caused the defendant's cell phone to transmit its real-time global positioning system (GPS) coordinates to the service provider."? Here's a discussion of a Second Circuit opinion from 2016 that talks about Sprint pinging the GPS of the suspect's device:

It's a technique that's existed for maybe a decade now. There are literally countless published legal cases in which this is talked about.
If the document says that, whoever wrote it (presumably a lawyer, not an expert) is wrong.
 
Rolling it out, just like China. Except this was all already documented in Rockefeller papers.


“You never let a serious crisis go to waste. And what I mean by that it's an opportunity to do things you think you could not do before.”

Rahm Emanuel
 
If the document says that, whoever wrote it (presumably a lawyer, not an expert) is wrong.
Ok, well I've provided two links to published appellate court cases describing it as pinging the GPS. Do you have some other authority you can provide that says it's doing something else?
 
Ok, well I've provided two links to published appellate court cases describing it as pinging the GPS. Do you have some other authority you can provide that says it's doing something else?
How about a technical description how exactly that's supposed to work? I can't very well prove a negative. I gave you a brief description above about the silent SMS method that authorities can use to roughly locate a phone.

In any case, if the carriers can already provide location information with GPS precision, why do you think Google, Apple and others are working on the Bluetooth method?
 
If technology can help everyone, I don't care about someone's privacy issues

That’s a dangerous way to think about things (yet a sentiment the NSA would be happy to hear I’m sure).

Technology and privacy can coexist, but all too often doesn’t. There’s no incentive for these companies to respect privacy other than in their marketing, and Google doesn’t even do that. Do they allow anyone to audit their systems for privacy? I’m pretty sure you’d find a trove of concerns and breaches if they did.

People in many countries are already complying with significant restrictions on movement and social distance. I don’t see how these permissions can add to or enhance that.
 
Last edited:
  • Like
Reactions: iOS Geek
Lots of FUD over the privacy implications of this which completely ignores how it’s actually going to be implemented. A few key points that render most of it useless:
  • Location Services is not used. This system cannot be used to track anyone’s location, period.
  • No PII is involved at all. No name, location, contact information, or anything of the like.
  • What is tracked? An anonymous, ephemeral Bluetooth beacon transmitted by the device that changes every 15 minutes. Even the most oppressive government couldn’t use this to track anyone’s contacts over time.
  • You must install an app (or later, when it’s built into iOS and Android, opt-in) to use this feature, and even then, when diagnosed, the user’s consent is required to actually share the data to notify exposed individuals. (The device sends a ~14-day temporary store of keys for devices whose owners were exposed.)
Technologically this is actually very similar to work that Apple’s already done and shipped: Find My’s Offline Finding feature. It’s just used in a different context with some appropriate tweaks, like not using location data at all.

I deeply care about digital privacy and have spoken about it at length here. Having looked over the documentation on how it actually works, this is a solution that’s consistent with what we’d expect from Apple, and honestly I’d feel comfortable enabling it.

Having just read the TechCrunch article I found the piece I didn't get from your description: Each phone keeps a record of the identifiers it has broadcast, and of the identifiers it has seen. When tested positive for disease, the user can agree to share their full list of identifiers which gets broadcast to the world. Everyone else downloads that list and checks if they have it in their list of identifiers seen.

So if you test positive and agree to, you are blasting a significant amount of data into the world. It doesn't sound like the interactions are stored anywhere centrally which will make nefarious use of that information more difficult which is good.

And, of course, if we test positive we can each decide if we feel the greater good outweighs 2 weeks of our privacy.

Still interested to learn more of the details when I find the time, but it's not a bad implementation based on this.
 
What happened to people’s natural immune system? Has the masses all compromised and if so why?
Ever hear why Native Americans died by the MILLIONS because Europeans brought smallpox which the Native's immune systems have never seen before? Well this is similar. The COVID-19 is very different compared to other cold viruses and our immune systems are rookies fighting this one. That's why the mortality is so much higher.

Given the fact that you oversimplified what transpired in Italy and other effected areas. Let’s get something correct, yes a person who gets infected may fall ill or be asymptomatic. People who do fall ill may recover and some may get severe. Those severe cases some may improve while other may still die. The patient who die may have had other medical complications that lead them to their tragic fate.

Do we know how many people with similar respiratory symptoms are from cold/flu and are being lumped and counted as COVID-19 cases. I suspect we do not.

Is the medical system being hammered, yes in some areas more so than others. That being said the healthcare system in any country is not perfect. There have been reports of people in Wuhan who have recovered and have been reinfected, there have been reports of false positives and negatives test results for which CDC is at fault.

Once again when an living thing contracts an invader it has a natura immune response to fight that invader. Bacteria and viruses for example mutate, other living things have immune systems to react and fight the invading organism. This is how nature work, please educate me as to what the purpose of the immune system is if an individual does not have a compromised health condition. For example everyone does not take the annual flu shot but even after they get infected with the flu their immune system naturally reacts to restore health and create antibodies, yes their survived without taking the flu vaccine.

So are you informing me that hundreds of not thousands of COVID-19 patients have weak immune systems and if so why? You make it sound like there have been no recoveries and this virus is a death sentence.
Again, it's because this virus is so different we don't have any sort of immunity. Immunity is multifaceted. Even though someone doesn't get the flu shot they don't die easily from the flu as their immune system has seen a similar flu virus before and kind of has the know how to fight it.

I'm all for this providing that once the vaccine is out, it is disabled completely. We need to open the economy up again. We don't need a 1930's type of depression or worse because of fear of 1984.
 
Last edited:
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.