Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
This is very close, except for the part I highlighted. If you test positive, you can volunteer to upload your own keys. Healthy people's keys are never uploaded. Your phone uploads "these are the keys I've been broadcasting over the past 14 days".

Then everyone else can look at the "infected keys" database, and on-device determine if they've seen any of those keys in the past 14 days.

Page 8: https://covid19-static.cdn-apple.co...otification-CryptographySpecificationv1.1.pdf

I agree that Stromos is absolutely incorrect.

Ahh quite right, I hadn't actually read the API documentation, I was just theorizing how this could be done in a truly anonymous manner. I am going to edit my post to reflect my inaccuracies. Thanks for the flag!
 
The German government, who are very privacy conscious, elected to go with this over what they were developing in house. Short of a vaccine, this, combined with testing, will get us back to a normal life faster than any other way. If you read what apple wrote, you are giving up no invasion of privacy. I don't understand the "over my dead body would I have this running on my phone" reaction at all. If any of those people have a google, twitter, Facebook, etc. account - then you're talking out of your ass!
 
Anonymized is being used so heavily in every article.

I'll try again, anonymized would assume you can't discover the origin device. You literally have to for this to work. That means somewhere device id = anonymized id. You can change the anonymous id every five minutes but it still has to be in a table somewhere that said id at this time belongs to device id. That's the only way you are notified.

In advertising that's anonymized and what everyone keeps touting you don't need to store device id = advertising id anywhere. The data never has to make it back to the origin device because you just want the data.

Do you see the difference? Somewhere there is a record that has to keep track of the device. You are trusting this joint rushed operation has safeguards in place that someone won't be able to access that data. In the advertising world that data literally isn't there so its safe.


sorry, no. The way it is suppose to work is that you get tokens while you are out and meet people. These tokens stay on your phone for two weeks. You send out tokens to everyone else. No servers, so nothing except random tokens are leaving your phone. Now, a few weeks later, “Bob” develops symptoms and gets a test. Test is positiv. Bob now gets a code he can input to his device, him, nobody else and then consents to send all his collected tokens of the last 14days to a server and that server sends these tokens to ALL. The once that have the corresponding tokens on there phone will get an alarm. This should encourage the recipient to get a test.
There is no way to identify anybody here. In theory the upload from positive Bob could have a marker and in theory you could find the phone that sent the positive code. Not suppose to happen.
 
Nope. Not gonna happen.
I will turn off every single freaking thing to disable this crap on the phones.

Before anyone trying to criticize me, I have been staying at home pretty much the whole damn time without contacting anyone outside and had been way out of the 2m distance from any other human beings outside.

I think this is about ending the shutdown. We can allow everyone to resume normal life if everyone is using this... when someone tests positive, we'll be able to send a notification to everyone they were in contact with that they all need to get tested.

I imagine employers will require this as a condition of returning to work. Some businesses will require it for customers, too (governments may even require businesses to require it.)
 
  • Like
Reactions: CarlJ
I think this is about ending the shutdown. We can allow everyone to resume normal life if everyone is using this... when someone tests positive, we'll be able to send a notification to everyone they were in contact with that they all need to get tested.

I imagine employers will require this as a condition of returning to work. Some businesses will require it for customers, too (governments may even require businesses to require it.)
Yep. And that right there...invalidates the “optional” claim. Now there’s the question of people who still have a phone prior to 6s, which is the earliest phone claimed to be able to use this.
 
  • Like
Reactions: augustrushrox
Is this US only?
The api will be available worldwide. The app will be on a country to country, state to state basis. Many countries will not be interested because the corresponding apps will be made for tracing and have to pass Apples (and Googles) tests that they are doing, what they are suppose to be doing, meaning no identifiable marks. Many countries want tracking (not tracing) and this is not made for that. This is really quite good what privacy is concerned, not at all what politicians want. It’s actually doing what it is suppose to do. Anything online right now, in China, in Italy, here in Spain, is nowhere near anonymous, but full fledged tracking. You do not get a choice, you need the app to do anything. In China to get just onto the street. You go to a mcDonalds and there is a pretty girl measuring your temperature, you beep in with your QR code generated by your app and can enter. Nobody wants that.
This is a WAY better approach.
 
  • Like
Reactions: CarlJ
I think this is about ending the shutdown. We can allow everyone to resume normal life if everyone is using this... when someone tests positive, we'll be able to send a notification to everyone they were in contact with that they all need to get tested.

I imagine employers will require this as a condition of returning to work. Some businesses will require it for customers, too (governments may even require businesses to require it.)
Still not gonna happen with me.
The employers will be sued if that is what they want. It is a very slippery slope.
What is next? Make sure everyone does not have AIDS and see who had slept with who?
On the other hand, we need to keep in mind that there are a lot of asymptomatic carriers, so these contact tracing ideas are not perfect.
 
I hope there is an op-out for people who quarantine
Why? The reason for the app is that previous contacts know they where in contact with someone that now tested positiv, they need to know to get tested themselves! Why would you not let them know? So they can spread the virus on?
Alternative, you are in lock down for 4 weeks and know you are clean, yes, you can opt out, but why? You are going out and two days later you get a message to get tested because you came in contact with a carrier. Why would you not like to know that?
 
  • Like
Reactions: ericwn
And how is the information about a positive infection gonna end up from the doctor to the app?

From what I read in a previous story the result is encoded/encrypted information in the form of a QR code sent by the lab to the user, who then scans it with their phone.
 
  • Like
Reactions: CarlJ
This virus will pass but this tracking technology will remain, be improved upon, made more sophisticated and be made more pervasive. This is the thin edge of wedge. The virus is being use to get this through, and so making it easy to get this unquestioningly accepted by an unsuspecting public due to these difficult times. The authorities and corporations are certainly taking advantage of the situation for their own ends, and have no doubt that behind closed doors at the highest levels they would admit it too.
 
So is there a way to completely turn this off and remove it from my iPhone? This is a total hard pass for me. I agree with the poster above who said this is just the thin edge of the wedge.
 
  • Like
Reactions: iOS Geek
Was not surprised to find that the Apple/Google project followed after Apple was contacted by the Swiss based DP-3T project I had been following earlier. DP-3T approach is virtually identical, including the decentralized requirement (data on individual phones only / no centralized server).

DP-3T recognized the practical improvement if an API could be provided such that the app did not have to stay open for the necessary Bluetooth communication between phones.

The competing PEPP-PT project, out of a Germany, also older than the Apple /Google project, was/is a very similar approach except it included data transfer to/from a centralized server (ie a Country’s Health authority).

Germany, Austria, and Switzerland have recently decided to go with the DP-3T approach. It has somewhat lower privacy risk. But mainly because, with Apple/Google API support, it would work without the app open.

France, UK, and possibly others are still hanging onto the centralized server approach for the enhanced coronavirus surveillance potential that it provides. Downside (besides privacy potentially) is that the app has to stay open.
 
I just realized how great this illustration is:
...
Flop sweat drips from Bob's uneven hairline as he sits bored, balancing a notchless smartphone in his hand with the screen faced away and the classic "App" app open. Not even his pencil 'stache distracts from the oddity.
I think Bob is more sad that he doesn't have eyes or a nose. How does he even know whether App.app indicates he is sick? Does App.app talk?
[automerge]1588118957[/automerge]
So is there a way to completely turn this off and remove it from my iPhone? This is a total hard pass for me. I agree with the poster above who said this is just the thin edge of the wedge.
If you manage to turn it off somehow, then on behalf of everyone else, please stay home until a vaccine has been released in a year or two. We don't want you infecting people who are taking the proper precautions.

Don't get the idea that we're okay with you putting everyone else's health at risk, like it's some personal choice that only affects you. If you choose not to participate, then stay home for the next year. If your convictions are as strong as you make them out to be, then take responsibility for the inconvenience you'll be causing yourself.
 
Last edited:
  • Like
Reactions: ericwn and Chlloret
I don’t know why Apple didn’t just build this into their health app with a opt-put. This virus is serious business and we’re going to rely on people downloading specific apps to know whether we were exposed or not?! Really this is the best idea the richest companies in the world could come up with?!

argough a few university or health organizations of HealthKit app trials with a few volunteers whom most likely do not wish that data to be commingled. I’m sure nobody wants that data commingled and affect any medications or health data shared to their doctor also shared to an export meant for a few insurance companies.

not including Health app as an Opt-Out is a wise choice. If opt-in first then later opt-our still contains data during the opt-in period is another potential reason not maki data sync or become integral.
 
and the data is aggregated and Google sells it to whoever. What will do Apple with the data? Pass to?
Provide proof of this, or admit that you're just making stuff up.
[automerge]1588119655[/automerge]
I'll try again, anonymized would assume you can't discover the origin device. You literally have to for this to work. That means somewhere device id = anonymized id. You can change the anonymous id every five minutes but it still has to be in a table somewhere that said id at this time belongs to device id. That's the only way you are notified.
You're thinking in terms of a centralized server doing the correlation. Go read the documentation, rather than arguing that it has to work in a way you're familiar with.
[automerge]1588119831[/automerge]
I hope there is an op-out for people who quarantine
Are you intending to quarantine until a vaccine is perfected and everyone gets immunized?
 
Last edited:
  • Like
  • Disagree
Reactions: B4U and TechieGeek
Haven’t seen any articles mention it yet, but this seems almost identical to how offline Find My works in iOS 13. Probably explains how Apple was able to get it ready so quickly.
[automerge]1588120865[/automerge]
Still not gonna happen with me.
The employers will be sued if that is what they want. It is a very slippery slope.
What is next? Make sure everyone does not have AIDS and see who had slept with who?
On the other hand, we need to keep in mind that there are a lot of asymptomatic carriers, so these contact tracing ideas are not perfect.

Sued for what, exactly? Employers are absolutely able to impose requirements on their employees, doubly so in the middle of a global health emergency.

And you’re clearly not understanding how this system works...it isn’t going to do anything unless and until we have massive antibody testing capability, such that nearly everyone gets a test, sick or not. The only reason asymptomatic carriers are an issue now is because only symptomatic people are being tested.
 
  • Like
Reactions: CarlJ
Out of curiosity, for those that live in major cities, how much memory is this going to take up? From what I understand you have a daily token on your device and a second token which changes approximately every 15 minutes. All these tokens will be stored for 14 days. Also stored will be the token for everyone you come into contact with, the length of time you were in their vicinity, and that too will be stored for 14 days. At a later date, they may store additional information (signal strength- to estimate closeness and maybe weather, such as wind speed, UV levels etc, to estimate increased/decreased risk). Also the latest confirmed COVID cases tokens will be added to your device daily (probably wiping off the previous days).

Edit - Added - the length of time you were in their vicinity
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.