German police use coronavirus contact-tracing app to find witnesses
washingtonpost.com
washingtonpost.com
This is not about the official contact-tracing app by the government (the CWA), which by its very nature is decentralised and doesn't allow for that.
This is about the Luca app, a privately developed contact tracing app that is used by some German states and that uses centralised tracking.
This app has absolutely been the focus of criticism inside of Germany, notably including most security experts and the CCC (Germany's largest hackers' association). These criticisms are not dismissed as conspiracy theories by anyone. As a result, some states are also considering pulling out of the deals with Luca.
What is happening here is a discussion about privacy vs. surveillance which is very much in the open, and has very little to do with the official Coronavirus policy of the federal government.
I'm arguing against the misguided notion that this is being dismissed as conspiracy theory, which it absolutely is not. Luca has been controversial since the beginning.
The reason why a centralised solution was chosen is quite simple to see, though:
In the centralised system, the health agency knows who to contact when they might have been infected and could in theory force these people to do a test or into quarantine (in practice, they usually don't have enough personnel to do so, though...).
With the decentralised system, every person can get a notification when they could have been exposed. Whether or not they act upon that notification is up to them.
In the end, I don't think the privacy nightmare is worth it (especially given that health departments are understaffed), but I can see how other actors could come to a different conclusion without it having to be a conscious decision to collect a ton of data for other purposes.
How it goes as usually.
Just wanted to also leave this here: https://www.ccc.de/en/updates/2021/luca-app-ccc-fordert-bund...
"The Chaos Computer Club (CCC) demands an immediate end to states' alimentation of Smudo's million-dollar tax grab "Luca app."
and also as always, predicted the illegal data grab, but noone ever listens..
(… I wish I was joking. I'm not.)
[ed.] just to be clear: that absolutely does not excuse the states' decisions. While it might be understandable that someone can drive social and media discourse with some luck and prior experience, it's the states' job to do their due diligence and not base their decisions on empty PR.
I guess this is the promise of web3, but it looks like we’re technologically a ways out from that, if ever.
Many organizations are just using blockchains for a standardized namespace for pseudonyms and standardized toolkit for non-chain encryption.
So the users in this case would just sign a message for uniqueness, instead of relying on other forms of entropy like their phone or something. They wouldnt be writing anything to a blockchain for tracking and the addresses wouldnt be used by anything else or have funds in them.
There’s no reason the Luca app also couldn't do it this way. But I’m not sure if it would have mattered, or why the health department had identifying data after decrypting anything.
Lets see if they wouldn't be getting a GDPR lawsuit as well.
Likewise, I haven't read the Terms of Use for installing the app. It very well might have a clause for this use case.
And now I just received a recruitment pamphlet from the government for a "citizen digital identity" which will be used on smart phones.
Am I the only one seeing a pattern here?
You can dislike and oppose the current measures (I'm not a fan either FWIW) but that does not mean that everything they are doing to modernize their terrible IT infra is part of a bigger plan.
[CITATION NEEDED] That's the what the job offers talked about and doesn't justify the focus on smart phones. Unless you've read the job offer or, like me, personally know people on the inside, you're just making stuff up.
> You can dislike and oppose the current measures (I'm not a fan either FWIW) but that does not mean that everything they are doing to modernize their terrible IT infra is part of a bigger plan.
A personal identity application, on a cell phone, is already being abused by the government.
Why do I need to provide a citation when your entire comment is itself a conjecture? It's also a request made in bad faith because everything we know about that program is from the government which you clearly don't trust so any citation I offer will be striked down as "from the gov".
> A personal identity application, on a cell phone, is already being abused by the government.
The article is about a centralized system, that was already decried by critics, in Germany. The Quebec "VaxiCode" app is not used for tracking, only to provide an easy way to give proof of vaccination and was not abused in any way. It gives the same information as your drivers' license + your vaccination status with the added benefit of allowing contactless verification through the QR code.
Canada's Covid Alert app is not centralized and does not give any information to the government. The code is even on GitHub.
It always baffled me that they can be completely wrong, but when something happens that tangential to their position, they feel vindicated and therefore even more rooted in thair beliefs.
I used to believe they lack nuance. I now believe they lack both structure an nuance. Conspiracy theories operate as a word cloud. If a real world event happens to correspond to at least two keywords, bingo, "I told you so", the theory is vindicated.
It is irrelevant that the Luca app was not the official app. It is irrelevant that Canadian IT infra needs simplifications. It is irrelevant that when you install an app you see the permissions it needs. It is irrelevant that there are valid reasons to use 2FA for government online resources.
"Police", "covid app" -> it was a way to track and monitor individuals from the start. Covid was the tool to drive acceptance.
"Government", "id app" -> same
Conspiracy theorists really are satisfied with "in the same galactic sector" levels of accuracy.
> Police", "covid app" -> it was a way to track and monitor individuals from the start. Covid was the tool to drive acceptance.
https://globalnews.ca/news/8503895/watchdog-probing-official...
I did make an explicit conjecture that was based on hard facts but then you made a statement out of thin air with nothing to back it up.
> It's also a request made in bad faith because everything we know about that program is from the government which you clearly don't trust so any citation I offer will be striked down as "from the gov".
That's not what bad faith is. And then you're making a strawman about trust which I didn't even make or even mentionned.
> The article is about a centralized system, that was already decried by critics, in Germany. The Quebec "VaxiCode" app is not used for tracking, only to provide an easy way to give proof of vaccination and was not abused in any way.
I never mentioned anything about tracking.
> Canada's Covid Alert app is not centralized and does not give any information to the government. The code is even on GitHub.
Our government was just caught collecting "de-identified" location data (which is bullshit given location easily translates into address of residence and work) https://globalnews.ca/news/8503895/watchdog-probing-official... Canada admitted they spied
"And now I just received a recruitment pamphlet from the government for a "citizen digital identity" which will be used on smart phones. Am I the only one seeing a pattern here?"
This is the conjecture, you assume that "citizen digital identity" is part of a wider trend or pattern and not simply a modernization effort. Your comment was made under a post about government overreach using covid tracking apps.
You can't just say I am building a strawman because you didn't explicitly write "CDI will be used for tracking". It is still very much the implication of your comment.
> I never mentioned anything about tracking.
Idem
> Our government was just caught collecting "de-identified" location data (which is bullshit given location easily translates into address of residence and work) https://globalnews.ca/news/8503895/watchdog-probing-official... Canada admitted they spied
This is so far removed from CDI that I don't understand why you think this is relevant... Yes Canada is also part of the five eyes and violates the rights of its citizens often, that's not what we are discussing at all.
How is it that something happens, actually really happens, and it's still dismissed as fuel for conspiracists?
Things like Lab Leak, masking, hell at one time people claiming that the covid vaccine would need boosters were labeled "conspiracist" spreading mis information
Pretty much anyone that says anything 1day to 6 weeks before that thing is uttered by Dr Fauci is labeled as "conspiracist" until such time as Dr Fauci has blessed the position as "Science" because he after all he "is the Science"
OP is just strawmanning.
(Moreover, the phrase "could be seen as fuel for conspiracy theorists" doesn't mean that something bad isn't happening, it's usually used as a way of saying "don't do this stupid thing because it encourages people to think we do even stupider things").
It is fuel. And it should also be criticized by people not susceptible to theories.
Too late!
1. Keep a rule of law
2. Maintain a stable & competitive economy
3. Turn taxes into public services (defense, roads, etc)
4. Lie