HNHacker News
TopNewBestAskShowJobs

pdehaye2

19 karma · joined September 26, 2017

submissionscomments
pdehaye2··on Analysis of SwissCovid app
The part that has been open sourced is essentially UI. Some of the most consequential parts are in the Bluetooth metadata, and how this leads eventually to an average attenuation over a certain time period.

This has epidemiological consequences, as acknowledged by one of the leaders of the DP-3T team to the BBC: https://www.bbc.com/news/technology-52995881

Apple (and Google?) retain higher quality signals than what they make available to the apps.

It introduces new security issues, because Apple and Google have had to make choices that degrade the qualities of the protocol. See Sections 3.5 and 3.6 in the report. The Swiss Cyber Security Centre expressed negative sentiments towards the fact that Apple and Google didn't implement some of the recommended protocol improvements: https://www.melani.admin.ch/dam/melani/de/dokumente/2020/Rep...

Finally, this Bluetooth layer becomes a covert channel for transmitting information between phones. There is a lot that we can't tell from this outside.

pdehaye2··on Analysis of SwissCovid app
The point is that you shouldn't mislead the population in claiming this app is open source when it actually isn't.

Some consequential parts of the protocol are implemented as a black box.

pdehaye2··on When I asked Tinder for my data, it sent me 800 pages of my deepest secrets
Email Chommy, the data protection robot: Chommy@PersonalData.IO
pdehaye2··on When I asked Tinder for my data, it sent me 800 pages of my deepest secrets
Hi, I am the person who is cited in the article and who helped Judith get access to her data. If you are interested in the OKCupid story, Judith also wrote about this in more details, also with my input. https://www.letemps.ch/sciences/2017/04/07/laboratoire-fake-...