Re: COVID-19 contacts tracker (Re: a brief pondering)

Rob Sayre <sayrer@gmail.com> Fri, 17 April 2020 00:33 UTC

Return-Path: <sayrer@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04B9F3A145E for <ietf@ietfa.amsl.com>; Thu, 16 Apr 2020 17:33:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iwMnxyeKkPz5 for <ietf@ietfa.amsl.com>; Thu, 16 Apr 2020 17:33:38 -0700 (PDT)
Received: from mail-io1-xd30.google.com (mail-io1-xd30.google.com [IPv6:2607:f8b0:4864:20::d30]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B6893A1459 for <ietf@ietf.org>; Thu, 16 Apr 2020 17:33:38 -0700 (PDT)
Received: by mail-io1-xd30.google.com with SMTP id f19so483569iog.5 for <ietf@ietf.org>; Thu, 16 Apr 2020 17:33:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=12pf5okU76xRcK9aYzOGAYyZkTrRUPQGankeEsq/JCU=; b=YrqUnyQprIODUlNp8vd07qh/otugup11xKy59qxbDZbnHCHf+H4v1aucIfxttmx1+s w4Vs58KSO1SukgftdnFYiOs3Op1c6Vi0M3TzJvvfmw37C/1kOkD0tuspM9FdxpxRIV2k SLTyaV5YtUMMXu3lf/Jfi/LWm5bSdBPy1ihG2CqXRz6XN+7SZEN0R1ECDmt41p9jnVwk zvRV2yO9DMBxyITJKLQH35nh4YRux/+5lJjjAsZVRYa+8/PIq7ip+4hS3LPIipzzU+8h QnCGhfyOEQDXpv14yViIDdH6cZ4ZwQp+AqU471YgiVbMS3L31vv0hPBmyYYPYCAe2eGA ARrQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=12pf5okU76xRcK9aYzOGAYyZkTrRUPQGankeEsq/JCU=; b=SGc/kICPxpjWwSzLIfXjf+FuiqAcBiuq67vbVE8Ck4cUUKWFPegU2urThMXpyXj7tH fI1d/NlAX9Vf3o71KE3U9KPF9ZwFV5zdJYAWoFtkFDzElGeHfI5EhAu/++ycpV8deXXL EFAC6ChrUcw0KpcArWiCi6/nH2vZ+FRkHgPAEwf1wseSpj8lKWCfCeVZZEg7xw/ww+Se +cq2JnFfciNZYPmfQl3h41HyT53Ab49TBuZNgczRdOqaRn9CvS5PN+vRjP/Wa5wa4PJ0 Js8zvJGKdOfsvu1IYRf3sGNtDlwU+9DEo8S6K5LjLN0cV5KddyFgElkytqmawOdDEU1T 1OUQ==
X-Gm-Message-State: AGi0PuZsAo4OBl34QYDWOyfio4BAOx7WApaYDGlIBEiZCU2S638HYZJ3 zTVlNq8GrnJmVo0SMVsdlzHc5/Z8rxPkx/drjOA=
X-Google-Smtp-Source: APiQypLRL0RlTGbuwn8l5Sd7uvgaKLlXtPG4O+ouxPwZRHaQD8vXVSoxHm54aqQGyqT1SaPeCD2KFv/TURFgCGiConI=
X-Received: by 2002:a6b:fa12:: with SMTP id p18mr647554ioh.46.1587083617285; Thu, 16 Apr 2020 17:33:37 -0700 (PDT)
MIME-Version: 1.0
References: <fd6b7ee2-cdbe-14a1-0087-ce61282b22f6@lear.ch> <29D0DCA7-1D72-428F-A6DD-05511D90C039@cable.comcast.com> <2fa6a8c8-7639-a378-2ff1-3f8697556b66@cisco.com> <24cd67ab-df5a-cc2f-745f-ace19d5325ea@network-heretics.com> <59D332BC-F85E-4744-A3D0-2514551154E8@csail.mit.edu> <4E92D147-3ED1-4109-ACC7-DFA16F1D41C2@gmail.com> <7EEFEEB4-CA51-4FFF-9BAA-857EAEA49FDD@csail.mit.edu> <CAChr6Sxet86chG81qLCGzKCzdJmZZ0L6Duh_hnk+tB5WYfaR0Q@mail.gmail.com> <2137617384.18423.1587048987734@appsuite-gw2.open-xchange.com> <D8F1A0A3-7FAC-4FA3-B119-C0609B731AA2@csail.mit.edu>
In-Reply-To: <D8F1A0A3-7FAC-4FA3-B119-C0609B731AA2@csail.mit.edu>
From: Rob Sayre <sayrer@gmail.com>
Date: Thu, 16 Apr 2020 17:33:25 -0700
Message-ID: <CAChr6SykUyCj8MUDddySQSjox+ygHZ3_8M0vof92v-kTq4A8nw@mail.gmail.com>
Subject: Re: COVID-19 contacts tracker (Re: a brief pondering)
To: John Wroclawski <jtw@csail.mit.edu>
Cc: Vittorio Bertola <vittorio.bertola=40open-xchange.com@dmarc.ietf.org>, IETF discussion list <ietf@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000003cbd5705a371b398"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/Pcl7tiuNtQtV9MwWBB7bqD-BKXQ>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Apr 2020 00:33:40 -0000

On Thu, Apr 16, 2020 at 10:12 AM John Wroclawski <jtw@csail.mit.edu> wrote:

>
> > On Apr 16, 2020, at 10:56 AM, Vittorio Bertola <vittorio.bertola=
> 40open-xchange.com@dmarc.ietf.org> wrote:
> >
> >> Il 16/04/2020 09:18 Rob Sayre <sayrer@gmail.com> ha scritto:
> >> It's not clear that any of these tracker proposals actually harm
> privacy. Certainly the government in most places can get this data from
> phone companies and correlate it themselves.
> > No, because covid19-oriented contact tracing requires much more
> precision than what can be provided by any location data that the operators
> can trace through their cellular networks; location data are unsuitable to
> determine a one-time contact with accuracy […] (the other reason is that
> this approach allows you to trace contacts even if the cellular and/or GPS
> connectivity is unavailable,
>
> Yes, exactly. The other interesting thing about the BTLE protocols being
> proposed is that they’re being designed to report that you came into close
> proximity to a person of interest, but not (depending on details) where,
> exactly when, etc. This, plus requiring you to explicitly release your
> tracking information, is the sense in which they’re “privacy preserving” -
> implementing minimum semantics needed for this specific purpose and no more.
>
> Of course, one could always cross-correlate with other information (eg,
> cell-tower-trianguation-level location tracking) to peel some of this back.
> But if you’re worried about that, the next observation is that the BTLE
> protocols work even if your LTE radio is turned off - they remember things
> for later. So you can, at least conceptually, carry your phone with the
> wide area radio off when you want to, and still learn retrospectively that
> you were in proximity to a contact.
>

Here are some angles being tried:
https://www.wsj.com/articles/government-tracking-how-people-move-around-in-coronavirus-pandemic-11585393202
https://twitter.com/TectonixGEO/status/1242628347034767361

BTLE would be more accurate, but it does seem like other data sources are
good enough to get within 10m. Even with BTLE, there are cases like the
phone running out of batteries or just not carrying one...

thanks,
Rob