There's still a lot of work left to do to protect the privacy for users of contact tracing apps. This tool targets the DP3T variant to track users who self-reported, and similar attacks can be implemented against other variants like the NHS app and ROBERThttps://twitter.com/jedisct1/status/1260635632851976198 …
-
-
It is, albeit with slightly more work. Instead of learning which of your "circles" was close to an self-reporting person, you only learn that one of them was. But once you pool your path with multiple other people's, checking for the intersection is easy. 1/2
-
A more technologically sophisticated attack is to run multiple ROBERT clients on your device. Schedule each one to be active for 15 minutes a day and then privacy is the same in either system. Centralised systems can't stop this attack without recording (invasive) user info 2/2
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.