4 ms·

You don't need surveilance. All recorded contacts can be stored locally and only informed once a positive test is returned. More information here: https://www

You don't need surveilance. All recorded contacts can be stored locally and only informed once a positive test is returned. More information here: https://www.pepp-pt.org/ https://www.pepp-pt.org/

raphlinus 7y ago
The word "surveillance" in healthcare is a little different than in regular politics - it basically means gathering information from the field. See [1]. However, we're going to be seeing a lot of discussion about infectious disease surveillance and the more nefarious types. As Maciej Cegłowski has pointed out, we are already doing the nefarious kind on a massive scale in order to target ads more effectively. I do believe there's a middle ground, that this stuff can be done in a way that preserves human rights. But it will require attention and holding those who have the power to abuse the system accountable. [1]: https://journalofethics.ama-assn.org/article/surveillance-infectious-diseases-information-action/2006-04 https://journalofethics.ama-assn.org/article/surveillance-in...
klik99 7y ago
My understanding of what you just said - status and contacts are stored locally, and the user will manually mark themselves as "infected" after a test. Presumably the receiver of that notification will have a local status saying "get tested". But when you mark yourself to infected, how does that resolve to notifications for all your contacts? At some point that must hit the cloud and fan out to everyone, meaning the contact list is shared at that point, and with a large enough network becomes identifiable info. Esp if you combine that with skimming contacts. Is the GDPR compliance and on the wire encryption what keeps it private?
- xorfish 7y ago
  You exchange a one time id with each close proximity. If you test positive, you publish your recorded close proximities ids on a public server. Authorities can supply you with a one time tocken with the test result to append said server. There are certanly more efficient and elegant ways to solve this problem, but it is solvable.

You don't need surveilance. All recorded contacts can be stored locally and only informed once a positive test is returned. More information here: https://www.pepp-pt.org/ https://www.pepp-pt.org/

raphlinus 7y ago

The word "surveillance" in healthcare is a little different than in regular politics - it basically means gathering information from the field. See [1]. However, we're going to be seeing a lot of discussion about infectious disease surveillance and the more nefarious types. As Maciej Cegłowski has pointed out, we are already doing the nefarious kind on a massive scale in order to target ads more effectively. I do believe there's a middle ground, that this stuff can be done in a way that preserves human rights. But it will require attention and holding those who have the power to abuse the system accountable. [1]: https://journalofethics.ama-assn.org/article/surveillance-infectious-diseases-information-action/2006-04 https://journalofethics.ama-assn.org/article/surveillance-in...

klik99 7y ago

My understanding of what you just said - status and contacts are stored locally, and the user will manually mark themselves as "infected" after a test. Presumably the receiver of that notification will have a local status saying "get tested". But when you mark yourself to infected, how does that resolve to notifications for all your contacts? At some point that must hit the cloud and fan out to everyone, meaning the contact list is shared at that point, and with a large enough network becomes identifiable info. Esp if you combine that with skimming contacts. Is the GDPR compliance and on the wire encryption what keeps it private?

xorfish 7y ago
You exchange a one time id with each close proximity. If you test positive, you publish your recorded close proximities ids on a public server. Authorities can supply you with a one time tocken with the test result to append said server. There are certanly more efficient and elegant ways to solve this problem, but it is solvable.