This is wonderful news for any surveillance state. As the three-page brief on DP-3T [1] says: "A tech-savvy adversary could reidentify identifiers of infected

This is wonderful news for any surveillance state. As the three-page brief on DP-3T [1] says: "A tech-savvy adversary could reidentify identifiers of infected people that they have been physically close to in the past by i) actively modifying the app to record more specific identifier data and ii) collecting extra information about identities through additional means, such as a surveillance camera to record and identify the individuals. This would generally be illegal, would be spatially limited, and high effort." If I read this correctly, this means that a government could collect identifier data on a per-location basis and later link this to someone's identity (for example with cameras or by tracking the IP address of uploaded identifiers). Unfortunately I can think of quite a few entities (e.g. governments) who are not too worried about doing high effort, spatially limited things in order to track people's locations. Saying that this is "illegal" (which is probably not even true in all countries) does not give me confidence it wouldn't happen either. [1] https://github.com/DP-3T/documents/raw/master/DP3T%20-%20Simplified%20Three%20Page%20Brief.pdf https://github.com/DP-3T/documents/raw/master/DP3T%20-%20Sim...