31 ms·

QR codes aren't effective at all as a surveillance mechanism. Why the hell does the government need to monitor which venues you visit based on QR code check-ins

QR codes aren't effective at all as a surveillance mechanism. Why the hell does the government need to monitor which venues you visit based on QR code check-ins? They literally just ask Apple, Google, or any other big tech company about your phones geolocation and IP log history to monitor your whereabouts. Most people with accounts to these platforms have credit-cards, payment history and communication with others. There is nothing particularly special about vaccination QR codes being more unique than any of the other multitudes of data you already provide, willingly, to these tech corps.

emteycz 5y ago
Asking Google or Apple means asking a foreign corporation, likely through legal means and definitely targeted to individuals, not population-wide. Checking logs of a state-run server is way easier.
- mod50ack 5y ago
  The QR verification app doesn't ping back to a server, though. You can literally check. It's open source.
  - emteycz 5y ago
    Not true. I just spent half an hour googling and otherwise looking for the source code, and it's not published anywhere (Czech version - apps named "čTečka" and "Tečka").
- soco 5y ago
  Sorry for the reality check: said states make requests all the time to Google and Apple and also receive the requested data, and we have apparently no issue with this. Instead we use an imaginary feature no scanner outside China has (phoning home) and complain about that.
  - emteycz 5y ago
    That's alright - because that request goes through courts. When the state owns the server being requested, they just read the logs without having to consult a judge.
  - hihihihi1234 5y ago
    "Things are already bad, therefore it's okay if they get worse!"
- rad_gruchalski 5y ago
  > Asking Google or Apple means asking a foreign corporation, likely through legal means and definitely targeted to individuals, not population-wide. Which would be a local telco.
  - emteycz 5y ago
    Not really. My telco sees encrypted traffic only.
    - rad_gruchalski 5y ago
      We are talking about check-ins and location tracking. Your telco knows where you are.
      - emteycz 5y ago
        No, we're talking about actual user data. My position is only very small part of the whole story. While my telco can triangulate me, that's not as useful (precise) as you'd think, especially in vertically built-up areas and/or behind walls.
        rad_gruchalski 5y ago
        No. Original point: > QR codes aren't effective at all as a surveillance mechanism. Why the hell does the government need to monitor which venues you visit based on QR code check-ins? They literally just ask Apple, Google, or any other big tech company about your phones geolocation and IP log history to monitor your whereabouts. This is about locating a user based on QR code scanned at a venue. All I’m saying: no need to ask Apple or Google. Your telco already knows you have been at a location at the time of the venue.
        emteycz 5y ago
        My telco is most definitely not able to determine which particular restaurant, shop or highrise apartment I visited (I know because I have direct experience with requesting this data from telcos via courts and how precise it actually is). Telcos can calculate approximately where I was (with accuracy worse than raw unaided GPS - so ±10m at least, and unpredictably wrong if I'm behind a wall or in a vertically built-up area) at a particular point in time - but they don't know the exact timestamp to look for.

emteycz 5y ago

Asking Google or Apple means asking a foreign corporation, likely through legal means and definitely targeted to individuals, not population-wide. Checking logs of a state-run server is way easier.

mod50ack 5y ago
The QR verification app doesn't ping back to a server, though. You can literally check. It's open source.
- emteycz 5y ago
  Not true. I just spent half an hour googling and otherwise looking for the source code, and it's not published anywhere (Czech version - apps named "čTečka" and "Tečka").
soco 5y ago
Sorry for the reality check: said states make requests all the time to Google and Apple and also receive the requested data, and we have apparently no issue with this. Instead we use an imaginary feature no scanner outside China has (phoning home) and complain about that.
- emteycz 5y ago
  That's alright - because that request goes through courts. When the state owns the server being requested, they just read the logs without having to consult a judge.
- hihihihi1234 5y ago
  "Things are already bad, therefore it's okay if they get worse!"
rad_gruchalski 5y ago
> Asking Google or Apple means asking a foreign corporation, likely through legal means and definitely targeted to individuals, not population-wide. Which would be a local telco.
- emteycz 5y ago
  Not really. My telco sees encrypted traffic only.
  - rad_gruchalski 5y ago
    We are talking about check-ins and location tracking. Your telco knows where you are.
    - emteycz 5y ago
      No, we're talking about actual user data. My position is only very small part of the whole story. While my telco can triangulate me, that's not as useful (precise) as you'd think, especially in vertically built-up areas and/or behind walls.
      - rad_gruchalski 5y ago
        No. Original point: > QR codes aren't effective at all as a surveillance mechanism. Why the hell does the government need to monitor which venues you visit based on QR code check-ins? They literally just ask Apple, Google, or any other big tech company about your phones geolocation and IP log history to monitor your whereabouts. This is about locating a user based on QR code scanned at a venue. All I’m saying: no need to ask Apple or Google. Your telco already knows you have been at a location at the time of the venue.
        emteycz 5y ago
        My telco is most definitely not able to determine which particular restaurant, shop or highrise apartment I visited (I know because I have direct experience with requesting this data from telcos via courts and how precise it actually is). Telcos can calculate approximately where I was (with accuracy worse than raw unaided GPS - so ±10m at least, and unpredictably wrong if I'm behind a wall or in a vertically built-up area) at a particular point in time - but they don't know the exact timestamp to look for.