5 ms·

This is the exact thing that people worry about with these kinds of technologies. We are always assured that our data is safe. Then when people forget about it,

This is the exact thing that people worry about with these kinds of technologies. We are always assured that our data is safe. Then when people forget about it, forces muscle their way into your data. I guess this is the promise of web3, but it looks like we’re technologically a ways out from that, if ever.

nexuist 5y ago
As someone with a generally favorable view of web3 I don't see how it could help here. All data on the blockchain is public by default and contract tracing on the blockchain would just make it easier, not harder, for bad actors to track you throughout your day.
- vmception 5y ago
  Depends on the implementation. Many organizations are just using blockchains for a standardized namespace for pseudonyms and standardized toolkit for non-chain encryption. So the users in this case would just sign a message for uniqueness, instead of relying on other forms of entropy like their phone or something. They wouldnt be writing anything to a blockchain for tracking and the addresses wouldnt be used by anything else or have funds in them. There’s no reason the Luca app also couldn't do it this way. But I’m not sure if it would have mattered, or why the health department had identifying data after decrypting anything.
pjmlp 5y ago
Which is why I find the response from some German federal states to cancel their contracts with Luca is a good message that this kind of data leakage shouldn't be tolerated. Lets see if they wouldn't be getting a GDPR lawsuit as well.
- ksaj 5y ago
  GDPR is exactly what came to mind when I read this. I don't have a full understanding of GDPR, but I thought this is what it is supposed to guard you from. Likewise, I haven't read the Terms of Use for installing the app. It very well might have a clause for this use case.
- vmception 5y ago
  Can sovereigns like the health department be sued under GDPR?
  - pjmlp 5y ago
    I guess the main issue is that no one has ever done it.

nexuist 5y ago

As someone with a generally favorable view of web3 I don't see how it could help here. All data on the blockchain is public by default and contract tracing on the blockchain would just make it easier, not harder, for bad actors to track you throughout your day.

vmception 5y ago
Depends on the implementation. Many organizations are just using blockchains for a standardized namespace for pseudonyms and standardized toolkit for non-chain encryption. So the users in this case would just sign a message for uniqueness, instead of relying on other forms of entropy like their phone or something. They wouldnt be writing anything to a blockchain for tracking and the addresses wouldnt be used by anything else or have funds in them. There’s no reason the Luca app also couldn't do it this way. But I’m not sure if it would have mattered, or why the health department had identifying data after decrypting anything.

pjmlp 5y ago

Which is why I find the response from some German federal states to cancel their contracts with Luca is a good message that this kind of data leakage shouldn't be tolerated. Lets see if they wouldn't be getting a GDPR lawsuit as well.

ksaj 5y ago
GDPR is exactly what came to mind when I read this. I don't have a full understanding of GDPR, but I thought this is what it is supposed to guard you from. Likewise, I haven't read the Terms of Use for installing the app. It very well might have a clause for this use case.
vmception 5y ago
Can sovereigns like the health department be sued under GDPR?
- pjmlp 5y ago
  I guess the main issue is that no one has ever done it.