privacy

Does the Exposure Notification System Work?

“I didn’t intentionally get infected with COVID-19 just to figure out whether Apple’s exposure notification system was working, but it ended up that my experience might offer some additional insight to the situation.” Daniel Eran Dilger’s long and discursive piece for AppleInsider on whether Apple’s COVID-19 exposure tracking is working kind of buries the lede: he got the dubious opportunity to try it out, as implemented in Germany and Switzerland. It wasn’t as flawless or as seamless as you might have hoped. “Over a week later, neither Germany nor Switzerland has used my positive test result to send warnings through the system Apple created. That’s important because the timing of exposure notifications have a very limited useful window. By the time I got a positive result, I likely wasn’t even contagious any more.”

The COVID Alert App and Privacy Panic

COVID Alert app

We’ve both installed the COVID Alert app, even though it’s not fully functional in our province (so far it’s just Ontario). We can’t report a COVID diagnosis, but we can get notified if someone from Ontario we’ve come into contact with does report a positive COVID test result. Since we live near the Ontario-Quebec border, and sometimes have to cross into Ontario for errands and such, there’s already some value in installing it.

The app is available on the Apple App Store and on Google Play.

It can’t run on older phones (on the Apple side, older than an iPhone 6S or first-gen SE) because of hardware limitations, I believe. It makes use of the Apple/Google API, which has strong privacy protections: the only things it shares with the server or with other phones are anonymous tokens. The privacy protections are such that Michael Geist is comfortable installing it, which is something.

It’s in that context that I have to look really sideways at a CBC article that suggests that some people could be identified by the COVID Alert app.

Continue reading…

Taking Facebook Quizzes Is a Bad Idea

From January, but all the more relevant now that more people are at home, bored and wasting time on social media: Why taking Facebook quizzes are a bad idea. The quizzes ask questions—like the name of your first pet, the city of your birth or the month of your birth—that are often used as security questions for bank accounts. No single quiz asks for enough information to do it, but you might be giving criminals enough information across multiple quizzes to hack your account. After all, you don’t know who’s behind these quizzes, but they know who you are—because you’re using your Facebook account!