NHS Contact Tracing App

[durhamplumber]

The NHSX app works by creating a persistent install ID which will persist even if you install / reinstall the app. This static install ID then used to derive the temporary contact keys. The central service has the ability to calculate the installation ID from any of the temporary IDs, effectively de-anonymising it.

The source code has been released, for the apps, but not as yet for the server but even then it's a bad solution for maintaining privacy.

https://www.ncsc.gov.uk/blog-post/security-behind-nhs-contact-tracing-app


"When you download and run the app, your phone is assigned a big random number (a 128 bit GUID) to act as your fixed but anonymous identity (we’ll call it the installation ID from now on).

In all of this, you’re anonymous as it's done through the Installation IDs, but the system is building connections between these anonymous identifiers."

Thats spin. You are not anonymous.

So just all sit at home then..So you can twist about Boris not doing anything.

 

[Brigadier]

I do wonder how effective any app which relies on Joe Public to input infection data is going to be. The sort of idiots who find it amusing to start grass fires deliberately, or commit other acts of vandalism, would probably also find it amusing to sabotage the scheme by submitting false data.

Shut down a competitor company, by inputting yourself as infected, then mosy on over to their office at chucking out time.

Get them all self - isolating

Alternatively, even if you're infected, believe yourself to be, or have pinged as having contacted someone who is, you ignore it anyway, because you have to go to work......

 

[ajohn]

In all of this, you’re anonymous as it's done through the Installation IDs, but the system is building connections between these anonymous identifiers."

Thats spin. You are not anonymous.

Doh - so you get tested and what happens then?

Some of this is so stupid it's unbelievably so.

 

[ellal]

I do wonder how effective any app which relies on Joe Public to input infection data is going to be. The sort of idiots who find it amusing to start grass fires deliberately, or commit other acts of vandalism, would probably also find it amusing to sabotage the scheme by submitting false data.

That entirely depends on two things.

1. Transparency as regards the operation of said app and minimum privacy issues.

2. The intelligence of the majority of the population in which said app is used.

To date it appears that the countries that have achieved success so far tick both those boxes.

Sadly the UK doesn't meet the criteria so far!

 

[SirGalahad]

So just all sit at home then..So you can twist about Boris not doing anything.

There, there DP, someone needs to sing you a lullaby to get to sleep.

Another u-turn incoming from the incompetent Government. They have decided to let PHE to test in the care homes as the centrally planned system is not effective.

 

[durhamplumber]

Another u-turn incoming from the incompetent Government. The

Known as “”learning””. Gal....Try it.

 

[SirGalahad]

Known as “”learning””. Gal....Try it.

You don't need to learn something if you know it won't work.

Is that what you do each morning. Stick your hand in the fire to see if it is hot and then repeat it the next day?

Did you vote Tory in the last election?

 

[ajohn]

The brief mentioned that the app tests are going well and wider availability expected in a month or so. Talks with Google, Apple and Microsoft concern something else.

The bike etc part is down to difficulties with public transport when distancing is maintained - reduced to 10% of what it usually is. Some indefinite time in the future as well - really some time given money to do this and that.

Some science type have mentioned that the app will yield unmanageable results until infection counts go down. They found another 4k new cases yesterday. It's mostly being applied to critical workers - they'd need to do 10m to test all of them. Then there are the rest of us - about 20m working or should be but can't at the moment and that is likely to continue for ages for many.

And to top it all I posted something that shows Google do definitely track people -not contacts. Cobra obviously faked it 'cause google doesn't really do that do they?

Once again the questions asked by reporters after the talk were largely stupid and just looking for news as the whole subject is getting a bit stale. Latest is the app so pontificate rubbish about that. Some unfortunately will take it in.

I'm wondering if TSR2 will be usable when it's finished given the potential covid stupidity of the public. But Gov should have jumped on covid sooner. There's no doubt about that.

 

[durhamplumber]

You don't need to learn something if you know it won't work.

Of course i forgot...you think you know everything.....The crystal ball brigade.You also predicted 100% Boris would not get Brexit done!!!..oh dear.

 

[ajohn]

I suspect I've posted why they need it in the big numbers thread. If correct best all download it what ever it is or who ever does it. I suspect they will need it to drive the numbers down at some point and keep them there.

 

[SirGalahad]

Of course i forgot...you think you know everything.....The crystal ball brigade.You also predicted 100% Boris would not get Brexit done!!!..oh dear.

https://osf.io/preprints/lawarxiv/6fvgh

If you can read. Another damning indictment of the NHSX app.

 

[durhamplumber]

https://osf.io/preprints/lawarxiv/6fvgh

If you can read. Another damning indictment of the NHSX app.

Ok mr gloom merchant.

 

[SirGalahad]

Ok mr gloom merchant.

Gets better DP.

https://www.belfasttelegraph.co.uk/...p-could-be-used-to-prank-people-39194407.html


Another huge design flaw. Absolute shambles. You still can't bring yourself to accept the truth.

In other countries we're working with, they are very clear that self-reporting will not be allowed on their app because it can be misused.

He said the UK is effectively the only country to use self-reporting, rather than verified tests, in its app.

“And so the UK seems to claim it’s stuck using self-reporting because it can’t get a test turned around within a few hours.

“And this is really a worry. In other countries we’re working with, they are very clear that self-reporting will not be allowed on their app because it can be misused or used to prank or used to target people deliberately and put them into quarantine without them knowing.”

 

[ajohn]

He said the UK is effectively the only country to use self-reporting, rather than verified tests, in its app.

Mmmm Why is Germany doing one as well ? And others. The Germans have soldiers walking about in circles stepping on carefully marked yellow crosses. All in time of course.

 

[Brigadier]