About that Shiny New Contact Tracing App…

by Kerry Dougherty

After months of being next to last nationally – in COVID-19 testing – Virginia is finally first in something:

A brand new contact tracing app.

Yippee!

“Virginia officials on Wednesday launched a smartphone app that uses Bluetooth technology to alert people when they have come in contact with someone who has tested positive for COVID-19,” reports The Richmond Times-Dispatch. 

“The app, COVIDWISE, is the result of a collaborative project between Google and Apple, which have been in talks with Virginia and other states to develop and roll out the app for months.

“Virginia on Wednesday became the first state to fully launch an app with this particular platform.”

The governor unveiled the app along with a public relations campaign: “Add Your Phone To The COVID Fight” to persuade Virginians to download the free software that will alert them when they’ve been in contact with someone who tested positive for the virus, even if that contact was weeks earlier.

It’s full of safeguards, officials promise. Your identity and location remain anonymous. The government will not pursue you if you’ve been in contact with someone who later tested positive.

Is the app really a game-changer, I wondered. Should we be worried about privacy?

To find out, I phoned my most tech-savvy friend. In fact, he’s had a 30-year career as a software engineer.  I agreed not to use his name for professional reasons.

He was skeptical. Mostly, he was concerned about how quickly the app was developed and how susceptible it might be to hackers.

“What you don’t want to be is first with something like this,” he warned. “Good apps that utilize bluetooth and other wireless technology are notoriously difficult to develop. It was made by humans and humans make mistakes.

“Someone will crack it,” he predicted. “There will be bugs in it. There always are.”

Experts say the app will work best if close to 60 percent of the population install it on their phones. The P.R. campaign will aim to persuade wary Virginians, who might be reluctant to share their health data, to download it.

That may not be easy.

In a June tech piece headlined, “How To Disable Apple and Google’s Covid-19 Notifications on Your Phone,” Forbes explained that unbeknownst to many, a Covid notifications framework had been surreptitiously installed on most IOS and Android systems. The framework needs an app to work, though, the writer explained.

A recent study by Avira suggests that 71% of Americans won’t download such an app, 88% of those aged 55 or over and 84% of government or healthcare workers. The biggest concern amongst that sample was privacy, closely followed by a false sense of security.

My friend pointed out that the 20- to 29-year-olds who are contracting the virus are socializing and coming in contact with scores of other young people. Chances are, if they all have the app on their phones, they will constantly be “popping” with positives.

“And what do you suppose they’re going to do about it?” the software engineer asked. “Nothing. They’ll  wait to see if they have symptoms rather than take a test and wait as long as two weeks for the results. “

“I wouldn’t use it,” he said flatly, “ and I don’t think we’re at the point where anyone should.”

This column was republished with permission from Kerry: Unemployed & Unedited.


Share this article



ADVERTISEMENT

(comments below)



ADVERTISEMENT

(comments below)


Comments

32 responses to “About that Shiny New Contact Tracing App…”

  1. Thankful to be no phone, no TV. 🙂 Thank you Jim Bacon for the much better atmosphere here.

    1. Nancy_Naive Avatar
      Nancy_Naive

      … no car, no credit cards, no bank accounts, no internet… and you will be one of the only people in America who are truly free from government tracking and intrusion… in other words, an undocumented person.

      Uh yep, only those here illegally are the subject of searches because they already know everything about those here legally.

  2. VDOTyranny Avatar
    VDOTyranny

    Since this was developed with taxpayer money, I’m sure they open sourced it so we can audit the code…. right?

    1. Nancy_Naive Avatar
      Nancy_Naive

      Very little the government buys is “open source”. Usually, some component of the government will have unlimited use, or use with a time limit,. For example**, if the Navy uses civilian research and development, they usually can have multiple installations at little or no additional cost, but should the Air Force like use as well, then they will have to pay more for it.

      ** this is an example referred to as “Joint Use”, but most of the time, it’s called “The Pentagon Fairy Tale”. Yes, yes, at one time, both services used the F-4, but neither could service, reload weapons or even air refuel the other’s aircraft.

      1. LarrytheG Avatar
        LarrytheG

        re: open source – I don’t know with respect to right now – but back when there were Suns and HPs – some departments were using Linux Servers… and more …. to develop weapon-system software….

        and R&D Labs actually get patents for their stuff… it’s a deal among the labs and scientists….

  3. James Wyatt Whitehead V Avatar
    James Wyatt Whitehead V

    I am the last man alive without a cell phone. Send me a telegram!

    1. Can you read semaphore signals?

  4. LarrytheG Avatar
    LarrytheG

    These apps first made their appearance months ago but they did have some bugs to work out.

    Now, they are rolling out in many countries:

    https://en.wikipedia.org/wiki/COVID-19_apps#:~:text=These%20include%20Austria%2C%20Switzerland%2C%20Estonia,Google%2DApple%20Exposure%20Notification%20API.

    New apps like this take time to dial-in but Google and Apple are on it and updates to the already installed apps can be automatic – i.e. flaw fixes and enhancements will roll out quickly.

    At least give Virginia some credit.

    It’s also joined with other states on testing which is as important if not more so:

    Virginia joins multi-state agreement for rapid COVID-19 testing

    RICHMOND, Va. (WWBT) – Virginia will join several other states in an agreement to expand rapid COVID-19 testing, according to an announcement from Gov. Ralph Northam on Tuesday.

    Multiple states will enter formal discussions to purchase 500,000 rapid tests per state. The tests, made by U.S. manufacturers Becton Dickinson and Quidel, have been approved by the U.S. Food and Drug administration and deliver results in 15-20 minutes.

    sure looks like the critics like to criticize at the drop of a hat but it takes longer to give even grudging credit…

  5. S. E. Warwick Avatar
    S. E. Warwick

    Wonder how many tax dollars have been spent on various PR campaigns during the pandemic? Notice how you don’t hear “we’re all in this together” much anymore?

  6. The chances of me voluntarily loading an app onto my phone which allows the government to track my movements is somewhere between slim and none, and slim just rode off into the sunset.

    1. novalad Avatar

      So you’re saying you have a phone?

      1. Yes. Work requirement. I have to be reachable 24/7.

  7. “Northam and officials of the Virginia Department of Health acknowledged possible privacy concerns, assuring the public that the app does not track their whereabouts or store personal information.”

    1) They will have no way of knowing for sure who people have been in contact with without knowing where they are/have been.

    There may be a way around that if they limit the bluetooth data they utilize to proximate locations for all parties, but…

    2) They have no way of notifying you of a close contact with an infected person without having your personal information and the personal information of the infected person.

    There is simply no way around that – they have to store SOMETHING about each person who is using the app or it will not work.

    You should be able to tell whether they are lying about #1 by disabling the location function on your phone before loading the app. If you receive a message during download or when you first activate the app telling you that it needs to use your location, then you will know the app will be using/tracking your “whereabouts”.

    1. LarrytheG Avatar
      LarrytheG

      I don’t think so. At least it does not have to do that and yes, I’d want to know better how it actually works also.

      But all that is needed is for your phone to be able to connect to other phones via Bluetooth and check to see if that phone is marked as infected. That’s it.

      Don’t need to know where that phone was before or yours.

      If you do get that “hit”, then you’d have the option to do nothing and not go get tested if you did not want to.

      But if you did – they’d want the phone number of the phone you got a “hit” on and from that -they’d have the personal info needed, but they do that anyone in non-phone contact tracing – so the phone does not have to transmit any info – anywhere …

      Just the “hit” you get and then what you want to do or not.

      In terms of “tracking” and privacy in general – if you’ve never heard of INRIX – you should go read about. If your phone is on – you can be tracked – period… you don’t have any ability to stop it other than turning off your phone. Your phone emits a signal continuously and the cell phone network Knows where you are – all the time.

      https://www.itproportal.com/2013/09/21/a-closer-look-at-inrix-the-worlds-largest-traffic-intelligence-network/#:~:text=INRIX%20collects%20data%20streams%20from,of%20the%20INRIX%20Traffic%20App.

  8. “In terms of “tracking” and privacy in general – if you’ve never heard of INRIX – you should go read about. If your phone is on – you can be tracked – period… you don’t have any ability to stop it other than turning off your phone. Your phone emits a signal continuously and the cell phone network Knows where you are – all the time.”

    Yes, but that does not mean I have to just hand over to them yet another avenue for collecting information about me.

    1. LarrytheG Avatar
      LarrytheG

      Well – you’re not really. They already can easily “track” you right now if you have location sharing turned on but even if you do not – you phone automatically pings cell towers several times a minute and from that all kind of tracking can be done including them being able to look at all the cell phones in a particular area in proximity to each other.

      Even if you do not install the app – they can still KNOW if your phone was in close proximity to another phone that was tagged as infected.

      You’ve already passed over the rubicon on this! 😉

      crooks know it – that’s why they use disposable phones and dispose of them frequently!

      1. Yes, but that does not mean I have to just hand over to them yet another avenue for collecting information about me.

  9. Dick Hall-Sizemore Avatar
    Dick Hall-Sizemore

    Sorry. I never enable the location function on my smart phone.

    Also, it seems that someone who tested positive would need to adjust his app to indicate that. I have serious doubts if most of those likely to test positive (1) would bother having this app and (2) would put that information into her app.

  10. LarrytheG Avatar
    LarrytheG

    yes… someone WOULD have to “participate” and have their phone marked as “infected”.

    there is a fair about of doubt that people will participate…

    but you can and are tracked right now – with or without location sharing turned on. Your phone “reports” where you are – many times a minute.

    Think about it – if you are driving – how does the cell phone network know where you are if someone is trying to call you?

    1. Yes, but that does not mean I have to just hand over to them yet another avenue for collecting information about me

    2. Dick Hall-Sizemore Avatar
      Dick Hall-Sizemore

      If no one tries to call me, am I still being tracked? (I ask this in total ignorance.)

      1. Yes, unless the battery is removed from your phone you’re service provider/and or phone manufacture can tell where you are located approximately.

  11. LarrytheG Avatar
    LarrytheG

    How it works as well as an FAQ (looks to me that they’ve done a decent technology and privacy-wise):

    https://www.vdh.virginia.gov/covidwise/?fbclid=IwAR3-tBvMVEzhHR3KIeZI6_uKafrQ1DkyyYyacpSK2aJ9Qvx2hxT1dtaJG-M

    1. Thanks for this link, LG/

  12. djrippert Avatar
    djrippert

    As I recall a cell phone tracked by determining which tower is pinged is only very roughly accurate. But c ell phones often ping more than 1 tower. With 3 towers the phone can be localized to an area of about 3/4 of a square mile. I assume that the contact tracing app uses bluetooth to measure distance – a technique with its own set of issues.

  13. Bluetooth tx/rx for a class 2 device (your phone) is 30 feet.
    Bluetooth consumes battery life.
    The token is regenerated every 10-20 minutes, RSA (actual encryption does this every minute).
    If they are logging this data and determine if you’ve interacted over the last 14 days, they are looking a map of where you were located and tracking you and everyone else with it enabled.
    Anonymous, to truly be that on a data network requires a VPN. That’s not what you’re getting, your information is being stored and will be hackable.

    I’ll pass.

  14. LarrytheG Avatar
    LarrytheG

    The Bluetooth is characterized as Bluetooth Low Energy (BLE) technology and the app will not install if your phone doesn’t have that capability.

    Not many people are downloading it so far.

    I did and will report if I catch the government tracking me… if I can before they haul me away ! 😉

    1. Nancy_Naive Avatar
      Nancy_Naive

      God bless Hedy LaMarr for inventing Bluetooth, and yowza, yowza, yowza…

      Yes, gentlefolk, Hedy LaMarr invented the technology that made Bluetooth possible. Beauty times brains is not, repeat, is not a constant.

      1. Yes, it was originally developed for use in a guidance system for torpedoes – one that could not be “jammed” by the Germans.

  15. Nancy_Naive Avatar
    Nancy_Naive

    Oh good… so much for HCQ… “A drug-resistant strain of the parasite that causes malaria has been identified by scientists in Rwanda.”

    1. Oh well, I guess I’ll just have to up my intake of gin-and-tonic…

      1. Nancy_Naive Avatar
        Nancy_Naive

        I have created a false economy for Iceland. Great vodka

Leave a Reply