Protecting Privacy with MATH (Collab with the Census)
minutephysics2 HN recommenders · recommended in 2 months, 2020–2022
explainer · intro · evergreen · 2020–2022 on HN
minutephysics, in collaboration with the US Census Bureau, explains differential privacy and why the 2020 census adds noise to protect individuals' data. It walks through how statistics can leak private information.
Linked as the clearest technical explainer of differential privacy and the census, and of why aggregate data can still compromise privacy.
Up next
10 mo on HNFinding the Missing Memristor - R. Stanley Williams
The Qualcomm Institute
12 HN recommender · 2010–2024
10 mo on HNDefcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
6 HN recommender · 2012–2019
9 mo on HNThis Video Is Sponsored By ███ VPN
Tom Scott
9 HN recommender · 2019–2026
9 mo on HNAmerica Keeps Rejecting an ID Card It Already Has
CGP Grey
14 HN recommender · 2017–2024
7 mo on HNFrank Abagnale | Catch Me If You Can | Talks at Google
Talks at Google
8 HN recommender · 2018–2023
8 mo on HN#HITB2012KUL D1T3 - The Grugq - OPSEC: Because Jail is for wuftpd
Hack In The Box Security Conference
9 HN recommender · 2013–2024
6 mo on HNCybersecurity as Realpolitik by Dan Geer presented at Black Hat USA 2014
Black Hat
1 HN recommend · 2014–2023
6 mo on HN28c3: The coming war on general computation
28c3
6 HN recommender · 2011–2026
6 mo on HNDEF CON 22 - Zoz - Don't Fuck It Up!
DEFCONConference
3 HN recommender · 2016–2021
6 mo on HNData Brokers: Last Week Tonight with John Oliver (HBO)
LastWeekTonight
5 HN recommender · 2022–2024
6 mo on HNCivil War General-Purpose Computing | Cory Doctorow | Talks at Google
Talks at Google
4 HN recommender · 2012–2026
6 mo on HNWe're building a dystopia just to make people click on ads | Zeynep Tufekci
TED
6 HN recommender · 2017–2026
3 comments from Hacker News
Technical explanation by minutephysics: ▶ this video The amount of privacy is configurable, and researchers who would like to tune it (in either direction) can make a plea so the public can decide the amount of privacy loss they're willing give up in order to aid research. Each culture is different and has different tolerances for privacy and amount of intrusiveness.
Your comment reminded me of this minutephysics video about the census. ▶ this video It a great walkthrough of the "privacy doom principle."
> That would make the existence of anonymous data practically speaking impossible to have on the web For almost every type of data that is true. Transforming or substituting data doesn't make it anonymous; the patters in the data are still present. To produce actually anonymous data you have to do what the GDPR instructed: corrupt the data ("rendered anonymous") severely enough that the "data subject is ... no longer identifiable". You need to do something like aggregate the data into a small number of groups such that individual records no longer exist. Techniques like "differential privacy" let you control precisely how "anonymous" your data is by e.g. mixing in carefully crafted noise. > 8192 bucket While others have pointed out that this isn't actually limited to 13 bits of entropy for most people, there are at least two reasons that field is still very personally identifying. First, "x-client-data on its own" never happens. Google isn't wasting time and money implementing this feature to make an isolated database with a single column. At no point will the x-client-data value (or any other type of data they capture) ever sit in isolation. I used the IPv4 Source Address as an example because it will necessarily be present in the header of the packets that transport the x-client-data header over the internet. Suggesting that Google would ever use this value in isolation is almost insulting to Google; why would they waste their expensive developer time to create, capture, an