The underlying claim here is that de-identification doesn't work, the articles then explores the consequences of that.
But the real question should be: why doesn't de-identification work and how to make it work. It is a technical problem, and I thought it was more or less solved. But the author here things it is just placebo. If so, what is the problem exactly? Is there a fundamental problem with the very idea of de-identification? Is there a "bug" in the process? What level is required to conduct these attacks? Can in individual do it? A cybercrime gang? A nation state? Is it only theoretical?
Depending on that, the answer could be very different.
But the real question should be: why doesn't de-identification work and how to make it work. It is a technical problem, and I thought it was more or less solved. But the author here things it is just placebo. If so, what is the problem exactly? Is there a fundamental problem with the very idea of de-identification? Is there a "bug" in the process? What level is required to conduct these attacks? Can in individual do it? A cybercrime gang? A nation state? Is it only theoretical?
Depending on that, the answer could be very different.