deca6cda37d0
Joined 7 years ago
Joined 7 years ago
- Keys will now be randomly generated rather than derived from a temporary tracing key, making it more difficult for someone to guess how the keys are derived and use that information to try and track people.
- Bluetooth metadata will be encrypted, making it more difficult for someone to try and use that information to identify a person.
- Exposure time will be recorded in five minute intervals, with the maximum reported exposure time capped at 30 minutes.
- The API will include information about the power level of the Bluetooth signal in the data that is exchanged between phones. This can be used in conjunction with the RSSI ("Received Signal Strength Indication") to more accurately estimate the distance between two phones when contact was made.
- Apple and Google will allow developers to specify signal strength and duration thresholds for exposure events.
- The API will now allow for determining the number of days since the last exposure event to better determine what actions the user should take next.
- The API's encryption algorithm is switching from HMAC to AES. Many devices have built-in hardware for accelerating AES encryption, so this change should help performance and efficiency on phones.
It is to protect against user errors. Your suggestion to check for a signature sounds what I'm looking for.
“The speech recognition process involves capturing audio of the user’s voice and sending that data to Apple’s servers for processing. The audio you capture constitutes sensitive user data, and you must make every effort to protect it. You must also obtain the user’s permission before sending that data across the network to Apple’s servers. You request authorization using the APIs of the Speech framework.“
https://developer.apple.com/documentation/speech/asking_perm...
Which languages are processed on device and not send to Apple’s servers?
Why do you use your own servers instead of for example CloudKit?
How do you make money?
Is unlimited storage really unlimited? If I upload 2 TB of pictures that’s fine?
Are you iOS only or also available on other platforms?
If iOS only, why do you use an android design pattern (floating + button) and not conform to platform standards?
I guess your privacy policy is not finished yet. It’s lacks details to conform to gdpr and ccpa.