Good videos, with context.
Protecting Privacy with MATH (Collab with the Census)

Protecting Privacy with MATH (Collab with the Census)

minutephysics
2 HN recommenders · discussed 2020–2022
Open YouTube ↗

About this video

minutephysics, in collaboration with the US Census Bureau, explains differential privacy and why the 2020 census adds noise to protect individuals' data. It walks through how statistics can leak private information.

Why it appears in the archive

Linked as the clearest technical explainer of differential privacy and the census, and of why aggregate data can still compromise privacy.

AI-generated summary and labels from the source dataset; verify important details against the video. Source & credits.

From the Hacker News discussion

Zacru · 2021-04 · rec

Your comment reminded me of this minutephysics video about the census. [VIDEO] It a great walkthrough of the "privacy doom principle."

Read original comment ↗
achille · 2022-03 · rec

Technical explanation by minutephysics: [VIDEO] The amount of privacy is configurable, and researchers who would like to tune it (in either direction) can make a plea so the public can decide the amount of privacy loss they're willing give up in order to aid research. Each culture is different and has different tolerances for privacy and amount of intrusiveness.

Read original comment ↗
pdkl95 · 2020-02 · reference

> That would make the existence of anonymous data practically speaking impossible to have on the web For almost every type of data that is true. Transforming or substituting data doesn't make it anonymous; the patters in the data are still present. To produce actually anonymous data you have to do what the GDPR instructed: corrupt the data ("rendered anonymous") severely enough that the "data subject is ... no longer identifiable". You need to do something like aggregate the data into a small number of groups such that individual records no longer exist. Techniques like "differential privacy" let you control precisely how "anonymous" your data is by e.g. mixing in carefully crafted noise. > 8192 bucket While others have pointed out that this isn't actually limited to 13 bits of entropy for most people, there are at least two reasons that field is still very personally identifying. First, "x-client-data on its own" never happens. Google isn't wasting time and money implementing this feature to make an isolated database with a single column. At no point will the x-client-data value (or any other type of data they capture) ever sit in isolation. I used the IPv4 Source Address as an example because it will necessarily be present in the header of the packets that transport the x-client-data header over the internet. Suggesting that Google would ever use this value in isolation is almost insulting to Google; why would they waste their expensive developer time to create, capture, an

Read original comment ↗