I only skimmed the RAPPOR paper, but can you discuss the worst-case scenario where an NSA-like adversary is able to each data point when it arrives? Assuming this happens from the start, how much information would she be be able to obtain?
> We can also review the actual code that ships in Firefox, which is a big plus over the Chrome implementation.
Sure, but note that it's been implemented already and will be pushed to the users as an add-on, without going through the full release process. Even this HN post seems to have been prematurely buried.
It would have been possible for this to be deployed without anyone knowing. Post-hoc reviewing of functionality as sensitive as this is not the ideal solution.
> We can also review the actual code that ships in Firefox, which is a big plus over the Chrome implementation.
Sure, but note that it's been implemented already and will be pushed to the users as an add-on, without going through the full release process. Even this HN post seems to have been prematurely buried.
It would have been possible for this to be deployed without anyone knowing. Post-hoc reviewing of functionality as sensitive as this is not the ideal solution.