A Primer on Information Theory and Privacy

Electronic Frontier FoundationIf we ask whether a fact about a person identifies that person, it turns out that the answer isn’t simply yes or no. If all I know about a person is their ZIP code, I don’t know who they are. If all I know is their date of birth, I don’t know who they are. If all I know is their gender, I don’t know who they are. But it turns out that if I know these three things about a person, I could probably deduce their identity! Each of the facts is partially identifying.

There is a mathematical quantity which allows us to measure how close a fact comes to revealing somebody’s identity uniquely. That quantity is called entropy, and it’s often measured in bits. Intuitively you can think of entropy being generalization of the number of different possibilities there are for a random variable: if there are two possibilities, there is 1 bit of entropy; if there are four possibilities, there are 2 bits of entropy, etc. Adding one more bit of entropy doubles the number of possibilities.1

Because there are around 7 billion humans on the planet, the identity of a random, unknown person contains just under 33 bits of entropy (two to the power of 33 is 8 billion). When we learn a new fact about a person, that fact reduces the entropy of their identity by a certain amount. There is a formula to say how much: Continue reading.

Related Posts

Digital Books and Your Rights: A Checklist for Readers I. Introduction After several years of false starts, the universe of digital books seems at last poised to expand dramatically. Readers should view...
The Toyota recall and the case for open, auditable source code Public Safety is not a matter of Private Concern In a recent article, Slate's Farhad Manjoo attempts to play down fears of faulty software in car bra...
It’s not the Gates, it’s the bars To pay so much attention to Bill Gates' retirement is missing the point. What really matters is not Gates, nor Microsoft, but the unethical system of ...
The Public Domain Manifesto The public domain, as we understand it, is the wealth of information that is free from the barriers to access or reuse usually associated with copyrig...
The Role of Privacy by Design in Protecting Consumer Privacy 1) What is Privacy by Design? CDT has submitted comments to the Federal Trade Commission for the second in a series of public roundtable discussion...
Celebrating Data Privacy Day I'm assuming most people already know this, but if you did not, today is Data Privacy Day. Given that those in control of the wheels of the digital ma...

We Recommend These Vendors and Free Offers

Launch an SSD VPS in Europe, USA, Asia & Australia on Vultr's KVM-based Cloud platform starting at $5:00/month (15 GB SSD, 768 MB of RAM).

Deploy an SSD Cloud server in 55 seconds on DigitalOcean. Built for developers and starting at $5:00/month (20 GB SSD, 512 MB of RAM).

Want to become an expert ethical hacker and penetration tester? Request your free video training course of Online Penetration Testing and Ethical Hacking

Whether you're new to Linux or are a Linux guru, you can learn a lot more about the Linux kernel by requesting your free ebook of Linux Kernel In A Nutshell.


Leave a Comment

Your email address will not be published. Required fields are marked *

*