It has the simplest name, but the sort of shadowy overtones that national security writers lust after.

Team Telecom, a mostly informal working committee of the Departments of Defense, Homeland Security and Justice (along with affiliated agencies) has for years been quietly tasked with evaluating and maintaining the security of America telecom infrastructure in concert with the FCC. Its primary objective as far as we have been able to ascertain is to monitor the ownership of key telecom assets to ensure they don&t fall into the hands of suspect nations (think China, Russia, etc).

Last year, Mark Harris over on Extra Crunch took an in-depth look at the extreme delays companies can experience going through a Team Telecom review (membership required), which in the case of China Mobileexpansion into the U.S., extended up to seven years before the Team rejected the Chinese bid for market entry.

That informal arrangement is disappearing, as the administration over the weekend published a new executive order formally instantiating Team Telecom as a legal process for reviewing applications for telecom licenses, deals and other requests made to the FCC.

Under a newly christened &Committee for the Assessment of Foreign Participation in the United States Telecommunications Services Sector& (CAFPUSTSS?), the Committee will be charged with assisting &the FCC in its public interest review of national security and law enforcement concerns that may be raised by foreign participation in the United States telecommunications services sector.&

Like its Team Telecom forerunner, the Committee will be made up of the heads of Justice, Defense and Homeland Security, with the attorney general playing the role of chair. Applications to the Committee will be referred to the U.S. governmenthighest-ranking intelligence officer, the Director of National Intelligence, for analysis.

Unlike in the past, where the timeline for reviews was anything but standardized, the executive order provides for a 120-day adjudication process, with a 90-day extension if the Committee has additional concerns and goes through a secondary review.

In a brief press statement, FCC Chairman Ajit Pai said, &I applaud the President for formalizing Team Telecom review and establishing a process that will allow the Executive Branch to provide its expert input to the FCC in a timely manner.& The FCC intends to finish its own rulemaking around Team Telecom, a process which was first proposed at the tail end of the Obama administration and has been on-going ever since.

These reforms to Team Telecom are in line with similar reforms made to CFIUS, the Committee for Foreign Investment in the United States, which were finalized at the beginning of this year after Congress passed a reform bill in 2018.

While the new rules will provide some certainty to areas of telecom like fiber optic cable expansion and wireless services, expect the new rules to be used to put even more restrictions on countries like China hoping to get a slice of the U.S. infrastructure market. Indeed, in the FCCstatement today, the agency said, &As we demonstrated last year in rejecting the China Mobile application, this FCC will not hesitate to act to protect our networks from foreign threats.&

A group of European privacy experts has proposed a decentralized system for Bluetooth-based COVID-19 contacts tracing which they argue offers greater protection against abuse and misuse of peopledata than apps which pull data into centralized pots.

The protocol — which they&re calling Decentralized Privacy-Preserving Proximity Tracing (DP-PPT) — has been designed by around 25 academics from at least seven research institutions across Europe, including the Swiss Federal Institute of Technology, ETH Zurich and KU Leuven in the Netherlands.

They&ve published a White Paper detailing their approach here.

The key element is that the design entails local processing of contacts tracing and risk on the userdevice, based on devices generating and sharing ephemeral Bluetooth identifiers (referred to as EphIDs in the paper).

A backend server is used to push data out to devices — i.e. when an infected person is diagnosed with COVID-19 a health authority would sanction the upload from the persondevice of a compact representation of EphIDs over the infectious period which would be sent to other devices so they could locally compute whether there is a risk and notify the user accordingly.

Under this design thereno requirement for pseudonymized IDs to be centralized, where the pooled data would pose a privacy risk. Which in turn should make it easier to persuade EU citizens to trust the system — and voluntarily download contacts tracing app using this protocol — given itarchitected to resist being repurposed for individual-level state surveillance.

The group does discuss some other potential threats — such as posed by tech savvy users who could eavesdrop on data exchanged locally, and decompile/recompile the app to modify elements — but the overarching contention is such risks are small and more manageable vs creating centralized pots of data that risk paving the way for ‘surveillance creep&, i.e. if states use a public health crisis as an opportunity to establish and retain citizen-level tracking infrastructure.

The DP-PPT has been designed with its own purpose-limited dismantling in mind, once the public health crisis is over.

&Our protocol is demonstrative of the fact that privacy-preserving approaches to proximity tracing are possible, and that countries or organisations do not need to accept methods that support risk and misuse,& writes professor Carmela Troncoso, of EPFL. &Where the law requires strict necessity and proportionality, and societal support is behind proximity tracing, this decentralized design provides an abuse-resistant way to carry it out.&

In recent weeks governments all over Europe have been leaning on data controllers to hand over user data for a variety of coronavirus tracking purposes. Apps are also being scrambled to market by the private sector — including symptom reporting apps that claim to help researchers fight the disease. While tech giants spy PR opportunities to repackage persistent tracking of Internet users for a claimed public healthcare cause, however vague the actual utility.

The next big coronavirus tech push looks likely to be contacts-tracing apps: Aka apps that use proximity-tracking Bluetooth technology to map contacts between infected individuals and others.

This is because without some form of contacts tracing therea risk that hard-won gains to reduce the rate of infections by curtailing peoplemovements will be reversed, i.e. once economic and social activity is opened up again. Although whether contacts tracing apps can be as effective at helping to contain COVID-19 as policymakers and technologists hope remains an open question.

Whatcrystal clear right now, though, is that without a thoughtfully designed protocol that bakes in privacy by design contacts-tracing apps present a real risk to privacy — and, where they exist, to hard-won human rights.

Torching rights in the name of combating COVID-19 is neither good nor necessary is the message from the group backing the DP-PPT protocol.

&One of the major concerns around centralisation is that the system can be expanded, that states can reconstruct a social graph of who-has-been-close-to-who, and may then expand profiling and other provisions on that basis. The data can be co-opted and used by law enforcement and intelligence for non-public health purposes,& explains University College LondonDr Michael Veale, another backer of the decentralized design.

&While some countries may be able to put in place effective legal safeguards against this, by setting up a centralised protocol in Europe, neighbouring countries become forced to interoperate with it, and use centralised rather than decentralised systems too. The inverse is true: A decentralised system puts hard technical limits on surveillance abuses from COVID-19 bluetooth tracking across the world, by ensuring other countries use privacy-protective approaches.&

&It is also simply not necessary,& he adds of centralizing proximity data. &Data protection by design obliges the minimisation of data to that which is necessary for the purpose. Collecting and centralising data is simply not technically necessary for Bluetooth contact tracing.&

Last week we reported on another EU effort — by a different coalition of technologists and scientists, led by by GermanyFraunhofer Heinrich Hertz Institute for telecoms (HHI) — which has said itworking on a &privacy preserving& standard for Covid-19 contacts tracing which they&ve dubbed: Pan-European Privacy-Preserving Proximity Tracing (PEPP-PT).

At the time it wasn&t clear whether or not the approach was locked to a centralized model of handling the pseudoanonymized IDs. Speaking to TechCrunch today, Hans-Christian Boos, one of the PEPP-PT projectco-initiators, confirmed the standardization effort will support both centralized and decentralized approaches to handling contacts tracing.

The effort had faced criticizm from some in the EU privacy community for appearing to favor a centralized rather than decentralized approach — thereby, its critics contend, undermining the core claim to preserve user privacy. But, per Boos, it will in fact support both approaches — in a bid to maximize uptake around the world.

He also said it will be interoperable regardless of whether data is centralized or decentralized. (In the centralized scenario, he said the hope is that the not-for-profit thatbeing set up to oversee PEPP-PT will be able to manage the centralized servers itself, pending proper financing — a step intended to further shrink the risk of data centralization in regions that lacks a human rights frameworks, for example.)

&We will have both options — centralized and decentralized,& Boos told TechCrunch. &We will offer both solutions, depending on who wants to use what, and we&ll make them operable. But I&m telling you that both solutions have their merits. I know that in the crypto community there is a lot of people who want decentraliztion — and I can tell you that in the health community therea lot of people who hate decentralization because they&re afraid that too many people have information about infected people.&

&In a decentralized system you have the simple problem that you would broadcast the anonymous IDs of infected people to everybody — so some countries& health legislation will absolutely forbid that. Even though you have a cryptographic method, you&re broadcasting the IDs to all over the place — thatthe only way your local phone can find out have I been in contact or no,& Boos went on.

&Thatthe drawback of a decentralized solution. Other than that ita very good thing. On a centralized solution you have the drawback that there is a single operator, whom you can choose to trust or not to trust — has access to anonymized IDs, just the same as if they were broadcast. So the question is you can have one party with access to anonymized IDs or do you have everybody with access to anonymized IDs because in the end you&re broadcasting them over the network [because] itspoofable.&

&If your assumption is that someone could hack the centralized service… then you have to also assume that someone could hack a router, which stuff goes through,& he added. &Same problem.

&Thatwhy we offer both solutions. We&re not religious. Both solutions offer good privacy. Your question is who would you trust more and who would you un-trust more? Would you trust more a lot of users that you broadcast something to or would you trust more someone who operates a server? Or would you trust more that someone can hack a router or that someone can hack the server? Both is possible, right. Both of these options are totally valid options — and ita religious discussion between crypto people… but we have to balance it between what crypto wants and what healthcare wants. And because we can&t make that decision we will end up offering both solutions.

&I think there has to be choice because if we are trying to build an international standard we should try and not be part of a religious war.&

Boos also said the project aims to conduct research into the respective protocols (centralized vs decentralized) to compare and conduct risk assessments based on access to the respective data.

&From a data protection point of view that data is completely anonymized because thereno attachment to location, thereno attachment to time, thereno attachment to phone number, MAC address, SIM number, any of those. The only thing you know there is a contact — a relevant contact between two anonymous IDs. Thatthe only thing you have,& he said. &The question that we gave the computer scientists and the hackers is if we give you this list — or if we give you this graph, what could you derive from it? In the graph they are just numbers connected to each other, the question is how can you derive anything from it? They are trying — letsee whatcoming out.&

&There are lots of people trying to be right about this discussion. Itnot about being right; itabout doing the right thing — and we will supply, from the initiative, whatever good options there are. And if each of them have drawbacks we will make those drawbacks public and we will try to get as much confirmation and research in on these as we can. And we will put this out so people can make their choices which type of the system they want in their geography,& he added.

&If it turns out that one is doable and one is completely not doable then we will drop one — but so far both look doable, in terms of ‘privacy preserving&, so we will offer both. If one turns out to be not doable because ithackable or you could derive meta-information at an unacceptable risk then we would drop it completely and stop offering the option.&

On the interoperability point Boos described it as &a challenge& which he said boils down to how the systems calculate their respective IDs — but he emphasized itbeing worked on and is an essential piece.

&Without that the whole thing doesn&t make sense,& he told us. &Ita challenge why the option isn&t out yet but we&re solving that challenge and it&ll definitely work… Theremultiple ideas how to make that work.&

&If every country does this by itself we won&t have open borders again,& he added. &And if in a country theremultiple applications that don&t share data then we won&t have a large enough set of people participating who can actually make infection tracing possible — and if therenot a single place where we can have discussions about whatthe right thing to do about privacy well then probably everybody will do something else and half of them will use phone numbers and location information.&

The PEPP-PT coalition has not yet published its protocol or any code. Which means external experts wanting to chip in with informed feedback on specific design choices related to the proposed standard haven&t been able to get their hands on the necessary data to carry out a review.

Boos said they intend to open source the code this week, under a Mozilla licence. He also said the project is willing to take on &any good suggestions& as contributions.

&Currently only beta members have access to it because those have committed to us that they will update to the newest version,& he said. &We want to make sure that when we publish the first release of code it should have gone through data privacy validation and security validation — so we are as sure as we can be that thereno major change that someone on an open source system might skip.&

The lack of transparency around the protocol had caused concern among privacy experts — and led to calls for developers to withhold support pending more detail. And even to speculation that European governments may be intervening to push the effort towards a centralized model — and away from core EU principles of data protection by design and default.

As it stands, the EUlong-standing data protection law bakes in principles such as data minimization. Transparency is another core requirement. And just last week the bloclead privacy regulator, the EDPS, told us itmonitoring developments around COVID-19 contacts tracing apps.

&The EDPS supports the development of technology and digital applications for the fight against the coronavirus pandemic and is monitoring these developments closely in cooperation with other national Data Protection Supervisory Authorities. It is firmly of the view that the GDPR is not an obstacle for the processing of personal data which is considered necessary by the Health Authorities to fight the pandemic,& a spokesman told us.

&All technology developers currently working on effective measures in the fight against the coronavirus pandemic should ensure data protection from the start, e.g. by applying apply data protection by design principles. The EDPS and the data protection community stand ready to assist technology developers in this collective endeavour. Guidance from data protection authorities is available here: EDPB Guidelines 4/2019 on Article 25 Data Protection by Design and by Default; and EDPS Preliminary Opinion on Privacy by Design.&

We also understand the European Commission is paying attention to the sudden crop of coronavirus apps and tools — with effectiveness and compliance with European data standards on its radar.

However, at the same time, the Commission has been pushing a big data agenda as part of a reboot of the blocindustrial strategy that puts digitization, data and AI at the core. And just today Euroactiv reported on leaked documents from the EU Council which say EU Member States and the Commission should &thoroughly analyse the experiences gained from the COVID-19 pandemic& in order to inform future policies across the entire spectrum of the digital domain.

So even in the EU there is a high level appetite for data that risks intersecting with the coronavirus crisis to drive developments in a direction that might undermine individual privacy rights. Hence the fierce push back from certain pro-privacy quarters for contacts tracing to be decentralized — to guard against any state data grabs.

For his part Boos argues that what counts as best practice ‘data minimization& boils down to a point of view on who you trust more. &You could make an argument [for] both [deccentralized and centralized approaches] that they&re data minimizing — just because theredata minimization at one point doesn&t mean you have data minimization overall in a decentralized system,& he suggests.

&Ita question who do you trust? Itwho would you trust more — thatthe real question. I see the critical point of data as not the list of anonymized contacts — the critical data is the confirmed infected.

&A lot of this is an old, religious discussion between centralization and decentralization,& he added. &Generally IT oscillates between those tools; total distribution, total centralization… Because none of those is a perfect solution. But here in this case I think both offer valid security options, and then they have both different implications on what you&re willing to do or not willing to do with medical data. And then you&ve got to make a decision.

&What we have to do is we&ve got to make sure that the options are available. And we&ve got to make sure theresound research, not just conjecture, in heavyweight discussions: How does what work, how do they compare, and what are the risks?&

In terms of whoinvolved in PEPP-PT discussions, beyond direct project participants, Boos said governments and health ministries are involved for the practical reason that they &have to include this in their health processes&. &A lot of countries now create their official tracing apps and of course those should be connected to the PEPP-PT,& he said.

&We also talk to the people in the health systems — whatever is the health system in the respective countries — because this needs to in the end interface with the health system, it needs to interface with testing… it should interface with infectious disease laws so people could get in touch with the local CDCs without revealing their privacy to us or their contact information to us, so thatthe conversation we&re also having.&

Developers with early (beta) access are kicking the tyres of the system already. Asked when the first apps making use of PEPP-PT technologies might be in general circulation Boos suggested it could be as soon as a couple of weeks.

&Most of them just have to put this into their tracing layer and we&ve already given them enough information so that they know how they can connect this to their health processes. I don&t think this will take long,& he said, noting the project is also providing a tracing reference app to help countries that haven&t got developer resource on tap.

&For user engagement you&ll have to do more than just tracing — you&ll have to include, for example, the information from the CDC… but we will offer the skeletal implementation of an app to make starting this as a project [easier],& he said.

&If all the people that have emailed us since last week put it in their apps [we&ll get widespread uptake],& Boos added. &Letsay 50% do I think we get a very good start. I would say that the influx from countries and I would say companies especially who want their workforce back — therea high pressure especially to go on a system that allows international exchange and interoperability.&

On the wider point of whether contacts tracing apps is a useful tool to help control the spread of this novel coronavirus — which has shown itself to be highly infectious, more so than flu, for example — Boos said: &I don&t think theremuch argument that isolating infection is important, the problem with this disease is therezero symptoms while you&re already contagious. Which means that you can&t just go and measure the temperature of people and be fine. You actually need that look into the past. And I don&t think that can be done accurately without digital help.

&So if the theory that you need to isolate infection chains is true at all, which many diseases have shown that it is — but each disease is different, so thereno 100% guarantee, but all the data speaks for it — then that is definitely something that we need to do… The argument [boils down to] if we have so many infected as we currently have, does this make sense — do we not end up very quickly, because the world is so interconnected, with the same type of lockdown mechanism?

&This is why it only makes sense to come out with an app like this when you have broken these R0 values [i.e how many other people one infected person can infect] — once you&ve got it under 1 and got the number of cases in your country down to a good level. And I think that in the language of an infectious disease person this means going back to the approach of containing the disease, rather than mitigating the disease — what we&re doing now.&

&The approach of contact chain evaluation allows you to put better priorities on testing — but currently people don&t have the real priority question, they have a resource question on testing,& he added. &Testing and tracing are independent of each other. You need both; because if you&re tracing contacts and you can&t get tested whatthat good for? So yes you definitely [also] need the testing infrastructure for sure.&

The COVID-19 outbreak has closed schools across most of the U.S., impacting more than 55 million students who are now learning at home. Thatcreated an increased demand for homeschool resources. Today, National Geographic is responding to that need with the launch of a new online hub, NatGeo@Home, which pulls together all of National Geographicfamily-friendly educational content into a one-stop shop for parents and teachers alike.

The free digital resource combines the educational content from the National Geographic Society with those from National Geographic Kids and other tools and services. This includes access to the National Geographic SocietyLearn at Home portal, where you&ll find educational content like articles, lessons, videos, other online activities and more.

The content on the site, aimed at K-12 students, is organized by grade and tagged as either &read,& &watch& or &play,& depending on whether itan article, video or activity. There are also lesson plans available, which parents and teachers can favorite to save to their library, if signed in.

The new site is also home to the Explorer Classroom, which offers live video talks from conservationists, scientists, filmmakers, explorers and other experts, that will air weekdays at 2 PM EDT. The talks will cover topics like wildlife, ocean conversation, photography, space exploration and more.

In addition to the educational resources, the portal offers families advice and information about how to navigate online learning and talking to kids about COVID-19. Some of its recent stories include a how-to on working from home with kids and a Coronavirus 101 explainer for parents who need help in better understanding the complicated health crisis themselves so they can answer questions from their children.

The portal will also be featured as part of #DisneyMagicMoments, Disneynew family website that pulls together stories, videos and activities from across Disneyproperties, including Disney, Pixar, Star Wars, Marvel and National Geographic.

&Juggling your work life and your kidschool life is hard enough. When those two worlds collide, as they have for so many families, it adds so many layers of challenges,& said Rachel Buchholz, editor in chief and vice president of National Geographic Kids, in a statement about the launch. &Thatwhy our goal here is to keep kids of all ages educated, entertained, and inspired, helping them become global stewards of the future,& she added.

Disney is not the only organization to have launched a set of homeschool resources in recent days. Childrenmedia nonprofit Common Sense just last week debuted Wide Open School, a comprehensive collection of resources for parents and teachers that included age-appropriate educational activities as well as daily schedules. National Geographic was one of the partners in that effort.

Apple, a Wide Open School partner, also launched the Apple Education Learning Series, a collection of videos designed to help schools and educators make the most of remote learning using Apple devices. And Comcast made nearly 2,000 hours of educational programming available to Xfinity subscribers, also in partnership with Common Sense.

In NatGeocase, its educational content was already being used by a number of educators across the U.S. to supplement classroom learning before the COVID-19 outbreak, so it makes sense for the organization to step up to fill the gaps in homeschool curricula, as well.

NatGeo@Home is currently available for free, though that could change at some point in the future when schools re-open.

The iPhone 9 has been reportedly seen on a Verizon website, adding more fuel to the rumor mill that the affordable Apple handset’s release date is coming soon.

The ‘iPhone 9’ was mentioned amid a list of phones Verizon accepts for trade-in value, appearing alongside leading flagships like the iPhone 11 series, Samsung Galaxy S10 series, Galaxy Note

Whatit like to take a company with 3,000 employees distributed across 25 offices and make it fully remote with just a few weeks& notice?

I hopped on a call with Twilio CEO Jeff Lawson to hear about how their transition has gone so far, and what helearned from the process.

Twilio CEO Jeff Lawson

Remote work isn&t brand-new for Twilio; as with a lot of software companies, many employees have worked remotely. But itstill a massive shift: Prior to the coronavirus outbreak, Lawson says around 10% of the company worked remotely. Today, iteveryone.

&For a company like us to go from partially virtual to fully virtual in a short period of time,& he says, &itnot without its hiccups, but it has worked pretty well.&

Things are weird for everyoneright now, so compassion is key

Shifting to remote work might make things feel different for a while — but those differences pale in comparison to the other changes people are coping with in the shadow of the COVID-19 pandemic.

&I think the fact that you are distributed is lesser than the fact that you&re like, not allowed to go outside,& says Lawson. &You&re worried about friends and family and you&re reading the news… those things are more impactful.&

It’s a lonely world we’re currently living in, but while you might not be able to see most (or any) of your friends and family face to face, with video calls you can do the next best thing.

The good news is there’s no shortage of video calling apps to choose from. The bad news is there are so many video calling apps to choose from that you might s