This 2021 New Yorker article: How Your Family Tree Could Catch a Killer (https://www.newyorker.com/magazine/2021/11/22/how-your-famil...) was incredibly illuminating and changed my perspective on our sense of privacy. With a surprisingly small fraction of the world's population sequenced, we can still match a sample to a person whose sequence we don't have. To quote the article: "Genetic genealogy, it turned out, could function as an all-purpose de-anonymizer".
So perhaps be less upset that Mom signed up; our DNA really isn't ours in the same way the documents on our hard drive. You were never going to be able to opt-out.
> Before you submit your data for genetic testing please realize that you are giving away a portion of the ultimate family heirlooms, the genes that run in your family and that this decision could easily come back to bite others.
I wish my mom had read this. She would have understood the implications, and not done it.
It's very annoying how these companies sucker people in to do things they might come to regret later, there is absolutely zero transparency here. Besides the potential for massive privacy violation there is also always the specter of future uses against your interests.
>there is also always the specter of future uses against your interests.
This. The danger isn't even necessarily that we gain some crazy ability to predict things about a person from their DNA, but that people believe that it can be done accurately and that police, courts, government, marketers, etc believe it as well.
Police don't need much convincing if it gets them a conviction. Courts will already admit evidence from forensic labs which have been proven to fabricate evidence. Governments will let just about anything fly if someone donates enough, and if marketers are convinced that it might work, there will be no shortage of cash for campaign funds.
Currently, to my knowledge, you can take somebody's DNA and do just about anything with it without their knowledge or consent, and there seem to be a lot of well-monied interests with a stake in keeping things that way.
> Which undoubtedly well meaning civil servant long before World War II came up with the brilliant idea of registering religious affiliation during the census is lost in the mists of time.
I guess this happened because The Netherlands used to be a very religious nation?
I mean, in 1901 they got Abraham Kuyper[0] as a prime minister. Abraham Kuyper was a Christian minister, and is well-known among Reformed Christian circles as a very impactful theologian.
It is very understandable that a nation like that would want to list religion as part of their census data.
They used to be so religious that it incited a revolt in the southern parts of the country that were of a different religious branch. That's how Belgium came to be, with the only unifying trait for the new country being their shared religion, Catholics, regardless of the many other differences (French-speaking Walloons with many merchants and tradespeople, and Dutch-speaking Flemish that were mostly farmers, and mostly oppressed by the French-speaking ruling classes).
And now a nation state hacker can use the same database to identify U.S. citizen descendants (to what generation?). Good luck with "illegals" style espionage
This feels like a "think of the children" type of appeal.
I personally don't have any murderous history to hide. But there are unintended consequences with all of these losses of privacy. As a peer comment has rightly pointed out, nation state adversaries now have these same profiles.
Maybe they can find a common DNA profile for an efficient bio-weapon. Oops.
I escaped an authoritarian regime as a child, thanks to the same mother. I hold no ill will towards her, but I am deeply aware of the issues that bad actors can create with by compiling huge databases of otherwise unnecessary information.
> I personally don't have any murderous history to hide
I've been meaning to ask, could you please remove the curtains to your bedroom so I can see in? I know you're not doing anything wrong so you've got nothing to hide.
I think his point was that using this qualifier gives more credence to the "nothing to hide" folks. The more people get used to saying it in defense, the easier it becomes to use as an attack.
No, you are misreading the GP. What they mean is a bioweapon specifically tailored to match a particular DNA profile. Think Germany, 1939, or South Africa, 1985, but with this capability to see what the possibilities are and how utterly unstoppable that would be. And probably there are contemporary examples as well, but I don't feel like starting a flame-fest.
That only seems useful if said bioweapon can’t be determined by anyone else to have been DNA-based. Otherwise, why not just use a conventional bioweapon (lol) and target it more precisely? Using this hypothetical DNA targeting technology doesn’t seem like it’s solving a real problem.
I guess if you could target one person specifically? But then again there are way easier ways to kill people.
It could be specific to a family, or with this broad a DNA + meta data dataset, it could be enough data to wipe out much of an entire group. Choose the common traits in people who self-identified as a group. English, Jews, Slavs, Native South Americans, non-Han, etc.
The problem with bio-weapons has always been "blow back." Narrowing the scope of the weapon would help a lot with that.
Yes, exactly. And that DNA profile could be more or less specific as well to the point where you can commit genocide. Think 'final solution', not 'James Bond'.
There will be several Nobel Prizes in creating the technology to get this bioweapon.
You need something which reproduces itself even in non-targets, which enters the cell's nucleus, which detects the correct DNA - which may be scattered across the genome! -, which has a mechanism that kills the target people, and where none of this will mutate so as to stop effectiveness, change/broaden the target population, etc.
Furthermore, just because people identify as a group does not mean they have a distinct genetic pattern. How would you target "Christians" or "Americans" or "Hispanics"?
This appears to be a harder task than curing cancer, in that many of the same techniques could be used to target cancerous cells but that does not require the ability to spread from person to person.
A bioweapon doesn't appear in a vacuum. The required technological advances will be widely known. In this fantastical cancer-free world, why wouldn't your local health care center have the ability to sequence unexpected genomes and prepare a vaccine or phage in the same day?
> How would you target "Christians" or "Americans" or "Hispanics"?
You don’t need to have a 1:1 mapping in order to be effective. Incapacitating a sufficient number of a group is enough.
Similarly, such a bioweapon in an assassination context doesn’t need to only kill the target or go unnoticed. It’s enough that it is a disease or irritant that a particular individual is susceptible to.
Assuming you have a communicable bioweapon which is somehow able to target based on genetics, and assuming the rest of the world isn't able to defend against it, that still leaves the very tricky question of finding a genetic basis which characterizes any of those three categories in a way which is sufficiently effective.
Do you really believe there is way to identify "Christians" based on genetics?
"Incapacitating a sufficient number of a group" is NOT enough. You also need specificity.
What genetic markers indicate "American"? Sure, if you target something simple like "has a Y chromosome" you might take out about 50% of the US population, which is likely a sufficient number, but you'll do equal damage to your own population.
How would a bioweapon meaningfully target "Hispanics"? The term is definitely not based in genetics. If some villagers from a German town emigrated to Argentina and others from the same village emigrated to Canada, then according to the US the descendants of the first group are just as Hispanic as Black Spanish-speaking Cubans, while the descendants of the second group are "white".
But, okay, you've figured something out. Now how do you prevent your bioweapon from mutating the specificity away? You've added a lot of machinery to the organism which must be preserved perfectly even though that machinery isn't required in order to reproduce.
The more failsafes you put in, the bulkier the organism and/or the fewer genetic markers you can target.
Clearly you should be promoting DEI as a way to increase group robustness against future bioweapons. ;)
I'm really curious what, and how, these commenters think a genetic bioweapon would target. Cell-surface receptors seem the easy target, but as we've seen with COVID, and the more general swine and avian flus passing to humans, specificity changes. And cell surface receptors aren't that specific for any ethnicity, so expect a nuclear response from the survivors (both from your target and from the others states who had affected citizens).
If targeting proteins or regulatory regions of DNA, how? Are you going to try to CRISPR it? This may be effective in quiescent or senescent cells. But I think even quiescent cells have some DNA repair pathways. At best such targeting may speed up the aging process and cause some cancers.
Are you going to integrate a toxic gene at a specific chromosomal locus? Maybe that would work. You'd need a very efficient gene therapy approach to do it though.
That's ok, I get it: I have the exact same thing when I'm too focused on a problem. And then a week later or so it's like a light bulb going off and I feel very silly for having missed the obvious. But let's not give people ideas here, this is pretty dangerous territory and I don't think HN should turn into a cookbook for miscreants.
Just because you think you can create a bioweapon doesn't mean it causes trouble.
And as I wrote, this sort of bioweapon won't be possible until we've effectively cured cancer, and likely also developed methods which can easily identify and stop it.
A secret skunkworks approach could facilitate genetic inventions that don't get passed into the general knowledge base. It would be difficult making discoveries that all of the other biologists working in society miss, but is remotely plausible.
Again, the technology would be able to cure cancer. Do you really think all those employees - who know that their friends and family could be cured of their cancer - would be willing to keep mum of the cure?
It depends on how isolated they are kept from each other's work. It's not as if we don't already have decent cancer therapeutic technologies in the pipeline.
We do not have broad-spectrum anti-cancer therapeutics, much less ones which are based on self-reproducing communicable organisms that target the cancer's DNA.
Therapeutics which prompt the endogenous immune system to recognize the cancer cells as something to attack. I believe this is the basis of mRNA cancer therapeutics? I believe they are targeted for individual cancers and possibly individual people, but given the speed in which they can be made this doesn't seem like a major future hurdle.
Throw one into a gene therapy vector and it could conceivably reproduce itself (though that seems like a bad idea for a cancer therapeutic anyway).
"I believe" and "conceivably" do not make good evidence that something is in the pipeline.
mRNA cancer therapeutics do not target nuclear DNA. They do not enter the nucleus and they produce proteins to trigger an immune response against the targeted disease, not against the DNA of the targeted disease.
You're misinterpreting my initial objection. Skunkworkers would care less about the personal ramifications of keeping technology which could be used to cure cancer secret if there are already viable full-cure treatments for all of the cancers they or their family members may plausibly come down with.
Again, technology isn't in a vacuum. You really can't predict what medicine will be like in 100 years.
If there are already viable full-cure treatments for all those cancers then why aren't there viable full-cure treatments for this sort of bioweapon?
Feeling ill? Sequence all the organisms in your blood, spot the unexpected ones, develop a vaccine/phage against it, and poof - all better.
Sure, you can construct movie plot scenarios to do anything. In a movie, our hero can use a lighter to ignite the leaking fuel trail from a jet plane taking off and cause it to blow Up. That doesn't mean it's likely or even feasible.
> If there are already viable full-cure treatments for all those cancers then why aren't there viable full-cure treatments for this sort of bioweapon?
Plenty of possibilities. A cancer is ultimately a mutated genome in a viable cell gone awry. Even with contagious cancers (like the one killing the Tasmanian Devils) you're still ultimately dealing with an infectious eukaryotic cell of basically the same species type as the organism, and our mammalian immune systems are already used to targeting our own cells gone awry. Viruses, satellite viruses, prokaryotes, other eukaryotes, edited out, and whatever I'm forgetting will require a diversity of approaches (unless someone invents pico-scale teleportation).
> Again, the technology would be able to cure cancer.
That's your strawman. But I can - easily, at that - imagine a POC that would be specific enough to kill a single human with a very high degree of success given some meta data about them and a sample of their DNA. I'm for obvious reasons not going to expand on that here because we have too many idiots in this world but the fact that you can't imagine such things doesn't mean that others can not.
So what? Movie plot scenarios do not need to reflect reality.
I can easily imagine hopping on the next Pan Am rocket service to Luna City.
I can easily imagine using a space laser to kill that same human.
I can easily imagine taking a bridge from Key West to Cuba.
I can easily imagine taking a pill to regrow an amputated leg.
Just because you can easily imagine a POC doesn't mean it's doable in our lifetimes.
What are you going to target in the DNA? Is it a single short sequence or multiple markers across the genome? How does the bioweapon sequence that DNA to find it? How does that then trigger the appropriate biological response? How do you prevent mutations? What infectious organism will you use? How do you know the target isn't already immune to that infection?
Even if you expand on one or two of these in convincing detail (congrats on your future Nobel Prize, by the way), that's still not enough for the idiots in the world to make a usable weapon.
> How would you target "Christians" or "Americans" or "Hispanics"?
You don't have to be able to target any group to be able to target some groups. Blacks, Jews and Uighurs might be sufficient. And those definitely have genetic markers.
"Blacks" is a term with very little basis in genetics. What do you think the bioweapon will target?
"Jews" is less diverse, but it's not like there's a single "I am Jewish" marker. Just look at https://en.wikipedia.org/wiki/Genetic_studies_on_Jews to see how difficult is it, with overlaps to other populations, and the need to correlate multiple haplogroups. How do you put all that detection machinery into a bioweapon?
https://en.wikipedia.org/wiki/Uyghurs suggest there are similar issues with Uyghurs - what will the bioweapon target if "the average genetic ancestry of Uyghurs is 63.7% East Asian-related and 36.3% European-related"?
And how do you prevent the bioweapon from mutating that specificity away?
Yes, such a weapon will never be very precise. But since no weapon ever is (collateral damage) that doesn't mean it won't be used.
> And how do you prevent the bioweapon from mutating that specificity away?
You don't. But even that won't stop such a weapon from being used. Every weapon that man kind has been able to envision and create has been used. Not a single exception.
You have presumed that this sort of DNA-targeting bioweapon could exist. We have lots of pie-in-the-sky weapon ideas that haven't been developed, like the Supersonic Low Altitude Missile. Why are you so sure that this bioweapon isn't yet another one of those?
Setting that aside, the hydrogen bomb has not been used as a weapon, only a deterrent.
Same for the neutron bomb (an "enhanced radiation weapon").
And nuclear depth bombs ("All nuclear anti-submarine weapons were withdrawn from service by China, France, Russia, the United Kingdom and the United States in or around 1990.[citation needed] They were replaced by conventional weapons such as the Mk 54 Torpedo that provided ever-increasing accuracy and range as anti-submarine warfare technology improved." says https://en.wikipedia.org/wiki/Nuclear_depth_bomb ).
"The United States Army Biological Warfare Laboratories weaponized anthrax, tularemia, brucellosis, Q-fever and others.[51] ... In 1969, US President Richard Nixon decided to unilaterally terminate the offensive biological weapons program of the US, allowing only scientific research for defensive measures." says https://en.wikipedia.org/wiki/Biological_warfare .
Have all those weaponized organism really been used as a weapon? Not to my knowledge.
> Maybe they can find a common DNA profile for an efficient bio-weapon
For this it doesn't matter whether a "nation state" is making the weapon. An empire state, sub-nation state, or non-state entity would be fine. What matters for a common DNA profile weapon is that said entity targets a mostly ethnic state, or non-state nation such as the Kurds, preferably with an ethnicity genetically distinct enough from one's own people, and that said ethnicity is genetically specific enough, in exactly the right ways, to target. As eesmith writes, good luck with that.
Doesn’t that imply that we should object to all dna databases? If a database can be used to identify people not in the database, does the scale of the database matter? The consequence would be that law enforcement can no longer compile databases of dna materials (a curtailment which I wouldn’t mind, but many people see these databases as essential for modern law enforcement).
23andMe claims that no DNA information was revealed, and I'm having trouble finding a primary source that claims that the SNP info was taken. From a more detailed article:
> ... which exposed sensitive personal information that included things relevant to ancestry trees, birthdays and general geographic locations. In some cases, the company said that the hack could have exposed the pictures and display names of affiliated family members also using the company’s services through the accounts that were primarily breached. 23andMe insists that no actual genetic material or DNA records were exposed
> ... A 23andMe spokesperson told Engadget that hackers accessed the DNAR profiles of roughly 5.5 million customers this way, plus Family Tree profile information from 1.4 million DNA Relative participants.
>DNAR Profiles contain sensitive details including self-reported information like display names and locations, as well as shared DNA percentages for DNA Relatives matches, family names, predicted relationships and ancestry reports. Family Tree profiles contain display names and relationship labels, plus other information that a user may choose to add, including birth year and location. When the breach was first revealed in October, the company said its investigation “found that no genetic testing results have been leaked.”
Presumably the journalist at Stackdiary translated "DNAR profile" into "genetic profile," which is a term with no standard definition, but if it had one, I would have guessed it would mean at least some DNA info.
23andMe could be lying or ignorant of what happened, but that would also mean that there would also be another news cycle when further disclosure was mandated.
The worst is the classic social media tactic of using user-submitted data to attract others.
Imagine there came a responsible DNA service tomorrow, which used differential cryptography or something, so that you could share DNA and look for relatives with some semblance of privacy.
They wouldn't get off the ground, because your relatives? They're on this service, or Ancestry or MyHeritage or FamilyTreeDNA, which are every inch as sleazy, US or Israeli megacorporations which you can trust as far as you can throw them (which isn't an inch).
To make you feel better, it doesn't have to be your mother to identify you. If a cousin were to have done it, you would still be easily identifiable. Basically anyone in your blood line using any of the services would make you easily identifiable.
I fully agree with everything you say, but until legislation is enforced you can hardly blame a company for capitalizing on the lack of privacy laws (you can still hate them).
Point is, start demanding legislation around data privacy and security to anyone who will listen.
I feel like I can blame the humans involved with 23andMe specifically, as they are the specific humans who allowed unknown 3rd parties to have enough of my DNA to profile my family and myself.
However, I entirely agree with your last statement. I would like to call upon anyone who appreciates privacy to get behind a neural bill of rights. While it sounds a bit "tin foil hat" at the moment, non-invasive brain–computer interfaces are coming very soon. Especially using infrared techniques.
Today, TSA scans your face, soon enough it will be your brain. This is not a joke.
If the USA misses the boat on regulating neural interfaces, we will sail through the final frontier of personal privacy, and even agency.
I highly recommend that everyone listens to, or reads the transcript of Sean Carroll's podcast with Nina Farahany on the topic. It is dense with legal and technical information.
"Nita Farahany on Ethics, Law, and Neurotechnology"
By “unknown third parties” do you mean the hackers? The breach was bad but not that bad — it didn’t include your genetic material.
> The stolen data included the person’s name, birth year, relationship labels, the percentage of DNA shared with relatives, ancestry reports and self-reported location.
I meant 23andMe partners, and yes, also the hack, and future hacks.
This DB is a goldmine and I take an extremely pessimistic view on infosec.
Information wants to be "free" after all. Look at the KSA agents who were implanted at Twitter as an example. I would have to assume that nation state actors would also implant employees at 23andMe.
The publicized hack is the one we, and 23andMe, know about. It's just too juicy a target to keep safely guarded in perpetuity.
Simply by compiling this information, you are more or less guaranteeing it falling into the wrong hands eventually. This is an example of information which never should have been compiled.
There's no law against being a dirtbag but I am definitely still going to blame you for being a dirtbag. You could always choose... not to be a dirtbag.
I would rephrase your point, "don't be surprised when a company capitalizes on lack of laws" -- this I agree with. It's virtually a force of nature.
Meaning that she was over 70, and just wanted to learn some ambiguously defined information about her family history. There were some unknowns as far as where her great-grandparents came from. Maybe "naively" would be a better term.
We are all law abiding citizens, what do we have to hide, right?
Well, she did not read the T&C as far as how this information would be shared, and did not consider the implications of how she was making a choice for the people who she named on the family form, and did not consider the inevitable infosec implications which we are now all enjoying.
The results she received were entirely unenlightening, 50% of my DNA is now in their sketchy database, and I have no way to opt-out of anything.
I truly despise this organization.