The Linux Foundation Wants Open-Source Tech to Address Future Pandemics

The Linux Foundation hopes open-source apps will play a key role in tracing exposure to diseases like COVID-19 while being fully transparent.

AccessTimeIconAug 12, 2020 at 10:00 a.m. UTC
Updated Sep 14, 2021 at 9:42 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

The Linux Foundation, which supports open-source innovation in blockchain tech, launched the Linux Foundation Public Health Initiative (LFPHI) at the end of July. The LFPHI’s goal is to promote the use of open source by public health authorities, which can be scrutinized by anyone, to fight not just COVID-19 but future pandemics as well. 

Among the seven core members of the LFPHI are Tencent, Cisco and IBM. The initiative is supporting two exposure notification projects, “COVID Shield” and “COVID Green,” with the aim of improving interoperability across initiatives in different jurisdictions. 

Based on the Google and Apple Bluetooth notification systems, those apps notify people when they’ve been in close contact with someone diagnosed with COVID-19. These open-source apps are built using the Apple and Google protocol for notifications, but the apps themselves are transparent and therefore more trustworthy than closed apps, where there is no insight into the code driving them.

Dan Kohn, general manager of the new initiative, sees open-source technology as necessary for a privacy-respecting exposure notification app, but not solely sufficient. 

“It is totally possible to create an app that's horrible for privacy that is open source,” said Kohn. “But what open source does is it stops you from just claiming that it respects privacy, because any expert could check on that.”

In other words, the system can be not only privacy-respecting, but provably-privacy respecting. 

Apple and Google rebranded their Bluetooth protocols as “exposure notification” after initially calling them “contact tracing.” The digital tools are meant to aid the process of human contact tracers, not replace them entirely. 

Since the pandemic hit, groups around the world have rushed to develop exposure notification apps, but in many instances concerns about privacy, effectiveness and a lack of trust have led to low levels of public adoption. Australia’s contact tracing app has seen minimal use and featured bugs that limited its effectiveness. Norway paused the use of its contact tracing app over privacy concerns by its own data protection authority. 

In the U.S., an uneven federal response to the pandemic has left states to fend for themselves, and public health authorities face cuts and a lack of funding. 

“The public health infrastructure in the U.S. has been radically under-invested in for the last 20 years,” said Kohn. “Now there’s understandably billions of dollars flowing into that space, and as a neutral open source organization, we hope to help monitor and shape some of those investments in ways that ensure they're interoperable,” or compatible.

Interoperability would mean that different state-level apps in the U.S. could communicate information and data with each other.

The two LFPHI exposure notification projects are open source and meant to help develop back-end operability between different apps. 

Another tool LFPHI is introducing and continually refining is a dashboard where contact tracing and exposure notification apps are tracked. The dashboard breaks down apps by whether they use Bluetooth or GPS location tracking (which is generally considered more privacy-invasive than Bluetooth), whether apps are open source and whether they’re provided by a public health authority, among a number of other categories. The tool is one of the few comprehensive databases working to track these apps in this way. 

The TCN Coalition, a global group of technologists that was working to support the development of cross-compatible privacy-preserving exposure notification apps, was absorbed by the LFPHI as part of its launch. 

Jenny Wanger, former executive director of the TCN Coalition and now head of LFPHI’s Implementers Forum, said, the U.S. needs to have more apps based on the Apple and Google protocol, given they’ll then be compatible with each other. And it needs better communication.

“One of the things that we don't know much about yet, because we haven't had the chance to experiment, is what is the messaging to really catch these as public health tools,” she said. “The same way that your seatbelt helps you, it’s a public health tool within a car. That’s how we need to be thinking about these apps on people’s phones.”

As the world grapples not just with the COVID-19 pandemic but potential future ones, initiatives like LFPHI offer one way to coordinate and build out responses to new pandemics that might arise. 

“The biggest challenges around exposure notification are not the technology,” said Wanger. “The cryptography is advanced, but it’s solvable. The servers are just going to be servers. The piece that's most important for this technology to really work out is going to be public adoption and public perception.”


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.