The deanonymization attacks depend on some aspect of the data being related to real-world events or products. The attack on the netflix data depended on the movies being identified so that ratings could be correlated to ratings on other systems.
If you blind product id's and user id's then none of the currently known attacks are likely to work. But I respect the limits you describe. Caution is never such a bad thing in these matters. On Tue, Nov 29, 2011 at 6:50 AM, Manuel Blechschmidt < [email protected]> wrote: > The problem is that there are quite reliable ways to deanonymize data in a > reliable way [1]. Further this is also used [2]. >
