We consider problems where n people are communicating and a random subset of them is trying to leak information, without making it clear who are leaking the information. We introduce a measure of suspicion, and show that the amount of leaked information will always be bounded by the expected increase in suspicion, and that this bound is tight. We ask the question: Suppose a large number of people have some information they want to leak, but they want to ensure that after the communication, an observer will assign probability ≤ c to the events that each of them is trying to leak the information. How much information can they reliably leak, per person who is leaking? We show that the answer is− log(e) bits.
IntroductionThe year is 2084 and the world is controlled by a supercomputer called Eve. It makes the laws, carries them out, has surveillance cameras everywhere, can hear everything you say, and can break any kind of cryptography. It was designed to make a world that maximises the total amount of happiness, while still being fair. However, Eve started to make some unfortunate decisions. For example, it thought that to maximise the utility it has been designed to maximise, it must ensure that it survives, so it decided to execute everyone it knew beyond reasonable doubt was trying to plot against Eve (it was designed so it could not punish anyone as long as there is reasonable doubt, and reasonable doubt had been defined to be a 5% chance of being innocent). Everyone agrees that Eve should be shut down. The only person who can shut down Eve is Frank who is sitting in a special control room. Eve cannot hurt him, he has access to everything Eve can see, but he needs a password to shut down Eve. A small number of people, say 100 Londoners, know the password. Eve or Frank have no clue who they are, only that they exist. If one of them simply says the password, Eve will execute the person. So how can they reveal the password, without any of them getting killed? Suppose it is known that the password is the name of a museum in London. Frank then announces a date and time, and if you have the password, you show up at the correct museum that day and time, and if you do not have the information, you do as you would otherwise have done. If the museum is not too big, Frank will notice that there is one museum with more visitors than usual, so he gets the password. At the same time, if the museum is not too small, a large fraction of the visitors will just be there by chance, so Eve cannot punish any of them.1 If the password is not necessarily the name of a museum, Frank can simply define a one-to-one correspondence between possible passwords and museums (or, if there are many possible passwords, take one letter at a time, with different people leaking each letter). We do not actually need museums to use this idea, the important part is that many people sends some messages, that will follow a fixed distribution if they do not think about it, and that if they want to, they can choose a specific message. For example, ...