Had dinner with Aaron Roth, who is visiting from CMU, interviewing at Penn. Talked, predictably enough, about diff. privacy stuff. I am sort of comforted that (a) the problems we encountered telling a convincing story about its real-world applicability seem to be genuine hard problems for any privacy scheme to address and (b) he thought it would indeed be useful to have a programming language to track function sensitivity.