Privacy Loss in Apple's Implementation of Differential Privacy on MacOS 10.12
Calibrating Noise to Sensitivity in Private Data Analysis