📅 Original date posted:2014-05-19
📝 Original message:>> 2014-05-18 13:14 GMT+01:00 Andreas Schildbach <andreas at schildbach.de>:
>> One problem we couldn't figure out here though - how to protect the
>> notes from unauthorized redeem. Like if someone else tries to reach your
>> wallet with his own NFC - how can we distinguish between deliberate
>> redeem by owner and fraudulent redeem by anybody else with custom built
>> long range NFC antenna? Any ideas?
>>
>> I think you'd need multiple factors to protect against that attack. Like
>> encrypting with a key that is printed on the note as an QR code.
>
>On Sun, May 18, 2014 at 7:51 AM, Alex Kotenko <alexykot at gmail.com> wrote:
>
> Yes, but it must not sacrifice usability. It's paper money, people are used to it and they have rather high standard of expectations in this area. Any usbility sacrifices in this area result into failure of the whole thing.
>
> Best regards,
> Alex Kotenko
One thought I had reading through this exchange: I think the general
public is becoming more aware of the "hacker with a long range
antenna" sort of attack, since credit cards are getting microchips
that can be scanned. There's a few videos I've seen of white hat
hackers demonstrating how a suitcase-sized apparatus carried by
someone walking down the street can scan and make charges on cards in
people's pockets as the attacker brushes past. Hence RFID-blocking
sleeves/wallets are on the market, such that your smart credit card
can't make a purchase while its in your wallet. Is a RFID-blocking
wallet also NFC-blocking? Irregardless of whatever "future cash" you
choose to carry (be it credit card or bitcoin card/coin/cash), perhaps
its the wallet/purse that needs an upgrade, to ensure your money
doesn't spend itself while its in your pocket, but you can easily
remove it and spend it conveniently?
Brooks
Brooks Boyd [ARCHIVE] /
npub12h…vtmxa
2023-06-07 15:21:34
in reply to nevent1q…l8wy
Author Public Key
npub12hzwfhx9ptjf2f0va8qllc0h4tcvz5aaefvlvn9uq8z2ssrq027qtvtmxaPublished at
2023-06-07 15:21:34Event JSON
{
"id": "10dfc7b6322fcfc27051c4c6850286f6a282852fb39ef3f96df46633b3ac64a6",
"pubkey": "55c4e4dcc50ae49525ece9c1ffe1f7aaf0c153bdca59f64cbc01c4a840607abc",
"created_at": 1686151294,
"kind": 1,
"tags": [
[
"e",
"d30b28e456bef274130eabcfd37469931101e35cbb7eae21abca740750812e9b",
"",
"root"
],
[
"e",
"b8dab4acdf3dea504a2efb0e0e839812c530d6ce8d590152d3cca04812661cd8",
"",
"reply"
],
[
"p",
"ac99e5ca3122fca258fbfcb6cb62d10d4dba423b3243251cbc0c4e0042656dec"
]
],
"content": "📅 Original date posted:2014-05-19\n📝 Original message:\u003e\u003e 2014-05-18 13:14 GMT+01:00 Andreas Schildbach \u003candreas at schildbach.de\u003e:\n\u003e\u003e One problem we couldn't figure out here though - how to protect the\n\u003e\u003e notes from unauthorized redeem. Like if someone else tries to reach your\n\u003e\u003e wallet with his own NFC - how can we distinguish between deliberate\n\u003e\u003e redeem by owner and fraudulent redeem by anybody else with custom built\n\u003e\u003e long range NFC antenna? Any ideas?\n\u003e\u003e\n\u003e\u003e I think you'd need multiple factors to protect against that attack. Like\n\u003e\u003e encrypting with a key that is printed on the note as an QR code.\n\u003e\n\u003eOn Sun, May 18, 2014 at 7:51 AM, Alex Kotenko \u003calexykot at gmail.com\u003e wrote:\n\u003e\n\u003e Yes, but it must not sacrifice usability. It's paper money, people are used to it and they have rather high standard of expectations in this area. Any usbility sacrifices in this area result into failure of the whole thing.\n\u003e\n\u003e Best regards,\n\u003e Alex Kotenko\n\nOne thought I had reading through this exchange: I think the general\npublic is becoming more aware of the \"hacker with a long range\nantenna\" sort of attack, since credit cards are getting microchips\nthat can be scanned. There's a few videos I've seen of white hat\nhackers demonstrating how a suitcase-sized apparatus carried by\nsomeone walking down the street can scan and make charges on cards in\npeople's pockets as the attacker brushes past. Hence RFID-blocking\nsleeves/wallets are on the market, such that your smart credit card\ncan't make a purchase while its in your wallet. Is a RFID-blocking\nwallet also NFC-blocking? Irregardless of whatever \"future cash\" you\nchoose to carry (be it credit card or bitcoin card/coin/cash), perhaps\nits the wallet/purse that needs an upgrade, to ensure your money\ndoesn't spend itself while its in your pocket, but you can easily\nremove it and spend it conveniently?\n\nBrooks",
"sig": "764c8114bc32404d909064694898e5a91b401fd51a6204d3cef788ac917331b9599fa6d788b2fa63e8950ac469b2ddd1b16648a37a081f538b24bd35e5d4614c"
}