3 ms·

Oh no, a thousand marketers just had the idea of automatically airdropping advertisements to passers-by. You could even structure it as a lottery-esque type of

Oh no, a thousand marketers just had the idea of automatically airdropping advertisements to passers-by. You could even structure it as a lottery-esque type of thing, only giving out good coupons or discounts to random individuals at random intervals, prompting people to loiter and wait for theirs.

bellyfullofbac 5y ago
Hah, make it give out cryptocoins, and take the idea of peasants waiting for royalty to make it rain money to the 21st century, where it all happens digitally/using a smartphone. Did kings and emperors even do that in the old times?
tinus_hn 5y ago
The default is to only accept transfers from people that are in your address book.
- fosefx 5y ago
  If I understood their paper[1] correctly you can just use a popular phone number that a person walking by is likely to have in their contacts, like an emergency line number. My mobile telco's SIM comes with a couple of contacts on it like their customer support line. I don't know anything about AirDrop, but I assume this will work. [1]: https://www.usenix.org/conference/usenixsecurity21/presentation/heinrich https://www.usenix.org/conference/usenixsecurity21/presentat...
  - lxgr 5y ago
    As far as I understand the protocol, you'd need a certificate signed by Apple in order to be able to masquerade as that contact in somebody's contact list, and Apple only signs these after phone number or email confirmation.
    - tinus_hn 5y ago
      > We support contacts-only devices by using extracted AirDrop credentials (keys and certificates) from macOS via our keychain extractor. This should make it clear that you can’t just claim any phone number or email address.
ascagnel_ 5y ago
You joke, but Apple rolled out some BT-based beacon stuff that allows stores to do some user tracking at short range -- and it can be used to pop local notifications. I don't think stores have gone down the "you're here and we're going to advertise to you" route (since that'd be creepy as hell), but its more grist for the mill.
- slj 5y ago
  When I walked into the local Apple store circa 2019 I was greeted with a “welcome to Apple” notification from the Apple store app. It’s the only example I’ve seen of iBeacons being used that I personally know of.

bellyfullofbac 5y ago

Hah, make it give out cryptocoins, and take the idea of peasants waiting for royalty to make it rain money to the 21st century, where it all happens digitally/using a smartphone. Did kings and emperors even do that in the old times?

tinus_hn 5y ago

The default is to only accept transfers from people that are in your address book.

fosefx 5y ago
If I understood their paper[1] correctly you can just use a popular phone number that a person walking by is likely to have in their contacts, like an emergency line number. My mobile telco's SIM comes with a couple of contacts on it like their customer support line. I don't know anything about AirDrop, but I assume this will work. [1]: https://www.usenix.org/conference/usenixsecurity21/presentation/heinrich https://www.usenix.org/conference/usenixsecurity21/presentat...
- lxgr 5y ago
  As far as I understand the protocol, you'd need a certificate signed by Apple in order to be able to masquerade as that contact in somebody's contact list, and Apple only signs these after phone number or email confirmation.
  - tinus_hn 5y ago
    > We support contacts-only devices by using extracted AirDrop credentials (keys and certificates) from macOS via our keychain extractor. This should make it clear that you can’t just claim any phone number or email address.

ascagnel_ 5y ago

You joke, but Apple rolled out some BT-based beacon stuff that allows stores to do some user tracking at short range -- and it can be used to pop local notifications. I don't think stores have gone down the "you're here and we're going to advertise to you" route (since that'd be creepy as hell), but its more grist for the mill.

slj 5y ago
When I walked into the local Apple store circa 2019 I was greeted with a “welcome to Apple” notification from the Apple store app. It’s the only example I’ve seen of iBeacons being used that I personally know of.