4 ms·

I think it’s cool but with payments you’ll have to address security considerations. How can you prevent someone from spoofing a transaction or spoofing audio fo

I think it’s cool but with payments you’ll have to address security considerations. How can you prevent someone from spoofing a transaction or spoofing audio for payments?

jackson1442 4y ago
This specific demo doesn't actually send payment data over audio, just a link to pay from. Post-payment would still go though signed stripe webhooks like a normal online payment. Seems like an interesting way to start a transaction without needing to buy any specialized equipment.
- heretogetout 4y ago
  Like an audio QR code, I guess.
- mikeiz404 4y ago
  You don’t need to read the payment data. I think a phishing/spoofing attempt may be possible by playing a louder or directional ultrasonic message to introduce an alternate payment url. Or you may be able to accomplish a denial of service via jamming. (If some one knows more, please step in and comment.) I’m guessing some of these could be issues with NFC too but from what I have skimmed online it seems both the tag and receiver would need to be modified to work at larger than normal distances of “1-5cm”[1]. Also much more power is needed to extend the range of NFC than sound since sound strength diminishes with the square of the distance and, from what I have skimmed, magnetic induction used by nearfield NFC diminishes with the cube of the distance [2][3]. 1: https://seritag.com/learn/using-nfc/nfc-tag-scan-distance-explained https://seritag.com/learn/using-nfc/nfc-tag-scan-distance-ex... 2: https://www.physicsforums.com/threads/magnetic-field-strength-diminishes-proportional-to-inverse-cube-or-inverse-square.450414/ https://www.physicsforums.com/threads/magnetic-field-strengt... 3: https://physics.stackexchange.com/questions/44037/why-is-near-field-communication-nfc-range-limited-to-about-20cm https://physics.stackexchange.com/questions/44037/why-is-nea...
hapiri 4y ago
Higher level protocol would establish handshake & encryption I imagine.

I think it’s cool but with payments you’ll have to address security considerations. How can you prevent someone from spoofing a transaction or spoofing audio for payments?

jackson1442 4y ago

This specific demo doesn't actually send payment data over audio, just a link to pay from. Post-payment would still go though signed stripe webhooks like a normal online payment. Seems like an interesting way to start a transaction without needing to buy any specialized equipment.

heretogetout 4y ago
Like an audio QR code, I guess.
mikeiz404 4y ago
You don’t need to read the payment data. I think a phishing/spoofing attempt may be possible by playing a louder or directional ultrasonic message to introduce an alternate payment url. Or you may be able to accomplish a denial of service via jamming. (If some one knows more, please step in and comment.) I’m guessing some of these could be issues with NFC too but from what I have skimmed online it seems both the tag and receiver would need to be modified to work at larger than normal distances of “1-5cm”[1]. Also much more power is needed to extend the range of NFC than sound since sound strength diminishes with the square of the distance and, from what I have skimmed, magnetic induction used by nearfield NFC diminishes with the cube of the distance [2][3]. 1: https://seritag.com/learn/using-nfc/nfc-tag-scan-distance-explained https://seritag.com/learn/using-nfc/nfc-tag-scan-distance-ex... 2: https://www.physicsforums.com/threads/magnetic-field-strength-diminishes-proportional-to-inverse-cube-or-inverse-square.450414/ https://www.physicsforums.com/threads/magnetic-field-strengt... 3: https://physics.stackexchange.com/questions/44037/why-is-near-field-communication-nfc-range-limited-to-about-20cm https://physics.stackexchange.com/questions/44037/why-is-nea...

hapiri 4y ago

Higher level protocol would establish handshake & encryption I imagine.