4 ms·
Well, it's equivalent to static RFID or QR codes, and seems easier than either. It's neat. Other ways of doing handshakes with limited hardware: musical chirps
by oconnore 14y ago
Well, it's equivalent to static RFID or QR codes, and seems easier than either. It's neat.
Other ways of doing handshakes with limited hardware: musical chirps, exchanging graphical codes with two front cameras, and ad-hoc wifi.
- ynniv 14y agoIndeed, it is equivalent to a static RFID or QR code. Would you secure door locks or physical transactions using a static QR code? "Scan this to prove you were here, but please don't share it on twitter."
- oconnore 14y agoI don't think their security model relies on the pattern being secret. The worst case scenario is company B steals company A's number. This results in company A getting additional payments. Or perhaps company C, seeking to ruin the reputation of company A, sets up a fake 'A' storefront with customer service that doesn't shower.
- deleted 14y ago[deleted]
- freehunter 14y agoLooking around the site, it uses GPS data to verify that you are in the correct store. Stealing the code would give you nothing, since it won't authenticate unless you're physically in the correct location. It matches the three authentication factors: what you own (the phone and the app), what you know (the code on the stamp), and what you are/do (where you are physically). It's straight up multi-factor authentication from where I'm standing.