Beaming Money
Wes writes "If you've ever dreamed of having a system like they use on Star Trek, where credits are instantly passed back and forth, this is it. PayPal, from Confinity will let you do that. Just sign up, load the software onto your Palm or WinCE device and go. If the other person doesn't have the software, you can IR-beam it to them, same as transferring money. Never fear if you don't have a handheld. An e-mail address will do just fine, but no money beaming. Sounds like a new payment type for eBay. "
Geez, its going to be simpley an encypted text/data. There should be no need for any executables, meaning there should be no viruses. But, as was previously said, we need to find out what encryption and protection system they are using first. Anyone know anything about this companies history? any complaints?
Having not read the site at all I won't comment too deeply, but it occurred to me that some sort of double-check system might solve the problems you mentioned above.
Meaning, both my PDA and the other party's PDA would record the specifics of the transaction including the amount of transfer and who the money was transferred from and to. Money wouldn't change hands until both ends had been synched to the server.
This may not be the way they're doing it and would certainly eliminate some of the convenience, but it would keep money from electro-magically appearing out of the ether.
Edu. sig-line: Choose rhymes with lose. Chose rhymes with goes. Loose rhymes with goose.
Comparing? THEN use THAN.
On July 23, Confinity made history by receiving its first-round financing from Nokia Ventures using Palm Pilots and Confinity's PayPal software to do the funds transfer. At Silicon Valley's Bucks Restaurant, where many a venture capital deal goes down, Nokia executives will 'beam' the company's $3 million investment to Confinity CEO Peter Thiel's PalmPilot.
http://www.buckswoodside.com/s tories/storyReader$218
Uh, Heroine, you hand me a credit card and I'm handing it right back. I have no desire to pay hundreds of dollars a month to be able to process credit card payments from my friends & family.
Now if some company wants to do it for me and earn some pennies in interest along the way...well that's just fine by me. =]
No offense, but you really should read the article before making a flip comment.
And WTF does "Microsoft operating system" have to do with this debate? Did you somehow miss the whole Palm vs. Windows CE battle? Only slightly less well known than Linux vs. Windows NT...
Just my (insert synonym for $.02 here)
JoeShmoe (again)
PS - No I DON'T work for Confinity but as a big PalmPilot fan I get a kick out of any new and unusual idea (OnmiRemote, Frotz, etc) that makes good use of the ever-increasing PalmPilot user base instead of the ever-fragmented "wince" population.
~~~~~
"I tried to make a ".sig" file but Windows wouldn't allow that name."
Notice the electronics trend the past few years? Everything's i-this, e-that, etcedera, but as wonderful as these things are, nothing is really safe anyways, so would we be seriously ready to make this everyday for some (nevermind all) people?
And I'm not necessarily meaning that someone is going to walk around with that massive IR panel hooked into a palm with an IR sniffer (idea!), but there's much larger worries lurking overhead.
No, not the little green men from Mars (that's a different story). Remember back 30 years or so when we detonated a nuke in space to see the effects? No damage, except an EMP shockwave that ruined a good deal of all electronics in the pacific (Hawaii too I believe, I can't remember much, anyone want to follow up on these old projects?).
The military, and in some rare instances, even law enforcment use EMP to nuetralize sensitive areas, in a package smaller than a Pringles tube. It shorts out most electronics and wiring without too much of a problem.
Now obviously this technology can be applied well (like EMP car horns! they'll never go that slow in the left lane again!), yet there can be mailicious uses. yet, when I think about it, there're malicious uses for cardboard so we're never really safe.
Just another thing to think about before we all even considering jumping on another bandwagon.
--me
----------------------------------
Anyone else remember VisiOn?
#include
int answer;
main()
{
printf("gimme yer money");
scanf("%d", &answer);
if(answer == 1)
beamthem();
else
takeitbyforce();
}
And I bet Peter Thiel was sweating a little... would have been fun if something had screwed up with that little transfer!
Effective gesture, though. They wouldn't have put $3 mil on the line without a well tested system!
First of all...just because companies don't know how to secure credit card transactions doesn't mean there is no way to do it.
.sigs?
I invite you to read about a little something called the CVV2 code that is already on the back of your credit card right now. Works just like the PIN on your ATM card. It helps enforces the most reliable form of security: the "something you have, something you know" plan. Even if someone has the credit card name, exp, & address information they still need to have the physical card to obtain the CVV2 code, since (like a PIN) this is not echoed or listed in any credit card paperwork.
The opposite is true for the waiter who writes down all the information (including CVV2) from the back of the card. Even though he has the "physical card" he still does not know the correct billing information (address, ZIP, phone etc) that ANY mail/Internet company who isn't outright braindead will try to verify.
I really never thought I'd be posting this many comments, but it irks me how people fail to notice the distinction between CREDIT/CHARGE cards (which are merely just an electronic promise to pay) and CHECK/CASH cards (which are real legal tender that you actually are exchanging).
Personally, as a consumer, I find the idea of "promising" to pay something a lot safer and more appealing than something that actually makes me fork over the dough. If something goes wrong, I just sit back and make the other party take action against me. I've had companies like AOL, FingerHut, CompUSA, etc try to charge all sorts of crazy things to my credit card for goods/services that for whatever reason I was not happy with. All I have to do is tell Citibank I'm not paying and then then it's up to the vendor to show proof of why they deserve the money.
Now, if I had been foolish enough to use my check/cash card I would now have to go chasing after them with lawyers or whatever to try to extract money from their collectively clenched buttocks. Nuh uh. No thanks. From the standpoint of big business, it is far more likely they will abandon any disputed claim (as has happened for me with AOL et. al.) than the snowballs chance in hell that they will return money without real legal action.
Turning it around to big businesses point of view, well if your policy or product is to blame, fix it. Otherwise, you can always determine if the amount in question is more than the cost to send it through the legal department.
Plus, the entire system is paid for by goods-crazy consumers that live their whole lives in debt to "keep up with the Joneses". Hey, wonderful...don't plan on me ever cancelling.
JoeShmoe (yet again)
~~~~~
If I register can I stop thinking up new
If no one uses it because they're all waiting for other people to show that the system is reliable, then no one will prove that the system is reliable, and all the people waiting around will still be awaiting the proof.... :)
Who am I?
Why am here?
Where is the chocolate?
What is your Slash Rating?
I'm surprised nobody cracked the chip in the smart card and made themselves an "e-millionaire" or is that iMil?
Opinionated Law Student Strikes Again!
That sounds amazingly similar to the descriptions you read of how our paper money system originated.
Basically, blacksmiths or whoever would put your gold in a safe and give you a receipt for it, redeemable anytime for the gold you deposited. Soon enough, people started trading the receipts instead of gold... And so paper money was born!
The reason that the receipts had value was because they were backed by the blacksmith's promise to pay back the gold.
Your idea would be interesting, as the receiver of the payment would be depending on:
a) Your reliability that the check is actually valid
b) The issuer's reliability(in this case the people behind PayPal)
c) The value of the U.S. dollar, which is backed by nothing except the illusion of value.
(Not sure where I was going with that post... anyways...)
You'll notice he was referring to the book of Revelations, and not the year 2000. Think about it. The year 2000 hype is a joke.. like you said, it's just a number.
:) But, it's not a 'year 2000' thing as you so hastily attacked it.
:)
Revelations is a prophetical book that's been around for a while. I find people tend to read too much into it, myself.
Do some research. and once you've done some, you'll find Revelations is a bit of a joke too.
I merely wanted to point out that your little rant was way off base. The poster's likening of universal ID to the 'mark of the beast' is a legitimate one. Whether it's actually meaningful or not remains to be seen.
On July 23, Confinity made history by receiving its first-round financing from Nokia Ventures using Palm Pilots and Confinity's PayPal software to do the funds transfer. At Silicon Valley's Bucks Restaurant, where many a venture capital deal goes down, Nokia executives will 'beam' the company's $3 million investment to Confinity CEO Peter Thiel's PalmPilot.
http://www.buckswoodside.com/s tories/storyReader$218
I believe they still use gold plate latinum, the only element that cannot be replicated perfectly, as shown in star trek gambling and such.
There were several services like this in the early days of the Internet... and they worked, too! Jack Rickard had an open invitation to let people pay for their Boardwatch Subscriptions using one of the email-money-transfer services.
:P )
I can't find the column on their online version; must have been pre-1995 (back when it there actually was BOARD in boardwatch, instead of this "internet" stuff...
-Chris
Hmm... it is, indeed, interesting that this happened just after DigiCash went belly up (according to another poster) -- as DigiCash held most of the patents involved in digital cash algorithms.
I wonder if these folks managed to get them for a song...
As for folks wondering how this is done, there are some excellent examples of digital money protocols in Applied Cryptography, a must-read for anyone who finds this interesting.
Actually, there have been several cybercash schemes around the UK for a while now - Mondex in Swindon which seems to be humming along nicely and Visa Cash in Leeds (my home town), which seems to be gaining in popularity quite rapidly... you should see parking meters as the 'foot in the door' for the technology which can then move up the food chain, as the Leeds project has done.
james
Tally-ho, yippety-dip, and zing zang spillip. Looking forward to bullying off for the final chukka?
umm can you please point me to a url where you found this info? I don't see it anywhere, but if true that is definatly good news!
There are things to be said about cash... but:
I can't be traced: oh, yeah? Where can you spend a lot of cash and not be traced!
refunds are easy: Where are refunds easy? I always seem to have to show a receipt, show ID, and fill out/sign a form.
and I know if someone's trying to use my money: After they've robbed you, you might know if they're using your money, but you won't know who or where!
Cash and checks are increasingly uncommon in Europe, especially checks. Smart cards may face a hostile environment here in the USA, but Visa and MasterCard at least provide some protections against unauthorized use that might occur. Cash will only be protected by a safe, a gun, the police, or moral behaviour. I say, bring on some smart, technologically intelligent alternatives!
Certified Microsoft Notworking Specialist
Well they specifically state in their privacy policy that they ask for demographic information, but that they don't give it out (cept probably base statistic as in how many people on their system fit certain demographics). They simply use it for indirect marketing. Meaning a adveriser says "Hey, I hear you have alot of college students signed up, give them all this advertisment." PayPal says "Yea we got 2 million of em, that'll cost you 50,000"
URL: http://www.paypal.com/cgi-bin/ pageview?cmd=investors
www.HearMySoulSpeak.com
hmm, that could be a problem. but the technology exists to make everything else about the product secure; it shouldn't be impossible to figure out a solution to the hardware issues. besides, if you lost your 'wallet' most likely none of the transactions would be completed unless both parties sync'd them up. who wants a cashless society anyway - how would you buy dope? an excellent book to read on the subject is "Web Security and Commerce" at www.ora.com
A somewhat accepted explaination for this is that while the federation does not pay it's officers per-se, theye is money avail-able to them for use with races that do use a monetary system. Thus, if they wanted to spend money in Quark's bar, they would requisition latinum from the Fed's.
Colin Davis
What happens when you break your Palm Pilot or 'accidentally' do a hard reset? Just like losing your wallet?
James
get nemulator
The cloaking device
The transporter (old news I know)
The medical tricorder
The warp drive
Pon farr (okay, getting laid for the first time in seven years probably doesn't count
Nearly all references are bogus; none of them (except the warp drive) are analagous to their Trek counterparts. Course, they're still cool.
About the credit transfer: the town of Ennis in Ireland tried giving everyone smart cards, and they only used 'em for parking meters. 'A good idea whose time has not yet come' was the official response.
it sounds like you could buy dope with this system, it inables transfer of funds directly from one pad to another, so theres no way to know *why* the cash was transferd.
*and* theres no cash limit (unlike smart cards with there $500 max) the VC used this system give this start up $3 million dolars....
"Subtle mind control? Why do all these HTML buttons say 'Submit' ?"
ReadThe ReflectionEngine, a cyberpunk style n
I wonder how they plan on making $$ on this system.... The signup is free, the software's free, the transactions are free... what does that leave them?
We're all worried about Micros~1 & AOL taking over the world; who's watching the credit card people?
--Mid
So, I get an e-mail attachment that I'm supposed to trust and open. Sounds like a great oppertunity to do a lot of damage, with a virus. "Click here to get your $500.00!" :(
my guess is it would be hard to just about anything anonymous when you need to be physicaly within 5 feet of eachother...
"Subtle mind control? Why do all these HTML buttons say 'Submit' ?"
ReadThe ReflectionEngine, a cyberpunk style n
When do I get my Credstick? Like in ShadowRun?
Kagenin, who not only plays too many RPGs, but dreams of a Cashless Society
"All warfare is based on deception."
Sun Tzu, "The Art of War"
First of all, they want you to give them "unique identifiers (such as Social Security numbers)". They shouldn't be asking for an SSN! It'd be interesting to know what alternatives, if any, they would accept. They also ask for income level, which is none of their business. As long as your credit card is valid, they ought to be happy.
They're up front about the use of your demographic data for "tailoring [their] marketing efforts". Call me paranoid, but I can easily imagine these efforts involving "cross-promotions" with other companies. Prepare to be spammed.
Then there's the "Supplementation of Information" section, which says:
What's that supposed to mean? Sounds like they could end up with a pretty interesting database about you -- especially with that SSN.
The worst part is what's not mentioned. There's no promise not to disclose any of this information, only a vague statement that it is "considered confidential". There's a way to remove your address from their mailing list (though it's not clear whether that requires closing your account), but nothing to say that they haven't already sold your email address to every spammer under the sun. And -- not surprisingly, considering all of the above -- there's no mention of any approval from ETrust or other independent ratings organization.
It's a neat idea, but until they do a major overhaul of their Privacy Policy I'm not going anywhere near the thing. There's a lot to be said for plain old-fashioned cash!
So let's see... lose the $3 in your wallet and spend a week waiting for all your credit cards to get replaced... or be drained of every penny you have?
I think digital money is a good thing.. but this is a slightly more sketchy idea.
All the data is also stored on the server, and both need to be synched before you can get it (I belive, although I'm not sure that would be necisary)
it's like a check. you can *write* a check for however much you want, but it isn't going to do you a lot of good.........
"Subtle mind control? Why do all these HTML buttons say 'Submit' ?"
ReadThe ReflectionEngine, a cyberpunk style n
Did you really expect capitalism to survive that long?
Some people have no sence of hummor...
:)
:)
However.. note he got modded up to..
People might (like he did) take the joke out of context and think this is accually likely...
It's funny and a cool joke but not realistic..
I still have images of a a crook fidling with a knife and a plam..
"In todays news a would be mugger went to the hospital when he accadentally stabbed himself during a mugging attempt when he couldn't get the palm working"
It might be easyer if they just steal your palm...
Then you go on the internet have your plan voded and the next time the crook trys to use it you get your palm back
A sillyness note... some doom sayers think we'll have to have 666 stammped on our palms in order to do busness..
I just can't get the image out of my mind that "The beast" refers to larg Unix servers in stores and the palm with 666 is a palm pilot set world accessable [chmod 666]
The number of the Unix beast
Ok enough sillyness...
I don't actually exist.
I'd really like to use this, it sounds nifty, now prove to me it works safely, and reliably.
-cpd
SSL. That and large amount of transaction auditing at just about every point in the system. Oh, and the limitation most online transfers have to only being able to transfer to ones own accounts or to predefined payees.
It wouldn't be impossible to break the SSL-but I sure wouldn't transfer too much, you *will* be detected (expecially if you try to transfer to *your* account, duh).
Penrif
Boy, aren't we quick to pass judgment. Just because something isn't available yet doesn't mean it's vaporware. They set a release date of fall '99. If it's not available then, come back here and spread the word.
For more information, click here.
Has anyone but me heard of e-gold? Has anyone used the service or is everyone doing what I'm doing... waiting until everyone else is using it?
--
Fuck the system? Nah, you might catch something.
i saw a story about this on the news a week ago.
Sorry bout that.. didn't see the side nav bar on the about company tab.s tors
http://www.paypal.com/cgi-bin/pageview?cmd=inve
Anyways, for anyone else out there, the list of investors is Nokia, Deutsche Bank, Bill Melton (of CyberCash and VeriFone), and Martin Hellman.
As far as I can see this is just electronic checks. Instead of writing out a paper check and handing it to the counterparty, you beam an electronic check from your PalmPilot to his PalmPilot. Just as with checks, no money transfer actually takes place at this time -- money flows from your accont to his account later when the transaction information is uploaded to the bank. Same with e-mail: instead of snail-mailing the paper check to somebody, you e-mail an electronic check to him.
Will this work? Probably yes. Electronic fund transfer is not going to go away. Will this work in this particular incarnation? It depends (on the company cluefulness, marketing, govt regulation, etc. etc.) Do I like the scheme? Not very much: there is no anonymity whatsoever.
Also consider the usefulness of the idea: how often do you write out paper checks and give them to other people (as opposed to, say, utility companies)? I do this maybe two-three times a year. For the rest of the time cash, credit card, and online bill payment are quite sufficient for me, thank you very much.
Kaa
Kaa
Kaa's Law: In any sufficiently large group of people most are idiots.
I've put together my own IR assault rifle. I replaced the IR LED on a cheap universal remote with an IR laser diode. I also added a red laser diode for sighting purposes (which is switched off onde the target is acquired). I then mounted the device on my telescope tripod and can now change TV channels in other poeple's houses! The fools! They leave their windows open! Muhahahahaha!!!!!
I suspect the palm money is just a refrence to a central bank file where the money accually is.
In a sence your palm becomes a really expensive ATM card... only you can shoot a file off so someone else can pull some money out of your bank.
If your palm breaks you can just void your palm money.. It also means you can not run to the store and buy a new palm... have to run to the bank first... void palm money.. withdrawl money... get new palm.. get new palm money...
It also leaves some room for crackers to forge your palm codes and withdrawl more money from your bank than they should...
I don't actually exist.
If they build up a customer base there will be major advertising opportunities, but the main source of income is the float. PayPal charges your credit card, and they get access to that money almost right away and can invest it (possibly regulated to invest only in liquid securities like U.S. treasuries). Then they hope that the friend you paid leaves that value in their PayPal account for a long time out of inertia or the expectation that they'll use their account real soon.
Plus the Wired News article says they expect over time to get people to load their account by check or bank debit, so PayPal wouldn't have to pay those nasty credit card interchange fees.
Give PayPal credit for recognizing the market opportunity in peer-to-peer payments. If enough buzz develops, somebody will take the next step and commercialize real digital cash.
To the best of my knowledge, all of the non-US DigiCash systems are still successfully up and running. Mark Twain was running a US trial for a long period of time but pulled out a year or so ago, which is why there is no current US presence.
However, you will be pleased to hear that the DigiCash IP was sold to a startup who appear very interested in making it a ubiquitous and successful product, and IMHO it sounds like they have the execution skill to back up the vision. Keep an eye out for it :)
I can see why this would be a good alternative to the play stuff that passes for cash in Canada.
Don't get me wrong, I'm not trying to insult Canadians, just their money. I just remember being in a Canadian arcade, and it was obviously much easier to get one of the arcade's own special cards than to come up with $2.75 in change per game.
($2.75? Remember to take not only the exchange rate into account, but the fact that everyone loves making tourists pay through the nose, especially if they have no clue how much their money is actually worth.)
Okay, okay, this is getting more and more off-topic by the second. I'll stop now.
--
Win dain a lotica, en vai tu ri silota
I'm continually amazed by people who can't see past credit card payments.
What about business to business payments and "cash" lookalikes like Debit card.
Oh - I forgot - the US doesn't have efficient debit 'cos the card schemes screw the merchant more than they do for credit cards. In the rest of the world, debit has almost zero chargebacks, and at least 1% more profitable for merchants.
Who ya gonna prefer paying with??
The credit card people are dead when it comes to Internet commerce - they'll never really get out of in-store shopping in the long run.
And who cares about opeating systems - provided the message is understood by the recipient - isn't the Internet a wonderful example here.
Knocker
Just because something isn't available yet doesn't mean it's vaporware
Actually, yes, it does. That is the very essence of vaporware.
The crook wouldn't be able to collect without the police getting involved.
They would make money skmming off the interest of your balance. Like savings accounts. That sounds better than credit cards which charge you interest on the (negative) balance in your account. Just think what needing a savings account for convenience would do for personal financial responsibility... although I'm sure you could convert this beaming system to use credit, that requires certain risks on the part of the company making it.
That reminds me, are they FDIC insured?
Encryption baby, encryption.
Further, just because the Federation doesn't use CASH doesn't mean they don't use money. DS9 implied heavily that the Federation uses a very fluid credit/debit system. The Ferengi and others just don't buy into this wacky sort of thing and want "real" MONEY in their hot little hands, even if the Federation has enough economic standing to let its citizens convert their credits into latinum (otherwise Chief O'Brien couldn't have paid his bar bill).
Me too. And with cash, you don't have to worry about either sitting on or your PDA dying on you....
Funny, I've never had to show any ID when getting a refund from either Kmart or Wal-mart, and whoever said you had to use your real name on any of the forms? I've paid $1500 cash for a used car at a dealership without any problems whatsoever.
My ATM (Interac) card does all the things you mention, save for person-to-person transfers. I thought that the MAC (Money Access Center) cards worked the same in the US?
The money sits in my account until I decide to move it to pay for a purchase. Therefore it collects (pitiful) interest. I don't have to change banks, I can make withdrawls from any bank (usually with an interbank fee however). And some bank machines indeed do give you the option of american cash. In fact, my card works on the Cirrus system of interbank transfers -- I can get cash in the states or wherever Cirrus machines exist.
Assuming patents operate in a similar manner to copyrights (which they may or may not), the rights would revert back to the person(s) who actually created the [insert patented item here]. (This also assumes there are no weird contractual clauses about who rights go to...)
Of course, this could totally be off, as well.
Of course, all they have to do to "forge your palm codes and withdrawl more money from your bank than they should" is crack either your PGP passphrase, break RSA, or randomly hit on a legal one-way hash that improperly authenticates your account to them. You know, really trivial, easily-done things like that.
--
Joe Doyle
doyle@nebcorp.com
Okokok. I bow before the all-knowing relater of The Jargon File...
:-)
D'oh!
I should RTFM more often so that I know of what I speak...
--
- Sean
It's a fine line between trolling and karma-whoring... and I think I just crossed it.
- Sean
This is basically a way to make credit payments to people who can't accept credit card payments themselves. It's not for ebay or other real merchants. It's likely to be very popular and make them lots of money I'm afraid. Banks actually make more than just the interest on the accounts, they make money on the float, it's basically free money that the banking money synthesizes (Now that's the real start trek stuff, except it's the basis for the existing brick and morter banking business).
The problem is that the availability of faux-ecash systems like this will only make it less likely that we ever get true electronic cash. Mondex, et al are all just "better credit cards" that avoid having to pass your credit card in the clear but don't do anything to preserve your privacy. Do you really want your credit card company to have a list of everyone you exchanged cash with and every store you shop at?
There have been numerous references to "credits" and "gold-pressed latinum" because lots of societies do use money, so when the federation wants to do dealings with them...
Within the federation, there is no money. And I fail to see how such a system could work. You can eliminate money but not greed, at least not completely. People will always want more than what they have. Sisko's father has a restaurant on earth in New Orleans. I want a restaurant too. Land is limited. Not everyone can have a restaurant. Well, I'll trade you X for your restaurant. Barter systems lead to money. Hey! We're back to money again. As long as there's free will and emotions and desires, there will be a need for money.
Yeah. Instead, money would electro-magically
disappear into the ether. If you never sync
your PDA (or reinstall/wipe the memory/whatever
periodically), you can transfer all you want and
never pay anything..
It may have changed by now, as I haven't lived in Boston for a few years,
but their universal transit card was *way* better.
Because of the zoned fares, my Dad had a card that was worth, say, $2.50 for the Commuter Rail trains.
You could then use the same card on the T for subway/tram travel, and it had the Magnetic Stripe for quick access.
The best part: unlike here in fscking Toronto, you didn't need picture ID to use the damn thing!
So I could use it on weekends when my Dad wasn't working. Ideal!
Someone from Beantown may want to correct my statements:
I never had to buy one, so I don't know about cost. But it seemed to work great!
Pope
It doesn't mean much now, it's built for the future.
I'm very skeptical of this scheme. First, they have a stupid name. "PayPal"? Uggh. Sounds like a toy cash register made by Mattel.
Not to mention the enormous difficulty of getting this thing to spread. I don't have a Palm or WinCE device (I prefer EPOC, thanks), so if someone wanted to "beam" me the ten bucks I lent them for lunch, they would have to first explain the scheme, quell my fears about its safety, and then convince me to download the software (most likely Windows and Mac only), give this company my private financial information, and then collect my ten dollars. Yeah, ummm... There's an ATM a block away. Let's go get my money.
On the subject of star trek: According to Jean Luc Picard in Star Trek: First Contact "money doesn't exist in the 24th centuryto which Cockrin's assistant replies "no money? you mean you don't get paid...". This is was in response to the question of how much the Enterprise (1701-E) cost. This is all very good,etc.. but haven't you noticed how the Ferengi and just about everyone else seem to have money or some form or other. Indeed, the Federation seems to have money on some occasions, but on others it "doesn't exist". Can anyone clarify how this is explaned or is it yet another classic Star Trek wonderful inconsistancy?
http://www.jonmasters.org/
---
Security Notice
PayPal(TM) financial transactions are encrypted using public-key cryptography to ensure maximum security for all beamed transactions between users and for all subsequent interactions with our secure server, which occur during synchronization of each handheld device.
When you conduct a transaction on the PayPal(TM) web site, we encrypt all of your private information. That information is stored on a secure server housed in a secure data center. All transactions are conducted through our secure servers, which are protected behind state-of-the-art firewalls.
---
No indication of what flavor or key strength their crypto is, though.
Jeez... it was a joke!!
Didn't you notice the rating comment? aka: 3: Funny??
That's why it was rated up... not because of anything else.
--
- Sean
It's a fine line between trolling and karma-whoring... and I think I just crossed it.
- Sean
A true communistic society, not like the markist society that was in place in Russia. Of course, a true communistic society, although perfect for the future advancement of mankind, is impossible due to human nature.
If it wasn't for the fact that people have the need to be better then the Jones down the street we to could live in peace and harmony, working for the betterment of mankind.
Ah, if only we humans weren't such jerks.
Of course, you're all forgetting one of the largest trials of electronic cash performed so far. You should have heard of Mondex - an electronic cash system co-developed by BT , Midland Bank (now HSBC)> and others. They have an electronic card which uses a smart chip to actually store the cash. You can get electronic "wallets" with which you can exchange cash with other private individuals. Shops have have more permanently fixed card readers. You can lock the card with strong encryption (hello US :-) so that others cant get at your cash even if you loose your card - to use it again you have to "unlock" it, and just like a mobile phone, it can be set to only authenticate with your own "wallet" so someone else can't even try cracking it. Using BT's specially developed telphones, you can withdraw money from the bank without leaving your home and you can also deposit it aswell. Anyone who is interested in this, I wrote a report on mondex several years ago when the Swidon trial took place. Unfortunately it's in M$ word format as my university hasn't embraced Linux yet and their sun's are laughably inequiped with decent word/text processing capabilities. Anyways, if you're interested - it has lots of pretty pictures :-) anyone who mails mondex-request@periscope-systems.freeserve.co.uk will receive a copy - that is if I can find it :-)
http://www.jonmasters.org/
It seems to me it should be possible for someone to arrange an encrypted transaction via computer, where given some sort of info about your account (as in a public key), I connect with my bank, generate an encoding indicating the amount, my account, and the target account, and then I could send you the encoding and you give that to your bank for receipt. This could then be an electronic check, and with long enough keys should be safe at least for the short run.
Ooh, a sarcasm detector. Oh, that's a real useful invention.
- Distinct (you've not given them ten copies of the same "bill"), and
- Valid; each one bears the mark of Confinity.
This doesn't stop someone from giving the same "bill" to several different people, but as soon as things got back to Confinity they'd be in deep doo-doo.The Wired article says they are using elliptic curve encryption.
Whatever happened to Mondex and e-cash? At least that is using a proven technology, is decentralized and non-traceable. This sounds a lot like the more bank-oriented systems that had a middleman (then, the bank, now, some random organization I know nothing about) who took care of anything. I see zero reason to use this.
Are you going to publish the protocol used to communicate with your servers, and between handheld devices?
I own a Palm Pilot, but I use Linux, and I'm worried about my ability to use your service.
I'm also concerned about the security of any non-public protocol. Long experience in the cryptography community has proven that any algorithm that isn't public and survived teams of people trying to crack it isn't secure. I don't care if you use a proven algorithm like RSA. How do you use it? Where are the private keys stored? What data is on the wire? Is any data that may potentially damage security transmitted? I don't care what your answers are. I want other people's answers.
I'm looked at as a technology advisor by a lot of my friends. I will advise them all to not use your service due to the problems I outlined above unless you publish your protocol for peer review.
Need a Python, C++, Unix, Linux develop
How long would a palm pilot take to do >100bit public key encryption ? About a month ?
Paper is slowly becoming obsolete...though I agree that keeping your money centralized like that is risky. Should have a direct connection to a bank or something.
"Imagination is the only weapon in the war against reality." -Jules de Gautier
The neat thing about this system is that it is viral; the enabling software can spread from Palm to Palm at the speed of gossip. I don't see anything that prevents the same scheme from being used to foster an anonymous e-Cash system in the future, and once Confinity's system is widespread enough for people to start getting annoyed with its lack of privacy, the stage is set for another viral system to replace it overnight. Getting people used to exchanging money with hand-helds is the big battle, selling them on a private system that's just as easy to use is child's play by comparison.
If one reads the article one would see that the transactions are neither anonymous nor instantaneous. Two qualities which are highly desirable to those interested in performing a successful mugging.
> Citibank (and some other big bank, I think) tried a pilot (sorry) program on the Upper West Side of Manhattan a year ago or so. They replaced our ATM cards with "smart cards" that could hold cash, and got a bunch of vendors in the neighborhood to install readers. The smart card came with a little reader that would show you your current balance as well as your last few transactions.
/what/ the purchase was. And it offers pretty much instant transactions; a few seconds and it's over. It's pretty close to being crack-proof; about the only way would be to tamper with one of the machines in advance... but they sit along-side the cash registers, so you might as well tamper with that and take the money directly, especially since any Interac transfer is logged.
That sort of system has been in place all across Canada for several years now (like about 7 or 8). I's called Interac.
The only thing you mentioned that we don't have are the little readers.
Every single bank and credit union in Canada (there are 5 big banks, a handful of small ones, and a zillion credit unions) is in on the Interac system.
It's basically an ATM (bank) card that can be used for purchasing. Pretty much any store in Canada, from McDonalds to the international airports, to little mom-and-pop corner store, to the big department stores (Sears, etc) accept them.
You can pay for your purchases directly with the card; no signing anything, all you have to do is input a single 4-number PIN. The money, if available, gets debited directly and instantly from your account.
A couple bank machines also offer the option of transferring money directly to someone else's Interac account, similar to what this Confinity thing does (except that you can't carry it with you).
Sure, the bank knows where you made the purchase, when and how much, but that's it. They don't know
Like I said, it's been in place here since the early 90's, and is immensely popular. I don't have the exact figures on-hand but something like 30%-40% of all purchases nationwide last year were made over Interac, and it's growing by 10% plus per year.
Since every single banking institution in the country is involved, you don't have to be a customer of any one particular bank or have a special ATM card or anything. Any old one will do.
And, there are really only a very few (probably under 5%) stores/restaurants/whatever that don't take it. Even the government takes it for pretty much anything. I think taxes (Income taxes, etc) are the only things they don't accept it for... and there are plans underway to change that.
It's a great system -- to be honest, I've always wondered why on earth they couldn't adopt something similar (or even the same system, to make things easy) in the USA.
--
- Sean
It's a fine line between trolling and karma-whoring... and I think I just crossed it.
- Sean
If you look at the visitors-from-the-past episodes and even that movie, it's not that the got rid of money, but that they eliminated poverty. Though it would be hard to maintain a productive society, eliminate poverty, and continue a minimal form of capitalism, but hey, they _did_ say the same thing about a democracy in a capitalistic society.
Paper is not going away soon and probably never. Last time I checked, faxed and emailed signatures were not the legal equivalent of real signatures. And paper copies of bills mean something to a court in a dispute, unlike a cheap text printout of something that can be faked so easily it's not even funny. Same thing with cancelled checks. They're indisputable proof of payment. And think about how there are more printers on the market than ever before. Paper use is UP with usage INCREASING. It is not going away.
the palm wouldn't have to crack the code, once you have the key it is just as simple to decrypt as any other method. However, if you are planning on brute force cracking the code, that would take forever, a more feisable effort might be to capture the transaction, then load it back home and crack it there...
just a thought.
Yes, that's why humanity was no longer advancing noticeably in Star Trek. ST's always been rather depressing in that regard.
Ummm... my understanding of vapourware was that it refers to a software project that gets abandoned before it is completed/released.
Just because something is not available yet (ie: before they said it would be) does not mean that it's vapourware. If it never becomes available, then it is vapourware.
Until they say they're abandoning it, or until the release date hits without them saying/releasing anything, it's simply "under development".
I mean, by your argument, Linux 2.4 is vapourware. Huh??? No, it's not! It's just not finished yet.
--
- Sean
It's a fine line between trolling and karma-whoring... and I think I just crossed it.
- Sean
People...you seem to be ignoring a few very important parts of this PayPal (why not PayPilot?) system...
.sig's are the ones you think up at the last second.
1) Federal law limits your personal liability in credit card matters to $50 (long distance phone calls, stamps, etc). This means that since the actual payment part involves a credit card company...if for some reason the system is hacked and someone tries to fake a $5000 transfer, you just tell your card company to dispute the charge and that's that. Now of course, if you were dumb enough to use your fancy new CHECK card, then you will be fighting to get money you already PAID back (versus getting the right not to pay) so let's not do that, hmmm?
2) It's called Pay_PAL_ and I think this is just to remind people that initially this system will be used to settle minor debts and cash transfers between FRIENDS. Like when the bo-bos in desktop support all decide they want to eat somewhere nice for lunch but one of them is short on cash. Someone else pays for that person and instead of an IOU on a Post-It note...they get a digital version that is less likely to be forgotten or misplaced.
3) For crying out loud...have the people whining about resets even HEARD of FlashPro? If you put your PayPal database in FlashROM instead of RAM then even a hard-rest is not going to touch it. Do this and the only way the "payment to be" will be vulerable is if your PalmPilot breaks or you lose it. If this is the case, the $5 someone transferred from lunch is not going to be your biggest concern. And if it is, you can always ask the person to resend since the data got lost and thus never got charged. Do you really think Confinity would have lost their venture capital funding if the CEO dropped his Palm under a bus? No. Of course he would have gone back to the Nokia rep and asked for a resend. Now if you are selling your car or house to stangers on the street, then loss of Palm might be an issue, but otherwise...get real. =]
4) Hacks and trojans are possibly a future concern but don't forget I can always do an Info command to review the maker, version, and size information if I'm that paranoid (not like it can't be faked but at least it gets rid of the casual CodeWarrior kiddie). But getting back to point #2 I'm not going to let any shmuck on the street beam an application to my Palm, let alone one that involves payment. You either trust your friends that this is legit, or you tell them to put cash on the barrelhead.
Maybe someday when strangers on the street are trying to PayPal each other will these security issues be a concern. As it stands right now, this is just a simple, automated IOU system that gives any JoeShmoe the ability to accept credit card payment (via proxy) from someone they already know and trust. Good for them. I'll use it and hide behind Citibank if it doesn't work the way it was supposed to.
Besides...I'm more concerned about looking my contact list than any PayPal data. The contact list is priceless, PayPal is "only money".
JoeShmoe
~~~~~
The best
I'm no expert, but shouldn't it be possible to make a semi-anonymous service by reverse engineering thier encryption protocols?
Do this - take the digital check, intended to be beemed to someone who doesn't have an account. Instead of signing up for the service, and thus revealing who you are, simply use that check to pay someone else for an anonymous service or product. Voila'!
Of course, how viable this scenario is depends on how long the expiration period is on the check. I would think that it'd be at least thirty days or so, to allow for the lazy person with no immediate money concerns. And if we can hack the protocoll, we could make a version that would post-date the check for greater circulation time.
The main drawback of taking this approach is that you couldn't make change - the digital check is a non-changable entity. Thus you wouldn't be able to take a check for $100 and make two payments of $50 off of it. BUT!!! It should be fairly simple to request several digital checks from your friend/trading partner instead of one massive one.
How long will it take us to reverse engineer the algorythms and re-create the software as an open source project? Or will they try to increase confidence in their project by releasing it as open source, or at least open spec? Is it just me, or does this seem like the obvious thing to do for your typical paranoid? Is this just a pipe dream, or could this happen?
Never attribute to malice that which is adequately explained by stupidity.
The software and on line reconciliation system don't appear to be available yet. This is vaporware.
That website addresses next to nothing....
while making it sound like this thing should be roling out next week some time.
And I thought financial ruin was close enough for all of us with simple credit cards and on-line brokers/auction houses/stores!
"(...)And from that point on, robbers had Palm Pilots in their equipment, along with switchblades and guns. When they robbed somebody, their usual words were: "point your Pilot to mine and beam all your money and nobody gets hurt"."
Extract From Galactic Encyclopedia, May 2010.
From their "security notice":
When you conduct a transaction on the PayPal web site, we encrypt
all of your private information. That information is stored on a
secure server housed in a secure data center. All transactions are
conducted through our secure servers, which are protected behind
state-of-the-art firewalls.
Who is guaranteeing the site is secure? Have they been audited by
someone, or are they blowing smoke?
It certainly sounds good, but I'm a little skeptical without more
information..
C'mon. You don't get something for nothing. The credit card companies charge these guys for processing transactions, but they're going to pay your friend the full amount? And it's all free? Where's the catch?
Taral
WARN_(accel)("msg null; should hang here to be win compatible\n");
-- WINE source code
Didn't anyone else notice the little box at the bottom of the front page..."Use your palm or Windows CE to pay your friends." They're obviously aiming this product at those of us who have to purchase our friends affections.
(darren)
PGP ran on 386's just fine, so it won't be that bad. Plus there's a decent chance they're using elliptic curve stuff for efficiency.
If Martin Hellman is involved it seems likely they know what they're doing. I only wish they'd make the text on their Website readable - I guess I'll just have to use Lynx...
--
Xenu loves you!
-Undoubtedly the infrared xmission is encrypted!
-The data sent to Confinty is probably encrypted and digitally signed to avoid tampering.
-You probably will not be able to fake a transaction. My understanding of the article is that the money will be held in escrow until both parties confirm the transaction via sync'ing. (Although this would open up another possible problem).
In any case, why not take a RTFM-approach before posting flippant theories.
That's all very fine. But please don't sound so cheerful in advocating "smart, technologically intelligent alternatives" to moral behaviour.
It's just chilling.
I don't trust transactions like this because money is not really being passed. Its too easy for someone to screw with or pirate. Wait until some hacker finds an exploit and has an endless supply of electronic money.
Just like the credit card companies charge merchants a chunk of the fee in order to have the convenience of accepting a certain card.
If you destroy your Palm before syncing it, theoretically the transaction could still happen because the other party could sync THEIRS and the system would still take it.
The only way a transaction would be lost is if both devices holding both sides of it were somehow stopped from reporting the transaction.
Yes they'd be able to trust information from a single source because it's all cryptographically secure, we hope. Anyone, anyone? Bruce?
Here's an amizingly simple way to fix those problems...
No $$ changes hands until BOTH parties sync their PDA's and send information about the transaction to Confinity... if the information coming into Confinity from both sides doesn't match, then you get a human involved to call all parties, and you sort the matter manually...
What about security? What's to keep J.Q. Hacker from writing a Palm or CE program that fools the receiving Palm or CE unit into beleiving it just received, oh, I don't know, millions of dollars? Or, even better, just modify the unit to think it has a million dollars instead of ten dollars. That data has to be stored on the unit somewhere. Seems like there are a lot of possible holes here.
First off, you missed the point. I said it could be fixed with the right kind of encryption. I never denied it. I just seriously doubt it'll work first try. :-)
:-)
>The neat thing about this system is that it is viral; the enabling software can spread from Palm to Palm at the speed of gossip. I don't see anything that prevents the same scheme from being used to foster an anonymous e-Cash system in the future, and once Confinity's system is widespread enough for people to start getting annoyed with its lack of privacy, the stage is set for another viral system to replace it overnight. Getting people used to exchanging money with hand-helds is the big battle, selling them on a private system that's just as easy to use is child's play by comparison.
First off, who said people exchanging money with hand-helds is a good idea in the first place? But I'll leave that alone for now.
The simple fact is that if you are trying to get people used to the fact that interpersonal electronic exchange of funds (good phrase) is good, then it has to be absolutely unbreakable. If there is just ONE instance of someone losing $50 because of this thing, then the media will be on to it like a shot, a bunch of self-appointed "experts" will say it's a buggy piece of shit, and everyone who uses it will stop. Plus, anyone else with a device that's even REMOTELY similar can just kiss that goodbye because of the bad public image generated by the first device.
Also, the "viral"-ness of it will work against it. Confinity will be seen as a big brother of sorts, although not in as large a way. What person who doesn't have a Confinity account would accept the software from another person, along with a payment, without knowing that it would work when they tried to sync it. Sure, it would work, but our mythical guy with the new software don't know that..
Now, admittedly, the Palm is currently more of a hacker toy, so this is not likely to be a problem. But it is something to think about. The "smart card" concept extending to interpersonal exchange of funds would be nice. But the technology isn't secure enough yet, IMHO. Even with Public-Key. Why? People don't want security if they actually have to do anything to accomplish it, and public-key requires a bit of work.
Plus people are stupid.
- Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
Confinity is a new interface to credit card transactions. As such, it suffers from the same old credit card problem: anyone who knows your credit card number can move money out of your account. This is a total show-stopper.
The best information-as-payment system i've seen was DigiCash. Unfortunately it doesnt look like that's going to be available in the near future.
The second best system is e-gold. It'd be straight-forward to write a PalmOS application that lets you "beam money" (in the sense of Confinity).
I offer $20 worth of e-gold to the author of such a program, provided it uses digitally signed contracts to avoid reputiation of beamed-but-not-synced payments.
Wasn't there a cole porter tune from the days of the depression:
Hey Brother, Can you 'pare a dime?
From what the site says, it basically allows you to take credit card payments. Probably goes like this:
You setup your Palm with the software.
You setup an account with Confinity (free-ish).
You can now take credit card payments with the software, OR beamed payments from other users.
When you "sync" the Palm with Confinity, the data is sent to them, and they actually charge the credit cards, and send the money to you or your account with them, whichever.
Bad idea becauses there's at least three points at which to break in and subvert the system.
-On the IR level, such as copying someone's transaction from a distance.
-At the software level, such as getting a legit payment, then hacking the software on the Palm to up the amount by a large number.
-At the return the data to Confinity, such as sending them records of transactions that never actually occured in the first place.
Plus probably more. Admittedly, all these three can be fixed with the right kinds of encryption, but I doubt they worried about that too much when writing the software.
Just don't use this for anything important for about a year or two, giving them time to work out the bugs.. Probably vaporware anyway..
- Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
This can only be done safely with encryption. The only reference to encryption I find on the site is in the company info section - it says "Our founding team combines backgrounds in finance, encryption, telecommunications, and the Internet."
Crypto can address issues of forged or duplicated emails (though I'll wait to see how they're doing it before I trust it). Of course, it can't address issues of crashed software, lost email, etc...
/* The beatings will continue until morale improves. */
I can't think of a good way to use this product. Don't forget that cybercash has had their e-cash available for web users for years. There is a few online banks that offer the same thing. Credits to be used on the Internet instead of money. This removes the fear of shooting your credit card across the net. (What fear anyways? like giving the number to a HUMAN over the phone is secure at all..)The product will be big for all of two minutes (it was slashdotted after all) and fade away just like the other technology that preceded it.
If I can beam the payment software to someone else, what prevents me from beaming a Trojan horse
or virus to the person's Palm Pilot and/or WinCE device?
1) As someone has already mentioned, what are they getting out of this?
I can only think of a few ways to make money on this, but none of them seem overly viable.
2) How is the transaction accounted?
Obviously, they must use both payee-dependence and payer-dependence. If only payee, the payee could get as much as they want. If only payer, the payer could --- oops --- reset --- his pilot. So, the two must agree. Further, the limit of accountability must be either based on the pre-deposited funds or some credit financing scheme as above.
If they do it this way, it seems fairly well accountable, from three axes. Of course, they'll need encryption and authentication and all of that, but that looks fairly sound otherwise... if they do it this way...
That, of couse, is the final concern:
They don't tell us, the future customers, their methods, accountability, and financial interests.
Seán C. McCord
What you're describing is basically the same as ATM cards that can now be used any place that accepts a credit card: damned near anywhere.
We've had ATM-cards-as-credit-cards in the States for a number of years now, and to be honest I don't think smart cards are every going to catch on. My money is stored in the bank. Why do I need another middle man? My ATM card deducts directly from my bank account, or I can get cash if I want, and Chase (my bank) now allows you to do bill paying from the ATM machine.
The day that smart cards become universal is the day they act like banks: you can do a person to person transfer on the spot, your money collects interest if you don't spend it, and if you want, I can get in Euros or kroner or whatever.
Wordnik, a dictionary project which aims to collect
How about credit cards. They're smaller than palm pilots. They're cheaper. They don't have batteries which can run out or leak. You don't need to use a Microsoft operating system on them. I've been using credit cards for years and years.
True, there has never been a episode where money is exchanged on Earth, or space Fed to Fed that used such a device. GPLat is used in transactions however Feds don't get paid with it, and after all, its hard currency. I thought Feds got replicator credits, but still they didn't store em on PalmPilots or anything similar.
- ATM's in Britain have incorrectly debited people's accounts. People still use them.
- A Slashdot item the other week mentioned the cashless-payment system in Singapore debiting people's accounts without confirming payment to the merchant when system overload caused transactions to time out. Apparently, they're still using it (and happy with it).
People will pay a price for convenience, and the early adopters are used to paying a price for being trendy. Looking at the behavior of the real human animal makes me think you don't study people that much. And Confinity is more Big Brother than a credit-card company in what way, exactly? And if he's only betting a ten buck lunch on it at first, he's a lot more likely to try it. That's the beauty of Confinity: you can start very small and build confidence. I really have to admire their business plan, it's got "genius" stamped all over it. "The thief believes that everyone steals." };-)>vaporware /vay'pr-weir/ n.
Products announced far in
advance of any release (which may or may not actually take place).
See also brochureware .
So spaketh the Jargon File
--
"L'IT c'est moi!"
(see subject)
rooooar
The problem with all these new transaction schemes is they all use credit cards for transactions, which is just about the most antiquated, brain-dead scheme around. It's easy to base electronic transactions on credit cards, because it just involves sending a 16-digit number plus expiration date and a name. That's lame because no matter how secure your transaction, credit cards themselves are inherently insecure. Just because my wireless payment gizmo is secure doesn't mean the waiter in a restaurant can't nab my credit card number and use it to order junk over the phone.
We need a payment mechanism that isn't so inherently insecure. One excellent one was that of the now defuct DigiCash. E-cash is great because it's anonymous, up until the point you try to cheat with it by using it twice. Credit card companies can't track you for marketing purposes. There's no simple 16-digit number guarding your account.
Of course the problem with e-cash, if you can call it a problem, is that you're going to have to pay a surcharge to use it. With credit cards, the companies make enough money off of people who run up interest charges, plus the vendor's fee, that the consumer doesn't need to pay any surcharges.
How about some kind of a compromise? How about an e-cash account where you can borrow money from it, and it racks up interest charges if you don't pay it back by the end of the month, but the company has no way of tracking your individual transactions, because you can check out the money in lump sums and they don't know who you're paying?
Comments?
Do the patents go to the receivers?
How about the patent assignment agreements with the employees who worked down to the end and didn't get their last paycheck? Does that void the assignment contract, thus returning the rights to the inventor?
How about patents in progress or inventions documented but not yet pattent-applied-for?
Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
One of the most important safeguards in processing credit card transactions is the authorization process done through an electronic clearinghouse at the time of transaction. I don't think I would feel comfortable holding onto a large amount of Ecash in my flash without a hardcopy authorization number to back it up. I suppose the authorization process could be done over a cellphone link to the clearinghouse realtime, but most clearinghouses prefer that you use reliable 2400 baud landline. As a geek alternative to having the waiter run around the corner with your creditcard number this still has possibilities.
One of the investors is Martin Hellman, famed in song, story and Diffie/Hellman algorithms. "Best known as co-inventor of public key cryptography", as they put it on the website. So, concerns about security should be addressed at least somewhat by his presence. d
www.HearMySoulSpeak.com
I believe the saying goes, a picture is worth a thousand words. Depicting something so physical as paper money in terms of bits and what-not seems more forgable than before.
Someone may bring up, ATM's.. but we never have direct access to their programming. With a PDA, we can just dump memory and inspect.
I am not saying there are no advantages, just the danger seems more ominous.
-
ping -f 255.255.255.255 # if only
http://www.wired.com/new s/news/technology/story/20958.html
According to this article, you beam your account number across Palms, and when the user synchs, your account is billed n dollars. So if you do a hard reset on your Palm, you just have to re-enter your account information. You don't "lose" any money.
My first impression when I saw this was "Wow, how long before someone writes an IR sniffer?" Luckily, they seem clueful. Dan Boneh and Martin Hellman (as in Diffie-Hellman encryption) both helped develop the software, so I imagine its reasonably secure. Plus, they use the high-test encryption, opting for security over exportability. IMHO more companies need to take this attitude. Then again, the government needs to get a clue and so do most software houses (hint, XORing passwords is NOT secure!).
I'll probably wait a little while for them to get the bugs out of a nationwide rollout, but I can't wait to be able to buy a jolt with my Palm III!
Why can't I moderate something "Wrong" or at least "Grossly Misinformed"?
..I like my money. I can't be traced, refunds are easy, and I know if someone's trying to use my money.