Nostr Web Client

See that white dot? That’s a NFC device that has been provisioned to accept and send payments on behalf of the #nostr #safebox wallet on the left.

The vision I have is that you can carry this white dot at all times and access a payment network where you can send and accept payments out in the real world independently of your phone. If you look closely, you see the payments sent and received via the “white dot”.

I am also experimenting with the sharing of emergency information. If the white dot is read, it could present your emergency information to a first responder. Still working through the security and use case considerations, but it can be done!

Onward!

Reply to this note

Please Login to reply.

Discussion

Martin Mladenov 7mo ago

It could be a game-changer for Bitcoin payments, making them super easy for everyone to use. Let’s see them say Bitcoin is too complicated after this!

Tim Bouma 7mo ago

Exactly.

. 7mo ago

This is just safebox to safebox correct?

Tim Bouma 7mo ago

Yep. I had it implemented in a previous iteration- on my todo list with my #nauth protocol-.secure transmittal of ecash via #nauth if the other address is a safebox address. Doesn't touch lightning at all.

. 7mo ago

ok, I was playing this morning seeing if I could tap a nfc payment to zeus cashu via a zeus lightning invoice using safebox nfc card but it didn't pay the ln invoice.

Tim Bouma 7mo ago

Only safebox to safebox for now.

semisol 7mo ago

Is this just an nsec on an NFC tag

Tim Bouma 7mo ago

Nope. It’s an encrypted tag that only the issuing service can decrypt. The transmission is also signed and verified to confirm it’s coming from a white-listed issuer and acquiring service.

Tim Bouma 7mo ago

If the holder has lost it, or think it’s compromised- they can immediately re-issue, rendering the old tag useless.

semisol 7mo ago

Or to phrase it better

Is it possible to read the tag without authentication and does having the data on the tag provide full access to the safebox

Tim Bouma 7mo ago

Yep, you can read the tag. Layered security my friend.

Encrypted tag, needs to be read by the acquiring server that signs any requested that are forwarded. The wallet service is accessed via a NWC secret (encrypted on card) that can be rotated at will. The wallet nsec is not exposed. Only the NWC service has the full security context to do anything on behalf of the user. The encrypted tag , if spoofed, can only be submitted by a 'trusted' server - an npub on a white-list otherwise the call won't be honored. Can easily graft on real-time fraud detection at the NWC server, if I want. Just another layer.

Still implementing all the pieces, but a layered approach.

semisol 7mo ago

Okay so it’s basically an overly complicated way of saying cloneable magstripe

Tim Bouma 7mo ago

But it's cheap!

semisol 7mo ago

For $1 more you can get about 50x more security

Tim Bouma 7mo ago

Which is perfectly fine. I can layer that all back in when the time is right. The goal is accessibility first - enable someone's crappy Android phone to send and receive payments, first.

And by the way, $1USD is about a day's wage in most parts of the world. The tags, I can get as low as $0.10 and whi h can be provisioned and used without a phone.

Don't get me wrong, I take security very seriously, but in certain parts of the world, you can't even carry a phone with you, much less have the updated gear to read a smart card.

semisol 7mo ago

If you can read an NFC tag you can read a modern smart card

Tim Bouma 7mo ago

Technically yes, but those smart card are looking for some extra stuff before they return anything.

As I stated earlier, it's easy to layer this stuff on later, when warranted.

DisparateBits 7mo ago

put AI in it and Sam Altman might offer you a couple billion! You could beat Ivy to the punch 😂

In all seriousness, neat project, I like seeing all the work you're doing on this stuff.

frphank 7mo ago

How much is the data on the tag? Can't it just fit into a QR code?

hasky 7mo ago

i just check out Catallax network and i think this is something very promising and spectacular ,where its decentralized pseudonymous work-economy nostr:nprofile1qy8hwumn8ghj7erpd46hxtnfduhsz9nhwden5te0v4jx2m3wdehhxarj9ekxzmny9uqzqth65u2mhdrd6klxkldg6acqyek3ze6tjyacz79dmdwzuc7esue3kjztwa .

this is no boundaries , no permission , no state interference 😍

vinney...axkl 7mo ago

I appreciate that! gotta get it done now 🤌

vinney...axkl 3mo ago

btw a demo of this is live now: https://npub1cyqjvgjver3v9affrr64tmsetxwyf0jf4sumsnmj3zsel5md4ynqku9kka.shakespeare.to/catallax

hasky 3mo ago

Will check that out

hasky 7mo ago

this white dot remind me of battery for my weight scale 😅 . how does it work ? you can carry it everywhere and just tap that white dot into payment station , so you don't need to bring your phone ?