Randomoracle

I followed the steps here[1] to get the Authy TOTP token and then put it in 1Password. One less app I have to deal with. [1] https://randomoracle.wordpress.com/2017/02/15/extracting-otp-seeds-fro…

Oh I took that part for granted. Sorry. I don't know how it is implemented, and this source is not a scholar paper, but worth looking. http://randomoracle.wordpress.com/2012/08/25/cvv1-cvv2-cvv3-demystifyi… > Swipe transaction are perhaps easiest to describe. The data encoded on the magnetic stripe is static, formatted according to ISO7813 in three tracks, with the third one typically unused. One of the fields in this track layout is the Card Validation Code (CVC) or CVC1. which serves as a cryptographic integrity check on the track contents. I think that makes sense from someone who doesn't understand how the security of credit card works. But if online purchase requires one to give up the cvv code, then verifying a physical card would also require one to be able to read that code.

I think this topic came up a week or 2 ago, and I made an almost identical comment as you, which was why the content of my reply was fresh in my memory. Anyway, in the recent convo, a kind hn poster provided this explanation of CVV https://randomoracle.wordpress.com/2012/08/25/cvv1-cvv2-cvv3-demystify… I totally see why it just seems like "moar numbers" though, and I find them unnecessarily annoying. I wish they could reduce the complexity (maybe letters, colors or shapes, something more human-compatible), but there's just too much legacy code with too little benefit.

[1] says the decryption key is derived from those pieces of information, and the key derivation logic is public info, e.g. [2] is an implementation. It's somewhat clever, if someone takes a photo of the first page, they already have your personal info, to steal it from the chip they still need to have visual on the info on that page. [1] https://randomoracle.wordpress.com/2012/08/27/reading-the-us-passport-… [2] https://github.com/AndyQ/NFCPassportReader/blob/main/Examples/Example_…

CVV is not just more entropy, it's handled differently: https://randomoracle.wordpress.com/2012/08/25/cvv1-cvv2-cvv3-demystify… The whole point is that you can't skim the CVV2 from the magnetic data and then use it to make purchase.

Bitlocker is a bad idea. http://randomoracle.wordpress.com/2013/09/16/all-your-keys-are-belong-…

It's my understanding that the CVV3 is cryptographically generated for each transaction (like HOTP), and that the cardholder's name is not available over NFC. So you can't steal personal information or use the card undetected. A bit of reading regarding the CVV3: http://randomoracle.wordpress.com/2012/09/11/cvv3-demystifying-credit-… I'm not 100% sure about the name not being there, however.

> cheap loans a loan that might double in the amount of fiat you have to pay back isn’t cheap, it’s nuts. Also there’s significant cost converting to and from fiat to take it out > filecoin https://randomoracle.wordpress.com/2019/12/07/filecoin-storj-and-the-p… > LabDAO Toucan Golden.xyz Why not just a centralised database though? > Radicle.xyz OK sure, if you have code that GitHub won’t accept, then this looks ok, but presumably it either has a mechanism to stop CSAM on it, at which point it can also be censored, or the Feds are coming for you if you run a node… > Helium - Incentivization layer for the LoRaWAN network Some kind of payment mechanism for sharing Wi-Fi? I didn’t have time to dig deep enough, but almost certainly a centralised authority would work better because it almost always does > NFTs Better handled by a central authority, and looks like OpenSea is already acting as one re stolen apes etc > A blockchain is not a database … A blockchain is an escrow without a third party And the lack of use-cases for that is the reason there are so few use-cases for blockchain