Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Give user feedback for mistyped beacon id #71

Open
je-l opened this issue Aug 31, 2019 · 1 comment
Open

Give user feedback for mistyped beacon id #71

je-l opened this issue Aug 31, 2019 · 1 comment

Comments

@je-l
Copy link
Collaborator

je-l commented Aug 31, 2019

Currently user receives no feedback when invalid beacon id is given. Location is simply not visible on map.

Ideas:

  • Always require that the given beacon id is known, so that location data includes the given id, and user cannot give unknown beacon id.

  • Prompt the user if they really want to use unknown beacon id. The advantage would be that user can "register" the beacon id and then enable bluetooth later on, finally seeing the location on map.

@ptesavol
Copy link
Member

I think we need to consider carefully the implications of different policies of handling beacon IDs, but this doe not need to happen during the current project.

One idea is that people could claim ownership of beacon id:s. This could happen so that the user would be required to give a password (also "repeat password" field is obviously needed) when introducing a new beacon id to the system. After this, all subsequent changes to the settings (visibility, deleting etc.) of the beacon would require this password.

An obvious way to attack against this kind of system would be to listen to all beacon traffic with an android app, and claim ownership of all seen beacon ids. Maybe this attach could be overcome by asking the user to bring the beacon within 10cm of some specific scanner tablet to complete the beacon id registration. This could also be a great opportunity perform the normal signal strength calibration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants