after thinking about how to proceed with the tag in my collar, I think I'll do the following
beyond fixing the current issue, I already wanted to experiment with other variables like: - comparing the Apple find network with the Google find network - comparing the nrf51822 with the nrf52832 - try to put different stuff in the status bits for the advertisements (like data of the different components in the board I might have access to)
so, I think for now I will flash a simpler static key rotation firmware in the tag so it works again, and use the other chips I have to experiment. in the future, if any of those experiments makes for interesting results, I might offer Miss if she wants to replace my tag with an updated one
all this tinkering it's proving more difficult than I expected (or at least, difficult on the parts I didn't expect to and simpler on the ones I expected issues from), but it's being nice, and I'm learning stuff
okay, so, I have the firmware ready for flashing. I do have to adapt the cron fetcher though... but how will I know what key to fetch? I could calculate it via timestamp, of course, but then I have to account for potential time lost by the tag, and also fetch the previous ones, then order by the report's timestamp I guess...
maybe I can just always fetch the key in the current index, the previous one and the next one. compare the timestamps, keep the most recent one, and write which index that was. and repeat that every 15 minutes
@lis oh but I'd need several of them to take 24h shifts, and then they might organize and unionize, and start asking me for pats and stuff, and I'd of course want to do that, so it'd be a temptation for distraction...
@kitten you're weird, when I ask inhumane things of the being under my control, they usually don't unionize or demand anything from me. Instead they tend to tell the internet how this is the right thing for them, how grateful they are that I am doing this to them, and so on
@kitten yep, that seems sensible. it's similar to how it's done for hardware token/TOTP authentication. There's also the challenge to sync the time of the hardware token to the auth server and account for clock skew/drift.
reminds me of the old RSA token i had for work 5 years ago before switching to a software token.
1
1
1
1