What an attacker gets from Apple devices if they sniff Bluetooth traffic
Here's the problem space - I'm interested in how HN would design AirDrop without this information leak:How do you allow two mutually untrusted client devices to determine that they share a common 9-digit number, without disclosing the secret? And for bonus points, how do you allow this to happen without two-way communication or access to a central authority?