Bump
tbray.org
tbray.org
All of my attempts since had no effect. Granted, I haven't tried to bump that many times.
My theory is that they use a GPS location to determine where you are. Then when the phone senses a particular type of motion, it considers that a "bump". The server looks to see if anyone else is "bumping" in that GPS location, and, if so, they connect and exchange contact info or whatever.
If this is true, it explains my original success with bumping into strangers: these two people were probably in a nearby house trying to bump! The server thought they were close to my GPS location, and connected me to the stranger.
2) No, the bumping together seems to be perhaps calculating two similar accelerometer signatures within a certain probability (of course location seems to be their secondary heuristic).
3) I don't see why this should this insecure. They are probably using Diffie-hellman for some pretty badass security measure - http://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exch...
4) To those who don't think this is not going to make any money on the "business" side, maybe you should tell Sequoia, one of Bump's funders, that.
Historically, most "rocket science" grade technical implementations in software/Web fail, except for stuff by NASA (and the likes). Keep it simple under the hood, but no simpler than what's absolutely required.
The big thing isn't the literal "rocket science" part, just the "easy" part where you don't realize that the problem might have been difficult at all.
Compare to: lightly tap your phones together.
Bump your phones together. Bump them together again. Wait for both to connect to the central Bump server, potentially failing to do so. Approve the transfer. Accept the transfer.
Now, lets assume the same amount of development effort goes into writing a proper interface for Bluetooth transfers. It could be something like:
Put two phones near each other. Drag an image/contact/money onto the "Bob's Phone" on my screen. Bob drags it from his inbox to wherever he wants it.
That seems easier to me: it doesn't involve third parties[2], complex bump-matching heuristics, or physical contact.
[1] http://bu.mp/faq
[2] Even if Bump's servers have 100% uptime, how do you know that the local cell towers will have similar records? What if you're in San Francisco or New York, which have notoriously poor iPhone reception?
I am sure Bump uses more than mere cell phone reception, for iPod Touch is supported, which means wifi must/can be involved as well.
In a perfect world, yes, Bluetooth would do what it's meant to do, but in the real world people like to bump into each other :-)
The official recommended bumping techniques is hold phones, and bump hands. Like a fist bump. That eliminates the risk of damaging your phone and actually works better.
The long-term goal is to bump more than contacts and pictures. For instance you can bump money using the new PayPal app on iPhone.
Interesting -- could you elaborate more on this? I've never had a problem getting two Bluetooth devices to communicate. If my old laptop, older cell phone, and modern headset can all interoperate easily, I don't see why two months-old phones from the world's leading technology companies won't work together.
Uh, on Android? False:
http://developer.android.com/reference/android/bluetooth/Blu...
As opposed to GPS?
So this means that you have to send your data through their central servers. Yes, it is encrypted, etc. but I would feel much safer if it were encrypted and sent locally instead.
Also I am sure as it gets popular there will be issues with timing, such as different people bumping at the same time, or the bumps being mistimed, due to differences in the way the wireless networks of two different providers time stamp the various notifications.
So it seems that while the act of bumping may give an impression of security (i.e., that you know for sure who you are sending your data to), this impression is illusory which means you will have to authenticate the recipient anyways, so you might as well use bluetooth.
And as somebody else noted if they devoted the same efforts to bluetooth, I am sure they could make their app just as nice. And they can also use bumping to initiate bluetooth transfer too.
It seems that they are eerily insistent on transferring the data through their servers.
I think there are some folks at the MIT Media Lab who were experimenting with using touch as a way to establish relationships between devices (e.g., you touch a light-switch panel to a lamp, then stick it anywhere on the wall, and that switch will control the lamp it was bound to), but obviously current cellphone technology doesn’t support that.
The alternative to mutual authentication is to have a trusted third party, and that’s what the Bump server provides. Using the server to create the illusion that information has passed from phone to phone by osmosis is, IMHO, a neat hack.
Judging from their job board, it's because they plan to mine the data.
"At Bump we have a diverse collection of data sets: network performance, user behavior, social network data, and many types of handset data [...]"
I'm sure the central server is and always will be benevolent and benign regarding the knowledge it gains about its users, their associates, and the information they convey.
I think I might have to code up an implementation of this to see how well the vibrations between phones match.