Android - Casual Payments

StevieJ

I think someone on here inferred I was technophope because I said I didn't trust the under £15 Smart phone casual payments system. Anyway if you lose your phone someone may be making casual payments on your behalf if you are not quick a block your card :eek:

Turns out it's not necessary to decrypt the PIN, or even hack into Google's Wallet, just ask the phone nicely and it will let anyone root though its innards.
The flaw was spotted by The Smartphone Champ, and unlike yesterday's efforts which required root access and a modicum of brute force, this hack barely qualifies for the term, as it just involves asking the phone to reset the application data. That wipes the stored PIN, but not the card details, so a new PIN is entered and transactions immediately become possible

http://www.theregister.co.uk/2012/02/10/google_wallet_again/

Gromitt

I'd never trust my phone to contain such sensitive financial data. I don't trust Paypass/Paywave either.

Plus, I wouldn't want Google knowing what I'm buying. The same as I make sure I sign out and clear cookies before performing a google search. The search may well be completely innocent, but I don't want it recorded against my user id thanks.

Fruit_and_Nut_Case

StevieJ wrote: »

I think someone on here inferred I was technophope...

I don't remember that. Can you post a link, please? Thanks!

StevieJ

Actually it wasn't mobile phones it was contactless credit cards that I was querying last time.

jpwjpw

Google Wallet has been suspended, but it has never been available in the UK anyway.

I have one of the new phones with NFC. I'd love to use my phone as a oyster/payment card. Lets hope they sort it out

Buzby

There is a greater risk of financial loss with a contract mobile phone, which can run up debts of £5,000 against the contract holder, until the service is suspended. Mini-payments will only be authorised whilst credit remains, and I doubt anyone will have loaded it with anything like that amount of money.