My 8 year old just bought a £150 app on our ipad!

rockin_plumber

marleyboy wrote: »

?........ but what if it got stolen....just how many purchases could be downloaded before Apple stop them.

This is what you have auto lock and a passcode for....

At the end of the day the security of your device is down to you :o

AirCooledHeaven

Sorry to be harsh, but if you're going to babysit your kids with an ipad then you really need to understand the potential pitfalls of doing so. Yes it's irresponsible that developers and apple can reap so much from in app purchases, but ipad owners have to take some responsibility too, and not point the finger at everyone but themselves.

But take a look at this, hopefully you'll have a good chance to recover your loss.
http://www.usnews.com/news/articles/2014/01/16/apple-refunds-325-million-for-kids-app-purchases

marleyboy

WTFH wrote: »

I don't agree with it either - but it is the standard MSE line.

I do have an issue with children using devices not meant for them (this is not a dig at you in particular), and think that Apple would make life easier for themselves if they only sold the product to responsible adults. Make the iPhone & iPad over 18s only and make sure that the AppleID belongs to the bill payer.
If the kids want something to play games on, get them a Samsung or a Nintendo.

Cannot agree to that. My Son has an iPad and he is only 4. He got it as part of his disability, as it is the perfect aid for his autism. Indeed his SN School has one for every child.

spacey2012

The Words Apple and money saving are Like Fish and Bicycle
Your hand is never out of your pocket with Apple products.

WTFH

spacey2012 wrote: »

The Words Apple and money saving are Like Fish and Bicycle
Your hand is never out of your pocket with Apple products.

Spoken as a true devotee of MSE Apple-hatred.

Funnily enough, Apple are praised for repairs under and outside warranty and if you think all Apple products are useless, then you've never used a Microsoft product in your life.

sax11

Always thought you had to sign up to apple id and the store with relevent card information when you create an account and then you had to log in with a password whenever you wanted an app.
Maybe that's the default setting. Then again i only get free apps as i loathe the thought of paying apple anything.

warehouse

AirCooledHeaven wrote: »

Sorry to be harsh, but if you're going to babysit your kids with an ipad then you really need to understand the potential pitfalls of doing so. Yes it's irresponsible that developers and apple can reap so much from in app purchases, but ipad owners have to take some responsibility too, and not point the finger at everyone but themselves.

But take a look at this, hopefully you'll have a good chance to recover your loss.
http://www.usnews.com/news/articles/2014/01/16/apple-refunds-325-million-for-kids-app-purchases

Loss recovered and you need to read the whole thread if you're going to be harsh. As I said earlier, if I get caught out again then I am 100% at fault, but for so many people to be caught for so much money and Apple to be fined in the U.S. for what can only be described as "dodgy" practices means that no, I am not completely at fault here.-

warehouse

securityguy wrote: »

Storing the CV2 (the three digit, four digit on Amex, security code) is absolutely forbidden under all circumstances by payment industry compliance rules. You're not even allowed to put them to disk temporarily while processing the transaction: if a merchant puts the CV2 anywhere other than RAM while processing transactions and get caught doing so, they are at serious risk of either losing their ability to take cards or being forced to accept substantial additional costs in doing so.

What happens in fact is that the first time you make a purchase, the merchant (here Apple) passes over the whole bundle of identifying information, including the CV2 and (in some cases) your address. They get back an approval from the card issuer. The merchant is taking a fairly small risk on the card being fraudulent: their merchant agreement will say "provided you pass us the full bundle, we'll indemnify you against the card being stolen".

Thereafter, the merchant can (at their choice, risk and agreement with their card processor) simply charge further transactions to the card without passing all the extra information over. They know that user xyz used card 1234 successfully to deliver stuff to 1, Second St, Third Town and didn't get a chargeback raised, so it's a reasonable risk to let them do it again. They don't get the same indemnity from the issuer, so if it goes wrong it's more of the merchant's risk.

But most merchants will have statistics for the "abandoned carts" problem (how often people put stuff in their trolley and then leave the website without paying), and will reckon the small risk of being caught by a user contesting the payment is worth it to get people who completely want to buy, but don't have their card with them, or are in a hurry, or give up because of the 46 screens it takes to provide all the information are too boring. So they take the risk on accepting payment without the CV2 in order to smooth the order process. For most people, that's the right trade off.

Personally, although I know my machines are nailed down a lot harder than the typical system, and I check certificates with a trained eye, I still find typing the CV2 into a web page pretty scary. There is _much_ more risk for most people in providing the CV2 for each transaction than allowing the above process to happen.

Excellent post, much appreciated, as is the one after it. It adds to the knowledge and will help others to better understand how it works.

warehouse

sax11 wrote: »

Always thought you had to sign up to apple id and the store with relevent card information when you create an account and then you had to log in with a password whenever you wanted an app.
Maybe that's the default setting. Then again i only get free apps as i loathe the thought of paying apple anything.

You can sign up and have no card or any payment method applied to the account. When you make your first purchase then they ask for a card and store the card details without asking your permission, (note that I didn't say they stored your 3 digit security code securityguy) .

MoneyMate

warehouse wrote: »

Now I have all the facts I still think the system is deeply flawed, but yes, I have to take some of the blame for not taking more notice of horror stories I've read about with apps before. Hopefully this thread will help someone else to not fall into the same trap.

My 8 year old is beside himself with worry despite my assurances to him that it simply isn't his fault. It happened much too easily and obviously is a regular thing with Apple.

Sorry to be so critical but I do hope you get this saga sorted soon, I think everyone learns by their mistakes ( I certainly have on many occasions ) :beer: