MSE News: TSB current account customer? You can now earn even more cashback

bsms1147

ChopperST wrote: »

Quick google search shows a device that's linked to an android handset successfully cloning an NFC contactless card. They then use the NFC on the phone to make payments using that card. That is clearly what has happened to mine.

All it takes is a compromised card reader to do the same to a phone.

Is that same method possible with the two-factor authentication of Apple Pay though? Wouldn't you also need a person's fingerprint?

knack92

ChopperST wrote: »

Quick google search shows a device that's linked to an android handset successfully cloning an NFC contactless card. They then use the NFC on the phone to make payments using that card. That is clearly what has happened to mine.

All it takes is a compromised card reader to do the same to a phone?

I am very tech savy but this incident has me doubting the security features in the new technology.

The NFC chip in Apple devices is only useable by Apple Pay just now so I disagree that Apple Pay is next to be hammered.

20aday

knack92 wrote: »

The NFC chip in Apple devices is only useable by Apple Pay just now so I disagree that Apple Pay is next to be hammered.

The "Secure Element" within the iPhone/iPad/Apple Watch should mean it'd be highly unlikely for it to be compromised.

In fact the blurb from Apple's website says:

Every time you hand over your credit or debit card to pay, your card number and identity are visible, and swiping your card triggers an exchange of information. With Apple Pay, instead of using your actual credit and debit card numbers when you add your card, a unique Device Account Number is assigned, encrypted and securely stored in the Secure Element, a dedicated chip in iPhone, iPad and Apple Watch. When you make a purchase, the Device Account Number, along with a transaction-specific dynamic security code, is used to process your payment. So your actual credit or debit card numbers are never shared by Apple with merchants or transmitted with payment. And unlike credit cards, on iPhone and iPad every payment requires Touch ID or a passcode, and Apple Watch must be unlocked — so only you can make payments from your device.

ChopperST

Fair enough, wont be using it.

colsten

ChopperST wrote: »

I am very tech savy

So how do you steal or clone my fingerprint, which is needed to authorise my payments with Apple Pay?

SeduLOUs

colsten wrote: »

So how do you steal or clone my fingerprint, which is needed to authorise my payments with Apple Pay?

Some guys made a youtube video about this and showed it was actually possible to take a silicone imprint that would actually unlock an iPhone.

The tricky bit would be taking a cast of someone's hand (and phone) without them noticing though!

For a bit of general interest viewing: https://www.youtube.com/watch?v=2u4ZLGsw1zo

bxboards

Not quite sure what the big deal over Apple Pay is, as only a small minority of people have the hardware capable of using it, and an even smaller minority will choose to pay that way even if they have the hardware.

My local post office got their first Apple Pay payment last week, and I think they must have had the capability for 4 or 5 months - it was big news!

It will only be a matter of time before someone gets their Apple phone stolen and their finger chopped off to use the finger print unlock, as it's not capped unlike Contactless at a 30 pound limit in some places, then I'm afraid this will happen at some stage.

bellybuttonfluffman

bxboards wrote: »

Not quite sure what the big deal over Apple Pay is, as only a small minority of people have the hardware capable of using it, and an even smaller minority will choose to pay that way even if they have the hardware.

My local post office got their first Apple Pay payment last week, and I think they must have had the capability for 4 or 5 months - it was big news!

It will only be a matter of time before someone gets their Apple phone stolen and their finger chopped off to use the finger print unlock, as it's not capped unlike Contactless at a 30 pound limit in some places, then I'm afraid this will happen at some stage.

Walking past a Greggs the other day and got an urge to grab one of their cheese & onion pasties. I was about to pay cash (£1.20) when I noticed the Apple Pay sign. Didn't have my TSB cards with me but did have my phone, so... beep beep... 6p cashback.

colsten

bxboards wrote: »

It will only be a matter of time before someone gets their Apple phone stolen and their finger chopped off to use the finger print unlock

:rotfl::rotfl::rotfl::rotfl::rotfl:

...........................................

knack92

bxboards wrote: »

Not quite sure what the big deal over Apple Pay is, as only a small minority of people have the hardware capable of using it, and an even smaller minority will choose to pay that way even if they have the hardware.

My local post office got their first Apple Pay payment last week, and I think they must have had the capability for 4 or 5 months - it was big news!

It will only be a matter of time before someone gets their Apple phone stolen and their finger chopped off to use the finger print unlock, as it's not capped unlike Contactless at a 30 pound limit in some places, then I'm afraid this will happen at some stage.

Good plan in theory but Touch ID does not work with severed fingers.

http://www.engadget.com/2013/09/16/why-a-disembodied-finger-cant-be-used-to-unlock-the-touch-id-se/