Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Just look a few pages back in the thread, where the user Menel explained what sets Apple Pay apart from other mobile payment solutions. It's nothing that other companies can't use, but Apple is leading the charge right now.

You keep saying there needs to be trust in Apple with financial information. But if you knew the details of Apple Pay you would know Apple doesn't store account information, nor transaction information. So there is no financial data to store to trust them with.

So even if they did get hacked again, what financial information is there to steal?

It all sounds so simple, doesn't it?

What could possibly go wrong?
 
People thinking this will get rid of cash are delusional (that or drink too much Apple Kool-Aide). Apple Pay is just a convenience, not a currency replacer.

It's not suppose to replace currency, that's being done with Interact, credit cards, Paypal and other like services, and e-transfers. Most people here don't think that it is a replacement for cash. You're simply assuming we do for some reason. All Apple was saying about ApplePay was that it was a replacement for your wallet so you don't have to carry all your cards around.
 
How difficult is it to load a credit card into your phone's profile? I guess I want to know what / how it is verified that I am the owner of the CC. Do I have to go in to my bank account to authorize the card onto a specific iPhone or iTunes acct? The fear that I'm trying to alleviate is someone loading my card onto their phone. (I'm not actually that concerned with this as I suspect when I see the final process, I'll be satisfied with the difficulty and safeguards.)

The documents I have seen from First Data say the tokenization process includes validation and approval by the card issuer.

I would expect it to require the CVV at a minimum, and probably a correct billing address.
 
The method Google uses guarantee that all transactions first are routed to Google and their sponsoring bank. It is done to gain insight in someone's buying patterns so more personal targeted ads can be presented.

Using tokenization instead, and all transactions routed directly from merchant to acquirer will not work for them if they still want the shopping patterns. Which is why I am not sure they will hurry with this implementation. It goes against everything they wanted to do with their wallet concept. And you can't combine both methods.

I could see Google using a method similar to Apple's, but with a relationship to the banks where the banks would give up this information to Google in exchange for money. Wouldn't be as profitable as Apple's model where Apple gets money.
 
Uhh, everyone knows the nudes came from iCloud. Those who stole the nudes even said so, and documented how they got around Apple's incredibly lax security in order to steal them.

Not all were from iCloud. Not all celebs were using iPhones. And it was a community of hackers getting into celeb accounts of various cloud servers, Apple's iCloud being one of them.
 
US credit cards usually have a PIN, but it is for cash advances at an ATM. It is not used for retail purchases.

You're right. I guess I can do that - but why would I pay a 20% interest (which starts IMMEDIATELY, no grace period) and a cash advance fee to do this?

But, you're right - for ATM withdrawals ONLY, this PIN is used. I've never done one, so I don't have any clue what those PINs might be, or what is required to set them up.
 
It all sounds so simple, doesn't it?

What could possibly go wrong?

Your point? I'll ask again and maybe you can actually answer the question:
So even if they did get hacked again, what financial information is there to steal?
 
Your point? I'll ask again and maybe you can actually answer the question:
So even if they did get hacked again, what financial information is there to steal?

I'm sure the Apple Pay token generator will be a much more valuable target than someone's financials...
 
Who pays here? The stores get charged by the credit or bank debit card I am sure. Does the iPhone holder also take a small hit?

The merchant pays the same fee as for a presented credit card.

The iPhone holder pays the same amount as he would pay with a credit card.

The issuing bank pays a small amount of their fee to Apple: 15 cents per $100 charged.
 
I'm sure the Apple Pay token generator will be a much more valuable target than someone's financials...

The little we know about how tokens are generated are that you would need AT LEAST three things:
  1. The original account number
  2. The device-specific identifying information to help generate the token
  3. The token algorithm

If you got the algorithm, it wouldn't do much good without the other two things.
 
No you don't. Tap to Pay is common in Canada; just tap your card and pay. There are limits but I have seen up to $200 accepted so a lot of damage could be done with no PIN required.

Wow, forgot about those kind of cards. That's even more scary.
 
It's probably a US thing then. NONE of my credit cards have pin numbers, and nobody I've ever known has had a pin number for a credit card.

You simply swipe the card at a teller and go. No signature either if it's less than $50 at most merchants.

And at a gas station for a $50 fill up, just swipe and go at the pump - no teller to even confirm that a male is using a card with the name Mary. It's very lax here in the US - which is part of the problem.

agree that cc security is pretty lax in the u.s.. at gas pumps though (and some other places) they at least require the zip code of the billing address to be entered.
 
Who pays here? The stores get charged by the credit or bank debit card I am sure. Does the iPhone holder also take a small hit?

The credit card companies all charge around 2% of the cost.

If an item at a store costs $100, the card holder pays $100. The store only gets about $98. Of that $2 that mastercard/visa/amex/discover gets, Apple gets a small portion of that, about 15 cents.
 
Wow, forgot about those kind of cards. That's even more scary.

I've been doing this with my American Express Blue card since about 2003. In the US. So we have had NFC for quite some time. It just hasn't grown much. The times I used it was great but it was always a crap shoot if it would work.
 
agree that cc security is pretty lax in the u.s.. at gas pumps though (and some other places) they at least require the zip code of the billing address to be entered.

Some gas stations around my area have started asking for zip codes, but most still do not. It probably varies where you live, and where high crime areas are.
 
If this system they have come up with lets you pay for anything up to any amount, I would personally be hesitant of using it for high amounts for a while, it's security would need to prove itself first.

I think this is already handled by the credit card company or bank -- nothing different than how it works now.
 
If this system they have come up with lets you pay for anything up to any amount, I would personally be hesitant of using it for high amounts for a while, it's security would need to prove itself first.

I would think ANYTHING is more secure than the current system. Credit cards are stolen all the time. Physically stolen is the least of my concern - it's usually some cashier at some store that swipes the card under the counter or someone hacking into accounts at a store.

Anything that doesn't transfer my credit card number at a store is welcome to me. Apple Pay is very intriguing.
 
This, along with a bigger screen and swipe keyboards is why I'm coming back to iPhone after using android for two years.

I used google pay and never felt secure as my PIN could potentially be stolen. Stealing a fingerprint is a "wee bit" harder.

And for those people with pin and chip cards, remember this. You still have to type a PIN. I lived in the UK for several years. PIN's are a lot easier to steal than a fingerprint.

How do you steal a pin from your head? I've never written down pins anywhere.
 
I think this is already handled by the credit card company or bank -- nothing different than how it works now.

Yes it is very different, in the UK any current system we have for contactless payments is limited to very small amounts for the purpose of reducing any fraud, if this Apple system lets you spend any amount then it is very different to any current system in the UK.
Then again we don't have Apple pay and I have no idea when it will be launched in the UK, and if it if the regulators will allow the system to let you spend any amount you want.
 
Last edited:
A Comprehensive Outline of the Security Behind Apple Pay

Who pays here? The stores get charged by the credit or bank debit card I am sure. Does the iPhone holder also take a small hit?


Not consumers, not merchants, VISA does.

Typically VISA gets $0.10 + 1.20-1.65% of transaction.
Apple gets 0.15% of the transaction, taken from VISA's cut.
 

The article is doing some reality distorting of its own.

The examples from Microsoft and Google are proprietary solutions that require giving financial information to another party on top of the ones already handling it. Thanks, but I don't need their help.

The one in Japan is a closed system to replace cash in some instances. The cited article even admits it isn't popular outside that country.

The EMV standard uses existing systems, and Apple isn't inserting itself into the process. It's also worldwide, if issuing banks choose to participate.

Apple isn't late to the party: they waited until the party was really ready to start.
 
I believe those merchants who committed to :apple:Pay and were mentioned in the keynote have committed to having capable POS terminals in ALL their locations (not sure by what date however, but the commitment is there to upgrade them all).

Which is what I was eluding about.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.