Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Won't matter... This is a gimmick feature that'll fade in a year like Siri. One data breach is all it'll take to ruin this, and it's clear tech companies have zero interest in security.

Do you have any idea how much credit card fraud happens? What about the recent Home Depot and Target breaches where they exposed millions of card numbers?

That's not to say there will be ZERO fraud with this system, but it will be incredibly small in comparison. The damage someone can do with a temporary token is nothing in comparison
 
And ensure Apple Pay secures a stronghold before letting competitors use iPhone's NFC for payment.

No doubt Apple's implementation of NFC payment will be excellent, but if it's restricted to iPhones, it's restricted to a minority of smartphone users. How does Apple Pay become dominate when Android is the more ubiquitous platform? The most likely outcome is that we'll be able to use Apple Pay at large retailers, but mom and pop stores will opt for the most popular NFC payment system.

This could bite Apple in the arse. If the iPhone isn't open to other payment systems, then Apple Pay becomes another hurdle for anyone contemplating switching from Android to iOS. It sort of reminds me of the era when Macs couldn't easily network with Windows systems.
not true this America and Americans go with more popular. Also this is we're the IBM partnership comes in, they have a huge sales force. Not even a week and I'm starting to see :apple:Pay in banks. Just went to the ATM chase bank changed their logo to Chase | :apple:Pay. That's a huge statement.

Visa | :apple:Pay
http://usa.visa.com/clients-partners/technology-and-innovation/apple-pay/index.jsp

MasterCard | :apple:Pay
http://www.mastercard.us/mobilepayments/index.html?cmp=ilc-mc.us.index.thumbnail.MOBILEPAYMENTS
 
Last edited:
I agree with you. Though for a retailer will they have to offer two NFC terminals one for ApplePay and the other for Android NFC users?

I don't think so. I think as Apple establishes partner ships, ApplePay Sensors will either be implemented for the first time or will replace existing NFC sensors. Once the doubting parties see the response it gets and the level of usage it gets, others will follow suit.
 
By limiting the use of a feature on a device you sell where consumers have the option to buy a similar device from other manufacturers? I don't think you understand what anti-competitive means.

That's because you aren't that smart. This is limiting you to using ApplePay with NFC. It is anti-competitive because it isn't allowing you to use Google Wallet or PayPal as a mobile payment device.
 
What are you talking about. There has been Google Wallet way before Apple Pay came out. Same with Soft Card and other systems.

I'm buying the new iPhone 6+ but when I see others using Apple Pay I won't think this is the reason I wanted it. I'll think, it's about time Apple caught up with everyone else.

I am not familiar with any aspect of Android.
 
What are you talking about. There has been Google Wallet way before Apple Pay came out. Same with Soft Card and other systems.
google or any other tech company has not been able to penetrate the financial industry. Until now :apple:Pay is not some sort of mobile wallet.
 
http://www.freepatentsonline.com/y2014/0019367.html[/url]

METHOD TO SEND PAYMENT DATA THROUGH VARIOUS AIR INTERFACES WITHOUT COMPROMISING USER DATA

Just glancing at it, I think the author got some things wrong.

For example, the "third party" is most likely First Data serving as the Token Service Provider (TSP). First Data was also the Trusted Service Manager (TSM) for the original Google Wallet that used an onboard Secure Element.

In some Apple payment patents, they indicate that a list of the device specific numbers provisioned in each device's Secure Element is given to the TSP. This is used later on to help the TSP authenticate the token requests.

In other words, basically Apple hand carries a list of device account numbers to First Data, and everything else is only done between the device and First Data.

The rest of it likely closely follows (or is) the tokenization payment methods that have been created by Mastercard, Visa and Amex, following the official EVMCo tokenization flow.
 
if you are buying something with ApplePay... what information have you given to Apple?!? your bankaccount or your credit/debit-card?!? now try and tell me how your bank can see any transaction?!? the transaction is via VISA/MasterCard/AmEx or whatever... how would Apple bypass their fees?!?

edit: or even better how would the bank know you are using VISA/ApplePay and NOT plain VISA...

You actually never even give Apple you card number. It is never even stored on the device. When you add a card, Apple contacts the issuing bank who then create an encrypted token (alias) that the device then saves in the secure element. It is this token that is used as the basis for the transaction when you use that card. So the merchant never sees your card number, and Apple never sees your card number.

Additionally, the merchant doesn't receive any information on individual transactions, so they can't monitor what you've bought, or for how much, so they lose the ability to track your buying habits (unless you use a club or merchant specific rewards card in addition to the actual payment) and the same goes for Apple.

With this system, Apple has forfeited collecting any data for itself AND offers the consumer more privacy from the merchant, as ONLY THE ISSUING BANK can ever see what, where, and for how much you spent you money.

That's the beauty of the system. The consumer is the winner. This is what separates :apple:Pay from GoogleWallet and ALL other NFC payment systems in existence today.

In addition to that, you collect your rewards/points/miles as per normal on whatever card you use with :apple:Pay.

Apple does not get its $0.15 per $100 from the merchant, but either from the issuing bank or the credit card companies themselves (Visa/Mastercard/AmEx) who are willing to accept it because of two things. One is the increased security, which is above and beyond even what Chip+PIN can provide because it incorporates a biometric authentication (TouchID). Secondly because :apple:Pay's implementation keeps the banks and the credit card companies at the center of the transaction rather than trying to push them to the fringe or bypass them like many other alternative payment systems do (such as PayPal, for example).

Hope that answers some of your questions.
 
From what I understand, its the latter. Apple uses banks' already-existing tokenization process. Apple uses your card number to communicate with the bank directly to authorize ApplePay to access the banks' system and doesn't store the card number (aside from the last 4 digits so you can easily identify which card is which).

This is how I understand it as well - think of it as exactly how an online transaction is initiated. Passbook sends the card info directly to the bank who return with a device specific token. Neither the actual card information, nor the token that is received, is never uploaded to an Apple server.
 
Last edited:
I suppose the big question is whether Apple considers transit cards and the like to be part of the Apple Pay umbrella, or whether they really are limiting themselves to credit and debit cards.
Rewatch the keynote!

(minute 43) Cook says: "And now I'd like to talk about an entirely new category of service. And it's all about the wallet. Our vision is to replace this and we're gonna start with Payments".

So no, Apple is not limiting themselves to Pay only. They also plan to replace your transit card in the future.

Transit – you heard it here first. :cool:
 
I don't know how you think this works, but you can't just write an app and do payments over the phone. This needs to be secure. Not just secure but SECURE. Not just SECURE but absolutely unbreakably secure. You'd have to convince the banks that this app is secure. That it is absolutely unhackable. This is about money going from your wallet directly into someone else's wallet. That's the kind of problem were you hire only developers that needed to be treated for excessive paranoia. _After_ stopping their treatment.

And I’m referring to corporations like Visa making use of the NFC to allow people to use Visa payWave like they are doing for Android phones with NFC: http://phandroid.com/2013/02/25/samsung-visa-paywave/

Or contactless payments used on public transport systems in some countries: http://www.ezlinknfc.com/supported-phones/

If Android is deemed safe enough by these corporations, I don’t see them having issues with the same thing on iOS. The only thing stopping them is Apple locking up NFC for their own use.
 
But I guess a lot depends on who's actually making the transaction - is the payment made directly from the card company (e.g. Visa), or is it made from the buyer's iTunes account? If it's a direct transaction between the retailer and Visa, then Visa will want to be sure it's secure. If, however, Apple pay the retailer and charge it to the Visa card registered in your iTunes account then Visa - in theory - is only interested in the security of the transaction between them an Apple and has no interest in the security of the transation between Apple and the retailer, in the same way that you can currently make PayPal funded purchases by credit card; there's no actual transaction between the card provider and the retailer.

:apple:Pay has nothing, absolutely nothing to do with your AppleID or iTunes accounts. The only time they ever interact is when you first set it up and Passbook asks you if you want to set up the card you have on file with your AppleID.

The transaction is between you and your bank via the vendor's NFC PoS terminal.

The system is inherently more secure than even the Chip+PIN method, because it uses the TouchID biometric authentication rather than a PIN that someone could obtain. I mean, an ex-wife or spiteful ex significant other could take a card and make purchases on it if he/she knew the PIN and had the card. The merchant never even checks ID with Chip+PIN. They couldn't do that with :apple:Pay though, because they can't take your fingerprint. (Just whatever you do, don't let a significant other have one of their fingerprints stored in your device's touch ID ;))
 
You actually never even give Apple you card number. It is never even stored on the device. When you add a card, Apple contacts the issuing bank who then create an encrypted token (alias) that the device then saves in the secure element. It is this token that is used as the basis for the transaction when you use that card. So the merchant never sees your card number, and Apple never sees your card number.

Additionally, the merchant doesn't receive any information on individual transactions, so they can't monitor what you've bought, or for how much, so they lose the ability to track your buying habits (unless you use a club or merchant specific rewards card in addition to the actual payment) and the same goes for Apple.

With this system, Apple has forfeited collecting any data for itself AND offers the consumer more privacy from the merchant, as ONLY THE ISSUING BANK can ever see what, where, and for how much you spent you money.

That's the beauty of the system. The consumer is the winner. This is what separates :apple:Pay from GoogleWallet and ALL other NFC payment systems in existence today.

In addition to that, you collect your rewards/points/miles as per normal on whatever card you use with :apple:Pay.

Apple does not get its $0.15 per $100 from the merchant, but either from the issuing bank or the credit card companies themselves (Visa/Mastercard/AmEx) who are willing to accept it because of two things. One is the increased security, which is above and beyond even what Chip+PIN can provide because it incorporates a biometric authentication (TouchID). Secondly because :apple:Pay's implementation keeps the banks and the credit card companies at the center of the transaction rather than trying to push them to the fringe or bypass them like many other alternative payment systems do (such as PayPal, for example).

Hope that answers some of your questions.

as a Swede myself.. you know about e-cards right?!? you login to your bank and generate a Visa for online-purchases (you set a fixed amount/date up to 24 months...)
Apple says http://www.apple.com/apple-pay/ "Apple doesn’t save your transaction information. With Apple Pay, your payments are private. Apple doesn’t store the details of your transactions so they can’t be tied back to you"

the same goes for a chip-pin terminal... the purchase is made via Visa and your bank, and will show on your account as 100$ at ICA right?!?

ApplePay can be supersafe for the user, I will not argue against that...
the only competition Apple has in this matter is the way the transaction merchant-cc is handled... and Apple will make a new way of making these transactions, but they will want to get paid

edit: and also using a card (with your name on it) can be safer than "biometric ID" if you have an iPhone 5S you know that a couple of tries with a wet finger forces you to use pin/password... assuming your iPhone or creditcard is lost chip+pin+id (noone ever checks I know) is safer than iPhone+pin
 
Last edited:
Do you even know what NFC is? It has about as much to do with credit cards as your wifi connection has.

+1! I don't really understand why non-jailbreakers assume that every jailbreaking developer is out to steal our information. On the other hand, most of them are just as concerned about your privacy as Apple is. They (the developers) design and use their own apps as well. Why would they make it less secure?
 
That's because you aren't that smart. This is limiting you to using ApplePay with NFC. It is anti-competitive because it isn't allowing you to use Google Wallet or PayPal as a mobile payment device.

Nice, say I'm not that smart even though I'm correct.

No, it isn't anti-competitive. Not in a legal sense, anyway. If I put out a product, I don't have to let competing services use my product. That would be like complaining that your US Bank card doesn't work to charge stuff to your Bank of America account.
 
You can use contactless payment on Oyster card readers so I don't think they will be missing out.

Very unlikely that Apple Pay will ever work with Oyster readers as a means of contactless payment as there is no way of the payment being tracked and linked to the users phone as it uses one time tokens. Tracking is essential due to the way TFL implement daily capping, journey tracking and most importantly, validation that a user has paid for their journey if an inspector wants to check.

However it's conceivable that TFL could create an Oyster card app that works with the NFC reader in the future if Apple open it up a bit.

Funnily enough I just blogged about this:
http://www.lukeredpath.co.uk/blog/2014/09/16/apple-pay-meet-oyster-card/
 
Last edited:
Does this mean it can't quickly pair with other bluetooth devices? Seriously? They finally add NFC, granted if only so they get .15% per transaction (If Apple Pay didn't exist, the phone still wouldn't have NFC), and they can't give us any perks? I would love to see what third parties can do with the NFC. We could unlock/start our cars without keys, integrate it into smart homes without WiFi, there are numerous medical uses, etc.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.