Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Apple Watch dangerous bug

George Karagiannis

George Karagiannis

macrumors newbie
Original poster
Nov 25, 2018
13
1
Caution! Dangerous bug in Apple Watch! If someone has access to your watch, he will be able to make purchases with your credit cards without needing a password. Unfortunately, I have been trying to contact Apple product security for three months now and they do not understand the problem. Their answer is to enter a more secure passcode on the watch. This bug definitely works in the last three updates of watch os 6 to those who have disabled wrist detection. In watch os 7 they made it as before, meaning that when you have disabled wrist detection, whenever you double-click on the watch, it always asks for a password in order to use your credit cards. In a few days I will upload a video on how the bug is created.
 
I am confused, do you have a passcode on the watch? I cannot double click for the wallet/apple pay when the watch is locked. Yes, I have wrist detection active. I did not think you could use the wallet without a passcode, so that part surprises me. But for all of us using the watch as intended, so with a passcode and with wrist detection active, does this bug apply?
 
michaelb5000 said:
I am confused, do you have a passcode on the watch? I cannot double click for the wallet/apple pay when the watch is locked. Yes, I have wrist detection active. I did not think you could use the wallet without a passcode, so that part surprises me. But for all of us using the watch as intended, so with a passcode and with wrist detection active, does this bug apply?
Click to expand...
with wrist detection the bug does not work. Normally when you do not have wrist detection you should be asked for a passcode constantly
 
Maybe I am not following properly, but how is this a bug? As soon as I take off my watch it locks and requires a password. As long as no one else knows my password I'm safe. This is like saying that that credit cards themselves have a bug, and if someone gets my physical card they can make purchases.

Side note: Credit cards have this thing called zero liability where if you don't make the purchase, you don't have to pay for it.

This is a non-issue.
 
There's no bug. Of course things are going to work adversely if you turn off the security features.

News flash, someone can look at all the stuff on your phone if you don't have have FaceID or a password enabled. Hopefully Apple fixes this bug soon too...
 
Last edited:
  • Like
Reactions: Ericdjensen and Never mind
johnyyz said:
Man this thread is dumb. There's no bug. Of course things are going to work adversely if you turn off the security features.

News flash, someone can look at all the stuff on your phone if you don't have have FaceID or a password enabled. Hopefully Apple fixes this bug soon too...
Click to expand...
if you turn off security features, the cards are disabled.
if you think you can do it, please do it and upload a video.
if you are not sure about what you are writing just don't write
 
George Karagiannis said:
if you turn off security features, the cards are disabled.
if you think you can do it, please do it and upload a video.
if you are not sure about what you are writing just don't write
Click to expand...

Where did I say the cards would work? I said "look at all the stuff on your phone". Reading comprehension is hard, isn't it?

Regardless, this is not a bug. You're expecting things to work a certain way, but they won't because you have features turned off. That's not a bug. Great clickbait title on the thread though, so kudos for that I guess.
 
  • Like
Reactions: Fayette3001, Never mind and Aspasia
johnyyz said:
Where did I say the cards would work? I said "look at all the stuff on your phone". Reading comprehension is hard, isn't it?

Regardless, this is not a bug. You're expecting things to work a certain way, but they won't because you have features turned off. That's not a bug. Great clickbait title on the thread though, so kudos for that I guess.
Click to expand...
so can you do what i show in the video? for tried. if you can do it very much I would like to see a video
 
johnyyz said:
Where did I say the cards would work? I said "look at all the stuff on your phone". Reading comprehension is hard, isn't it?

Regardless, this is not a bug. You're expecting things to work a certain way, but they won't because you have features turned off. That's not a bug. Great clickbait title on the thread though, so kudos for that I guess.
Click to expand...
Bit harsh, no? Move on to the next thread and let the mods decide what's dumb.
 
  • Like
Reactions: basher
George Karagiannis said:
so can you do what i show in the video? for tried. if you can do it very much I would like to see a video
Click to expand...
What are you talking about? You have security features turned OFF, there's no bug. There's no need for me to try to recreate this because I have the features turned ON.

If it's that much of a worry for you, turn off Apple Pay on your watch and use your phone. Problem solved.
 
johnyyz said:
What are you talking about? You have security features turned OFF, there's no bug. There's no need for me to try to recreate this because I have the features turned ON.

If it's that much of a worry for you, turn off Apple Pay on your watch and use your phone. Problem solved.
Click to expand...
you just can't do it. because you continue your inaccuracies
 
johnyyz said:
I don't think so. OP created a clickbait title for something that is a non-issue, and I think it deserves to be called out for what it is. Not everyone has to agree with my assessment of it, but it's my opinion on the thread and I stand by it.
Click to expand...
Hey you're fully entitled to your assessment and the expression of such. I'm simply suggesting trying to be a little less nasty about it.
 
George Karagiannis said:
you just can't do it. because you continue your inaccuracies
Click to expand...
I know I can't do it as I have wrist detection turned on. I never claimed I could do it so I really don't know what you're going on about to be honest.

What I said what turning off features, which you have done, doesn't make it a bug.
[automerge]1601565630[/automerge]
Knowlege Bomb said:
Hey you're fully entitled to your assessment and the expression of such. I'm simply suggesting trying to be a little less nasty about it.
Click to expand...
Fair enough. Post will be edited to be a little more friendly.
 
  • Like
Reactions: BigMcGuire and Knowlege Bomb
dont wanna get into a flame war on whether or not this is a bug and/or dangerous just like to point out that in most countries there is a limit on contactless transaction amount so I'm surprised with EUR1000 transaction shown in the video coz where I am its like EUR50 MAX. I know it might vary from bank to bank and local regulations but if you are worried it makes sense to check what your local limit is where you are. As someone else pointed out its covered by your bank CC insurance in case of theft, its just a hassle to deal with.
 
johnyyz said:
I know I can't do it as I have wrist detection turned on. I never claimed I could do it so I really don't know what you're going on about to be honest.

What I said what turning off features, which you have done, doesn't make it a bug.
[automerge]1601565630[/automerge]

Fair enough. Post will be edited to be a little more friendly.
Click to expand...
I always had wrist detection turned off because I have a tattoo. but whenever I make a card transaction it asks for a password. with the bug stopped asking for a password.
 
antbob said:
dont wanna get into a flame war on whether or not this is a bug and/or dangerous just like to point out that in most countries there is a limit on contactless transaction amount so I'm surprised with EUR1000 transaction shown in the video coz where I am its like EUR50 MAX. I know it might vary from bank to bank and local regulations but if you are worried it makes sense to check what your local limit is where you are. As someone else pointed out its covered by your bank CC insurance in case of theft, its just a hassle to deal with.
Click to expand...
It is supposed that before making a transaction the watch must ask for a code because I have disabled wrist detection. I have in video and transaction with 5,000 euros
 
George Karagiannis said:
In watch os 7 they made it as before, meaning that when you have disabled wrist detection, whenever you double-click on the watch, it always asks for a password in order to use your credit cards.
Click to expand...

So...

This is only a concern if (a) someone turns off wrist detection and (b) remains on watchos7 or before, since it's fixed in watchOS7?

With all due respect, you might find a more receptive audience if you weren't so over-the-top hyperbolic about the matter.
 
  • Like
Reactions: BigMcGuire and johnyyz
deeddawg said:
So...

This is only a concern if (a) someone turns off wrist detection and (b) remains on watchos7 or before, since it's fixed in watchOS7?

With all due respect, you might find a more receptive audience if you weren't so over-the-top hyperbolic about the matter.
Click to expand...
as you will see in the video I turn off the wrist detection because it does not work with tattoos.
then whenever I want to use the credit card it asks for a password. so it's right.
are many people who have disabled wrist detection. should they not be protected?
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back