Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Does Apple employ hackers...?

And - who cares if it is their email provider, cheap excuse. If they cannot get that safe than how will it be with the SSN and other information?
 
That's not the whole story...

Apple had a design flaw in the password recovery via answering questions. There was no counter to limit tries or lock this function after multiple failed attempts.

Yet, it wasn't even used, why? Because they didn't need too (passwords are that bad) and even if the account is not locked, you still get internal alerts if 100 tries on one account occurs (at least in every system I'Ve looked at). So, brute force would be out since it would be detected and the hole plugged.

At most, it could be used to check password which are very easy to guess in not too many tries.

Even locked account aren't locked if you try 2 times a day and fail. So, if you are patient enough, you can still get in if the password is weak.
 
Because what I am showing you is the folly in the ideology that a companies email is hacked therefore their processing system is faulty. When Apple gets hacked its the users bad passwords but with CurrentC its because they are stupid failures.

Hey guy that created his account today mysteriously enough, and specifically to come here and drive home an obvious agenda on a specific thread, epitomised by this post, which lacks any form of genuineness.

If you were who you say you were, you would be smart enough to know that comparing a successful phishing scheme, as was the case with iCloud and the Fappening (among several other cloud and file sharing services btw, which if you were a truly genuine poster, you would readily admit to) is not the same as breaking into a corporate database and stealing information, such as the email addresses of said corporatation's customers stored on said database.

You been reported for not being a genuine poster/user.

Target's hacked DB included actual customer CC numbers that were successfully used in fraudulent activity subsequent to the security breach. So apparently all this stuff about Ogone servers and stuff is completely irrelevant?

It appears to be the case that it doesn't matter what or who the processor of the transaction or even what system it uses, or how secure that transaction process is if the merchant continues to hold that information in a database somewhere in a corporate cloud. The more potential points of access to my sensitive data is directly proportional to the risk of that data being compromised adn stolen/accessed. So the best way to minimise that risk is to minimise those who have it in the first place.

If only my bank actually has that info, then it can only be retrieved from one spot. Apple Pay doesn't even store your CC number locally, let alone in anyone's cloud. The fact that you need to store ANY information required to complete a financial transaction anywhere else than with that financial institution is exactly what the problem is with CurrentC.

Why does the merchant need to verify who you are? That's not really their responsibility, it is the banks, after all, you haven't entrusted your money with the merchant, you are just trading it with them for some good or service. Now the banks can actually do that from afar using CHIP+PIN at the very least, but even more securely with Apple Pay.

If we are talking about privacy and security, then a merchant has no business even knowing my name.

Now, if we are talking about becoming a member, earning loyalty rewards, etc. and I as a customer decide to enter into these programs, then of course I want you to be able to identify me, but even then, a membership number would be sufficient, there is no real reason to collect anything more than that. Certainly hard to justify wanting my SSN, driver's license number, health data, etc.

I prefer to think of the merchants I frequent as places I go to purchase products, not places I go to offer up myself as a product to the merchant.
 
Also interesting in his feed is that it wasn't CurrentC that was hacked, it was their email provider. Quite a difference... but no one will care.

Of its email system? That implies email servers, etc. This isn't what happened. The email sent out by MCX clearly shows that it was customers email addresses that were obtained, not a breach of MCX's internal email system/provider.

They sent out the email to customers/users of the CurrentC App or those that had signed up to a newsletter or submitted their email address to get news on the progress of the service.
 
Exactly. I am an Apple enthusiast. Own nothing but Apple products and worked for the giant fruit company for 7 years.

That does not mean I have blind allegiance.

As a reader of this forum for a number of years now, I have observed that the participants are sometimes quite critical of Apple (sometimes eviscerating it for various failures). But in this particular case, I don't think you need to be a blind Apple fanboy to see that Apple Pay (which is real and in use today) appears to be superior in a number of ways to the MCX/CurrentC plan which is still largely vapor at this point. Apple Pay appears to be likely the most secure method of retail payment available in the U.S. at least. And the optics around MCX/CurrentC are terrible and getting worse (shutting down fully functional NFC terminals to block Apple Pay, getting hacked already, …). It really doesn't look good for them.
 
i beg to differ. show me a list of places that take apple pay, and i'll show you an even bigger list that take bitcoins.
hell i'll even go first and post the short list. looks like someone is gonna have a "foot in mouth moment" lol..
https://bitpay.com/directory#/

I think it should be a list of businesses that people have actually heard of. I've not heard of one of them in the bitcoin list, apart from the Libertarian Party.
 
I think it should be a list of businesses that people have actually heard of. I've not heard of one of them in the bitcoin list, apart from the Libertarian Party.

What, you haven't shopped at Grass Hill Alpacas within the last week? :D
 
Why do people in the US seem to use Credit Cards for everything, don't you have Chip&PIN systems? Here in the UK we can already use our ATM cards to pay for stuff at the checkout using Chip&PIN. If you do this, the money is transferred from your checking account to the store directly, so does not involve a Credit Card company. A bit like the CurrentC system, without all the scanning hassles.

We can use ATM cards to pay just like you-- they are called Debit cards here. But I get cashback and some fraud protection with the CC. I can dispute charges, and my liability is limited if its fraud, or I can put the onus on the vendor if it's just a mis-charge. Credit Cards just offer me extra benefits, for no extra cost to me, as long as I have the discipline to pay on time (which I always do).
 
Of its email system? That implies email servers, etc. This isn't what happened. The email sent out by MCX clearly shows that it was customers email addresses that were obtained, not a breach of MCX's internal email system/provider.

They sent out the email to customers/users of the CurrentC App or those that had signed up to a newsletter or submitted their email address to get news on the progress of the service.

Just relaying what was on IDG News' Martyn Williams' feed. He said "MCX confirms hack of its email system, says email provider was attacked." Take it for what it is.
 
i beg to differ. show me a list of places that take apple pay, and i'll show you an even bigger list that take bitcoins.
hell i'll even go first and post the short list. looks like someone is gonna have a "foot in mouth moment" lol..
https://bitpay.com/directory#/

Excuse me, but the vast majority of these entities on that list are either merely dealers in BitCoin themselves, or domain, VPN, cloud or remote server hosting services who don't really service the public consumer. The rest of them that actually do are tiny little online or hole in the wall computer & hobby shops, or places run out of people's homes.

Didn't see one national or regional mainstream retailer or service provider there in the entire list.
 
25% of the MCX members have been hacked. Who DIDN'T see this coming?

..And I suspect it will only get worse when and if anyone trusts them with bank account info, social security number, and driver's license number - the identity theft holy grail.

You have no idea how many retailers are part of MCX, do you?
 
Because what I am showing you is the folly in the ideology that a companies email is hacked therefore their processing system is faulty. When Apple gets hacked its the users bad passwords but with CurrentC its because they are stupid failures.

You think hacking one account at a time by stealing user passwords is akin to breaking into a company server and stealing all data on everyone?

Maybe you are the one that doesn't understand the situation.
 
i beg to differ. show me a list of places that take apple pay, and i'll show you an even bigger list that take bitcoins.
hell i'll even go first and post the short list. looks like someone is gonna have a "foot in mouth moment" lol..
https://bitpay.com/directory#/

You want me to list every store that accepts NFC payments? Are you serious?

----------


That list is wrong. Read the comments, the guy gets called out.
 
...Apple Pay (which is real and in use today) appears to be superior in a number of ways to the MCX/CurrentC plan which is still largely vapor at this point.

CurrentC might be in limited testing at the moment, but Paydiant did run a pilot program of a similar system last year in Delaware that was largely successful from what I read (lookup Barclays "bPay").
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.