Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
30 seconds?!?! Are you being served by someone illiterate or are you just a bad judge of time? I've never, not once ever, had someone glance for longer than the 1-2 seconds it takes to see my birthdate and move on.

If it's a place that got busted for serving underage people, they might take more time to verify it's not a fake id
 
If it's a place that got busted for serving underage people, they might take more time to verify it's not a fake id

No. Not 30 seconds. No way.

You rotate the ID under light for two seconds and see if you see the hologram and then glance to make sure the photo looks accurate.

This is no way anyone with two brain cells to rub together is starting at an ID for 30 seconds.
 
No. Not 30 seconds. No way.

You rotate the ID under light for two seconds and see if you see the hologram and then glance to make sure the photo looks accurate.

This is no way anyone with two brain cells to rub together is starting at an ID for 30 seconds.

If you say so. I don't know if it was 30 seconds, but I've definitely had some people look longer than a couple seconds at my ID, especially when I was out of state.
 
30 seconds?!?! Are you being served by someone illiterate or are you just a bad judge of time? I've never, not once ever, had someone glance for longer than the 1-2 seconds it takes to see my birthdate and move on.

To be fair I said 20-30 seconds and yes, I have had quite a few people take that long. On my picture they zoomed in on my face so mine almost looks like a fake ID. Usually they are new or they are younger so they haven't had as much experience looking at licenses. In very rare circumstances I've had the employee have to ask a manager to look at it. I haven't bothered to get my picture updated as i don't go out as much any more.

But after reading that security document I'm less concerned and will likely start using Apple Pay as soon as I can.
 
There is two lines of thinking here and both have their flaws.

To the people worried about security, let's wait until it's out in the wild before we start finding security issues.

To the people that say it's the most secure payment option in the world, let's wait until it out in the wild before we say it talk about how secure it is.

It's all software, written by man (and women) so it can be hacked by other men. The difficulty of such is what's in question. Keep in mind we are going into iOS 8.1 and we can still find ways to access areas of a locked iPhone (siri sim pull method). So where there is a will there is a way.
 
There is two lines of thinking here and both have their flaws.

To the people worried about security, let's wait until it's out in the wild before we start finding security issues.

To the people that say it's the most secure payment option in the world, let's wait until it out in the wild before we say it talk about how secure it is.

It's all software, written by man (and women) so it can be hacked by other men. The difficulty of such is what's in question. Keep in mind we are going into iOS 8.1 and we can still find ways to access areas of a locked iPhone (siri sim pull method). So where there is a will there is a way.

I think you're still missing the point. Literally anything is safer than swiping your magnetic stripe at a terminal. Everything comes off your magnetic stripe in plain text - the card number, expiration, and CVV.

I don't think anyone is guaranteeing Apple Pay cannot be hacked, but there's no two ways about it - Apple Pay is substantially more secure than your other options.
 
I think you're still missing the point. Literally anything is safer than swiping your magnetic stripe at a terminal. Everything comes off your magnetic stripe in plain text - the card number, expiration, and CVV.



I don't think anyone is guaranteeing Apple Pay cannot be hacked, but there's no two ways about it - Apple Pay is substantially more secure than your other options.


I was never eluding to the point of a CC (mag strip) being more secure. We just can't say ApplePay the most secure payment method on the planet quite yet. Neglecting the obvious reason of it not being a payment method quite yet for the masses at all but no one has even tried to find simple bypasses let alone skilled hacking.

All that is based on "general" security. For example cash is and will always be more secure when it comes to identity theft security. However CC is financially safer when it comes to being robbed. That's besides the point but this thread is stemming in all directions.

I agree that in theory and if everything works properly this will be more secure then using a credit card.
 
I was never eluding to the point of a CC (mag strip) being more secure. We just can't say ApplePay the most secure payment method on the planet quite yet. Neglecting the obvious reason of it not being a payment method quite yet for the masses at all but no one has even tried to find simple bypasses let alone skilled hacking.

All that is based on "general" security. For example cash is and will always be more secure when it comes to identity theft security. However CC is financially safer when it comes to being robbed. That's besides the point but this thread is stemming in all directions.

I agree that in theory and if everything works properly this will be more secure then using a credit card.

But if everything goes horribly wrong with Apple Pay it's not going to be worse than what everybody uses now.
 
I think apple pay is way more secure, I don't understand your logic. I've had my card duped from swiping at a gas station. Now that is crazy.
 
just because your article is posted on a harvard blog page doesn't mean you know what you're talking about.
 
Well, I use a credit union and they aren't supported yet I believe. Even if they were I would/am waiting at least 6 months to see if any issues develops. Certainly on surface it seems better than what we have now.
 
Or you could just use cash, everyone accept cash, it's totally anonymous, and none of your credentials are shared/or CC number. I brought a car with cash, like cash in a briefcase. What's all that with credit cards or APay?
 
#pay backed by the banks. That says a lot. Also for the Banks to give Apple the 'card present status' shows that security is good with ApplePay
 
Well, I use a credit union and they aren't supported yet I believe. Even if they were I would/am waiting at least 6 months to see if any issues develops. Certainly on surface it seems better than what we have now.

Next year you will see multiple pay systems emerge. Apple Pay will just be one of them. Apple Pay wil not take over the world as it is available to so few considering you can only use it if you have the latest iPhone 6.

I know us Apple people would like to think the world revolves around us, but we are just a small part of it.
 
Or you could just use cash, everyone accept cash

Two examples off the top of my head where cash isn't accepted: many apartment complexes won't accept cash for security reasons, and some airlines won't accept cash for in-flight purchases.

Cash also has a number of downsides for the consumer in terms of convenience and security.

I do use cash for most small transactions, just old fashioned I guess. Otherwise I use plastic, pay it off every month, and watch the 2% cash back add up. :)
 
Well, I use a credit union and they aren't supported yet I believe. Even if they were I would/am waiting at least 6 months to see if any issues develops. Certainly on surface it seems better than what we have now.

Those who have fear of using Apple Pay as opposed to using the physical credit card -- do not fully understand how Apple Pay (or tokenization) works.

There is nothing to wait for, no reason to be worried about issues and nothing to sit back and think about or contemplate. It is IMPOSSIBLE for Apple Pay to be worse security-wise than using your physical credit card and swiping. Impossible. I work in the privacy business. I know.

----------

��pay backed by the banks. That says a lot. Also for the Banks to give Apple the 'card present status' shows that security is good with ApplePay

It is the tokenization scheme. Apple Pay, hands-down, because it uses tokenization and TouchId, is the most secure method of using a credit card at a merchant that currently exists. Hands down, no ifs, ands or buts about it. There is ZERO to fear about security. If you fear security with your credit card, nothing is worse than physically handing a merchant a card to swipe.

----------

I was never eluding to the point of a CC (mag strip) being more secure. We just can't say ApplePay the most secure payment method on the planet quite yet. Neglecting the obvious reason of it not being a payment method quite yet for the masses at all but no one has even tried to find simple bypasses let alone skilled hacking.

All that is based on "general" security. For example cash is and will always be more secure when it comes to identity theft security. However CC is financially safer when it comes to being robbed. That's besides the point but this thread is stemming in all directions.

I agree that in theory and if everything works properly this will be more secure then using a credit card.

This fear, uncertainty and doubt is only by those who lack an understanding of how tokenization works and how the secure element works. Apple Pay is, hands down, no if, no ands, no buts, no doubt about it, the most secure way on the planet, right now, to pay with a credit card. There is no counter argument to that. While other types of payments could be more secure, we are talking about paying with a credit card. Not bartering, or using bitcoin on paying cash. But using a credit card. If you use a credit card, Apple Pay is the best way to go. Period. End of story.

----------

There is two lines of thinking here and both have their flaws.

To the people worried about security, let's wait until it's out in the wild before we start finding security issues.

To the people that say it's the most secure payment option in the world, let's wait until it out in the wild before we say it talk about how secure it is.

It's all software, written by man (and women) so it can be hacked by other men. The difficulty of such is what's in question. Keep in mind we are going into iOS 8.1 and we can still find ways to access areas of a locked iPhone (siri sim pull method). So where there is a will there is a way.

The security has more to do with Visa/MasterCard and tokenization. Not the hardware or software of the phone. I don't think you understand how Apple Pay security works. This is what hackers would have to get to:

http://www.emvco.com/specifications.aspx?id=263

Hackers want big bang for their time and energy. Going after one phone at a time is not worth it. They want millions of cards (a la Target and Home Depot). So yeah, cutting off a finger of someone or someone hacking into the "secure element' of a phone (which is doubtful) might get someone one person's credit card. That's not what hackers want -- its not worth their time.

There is no reason to wait to assess the security of Apple Pay -- unless you expect VISA or MasterCard and the token vault to get hacked (and they have your card data with or without apple pay). So Apple itself is not relevant to that security issue and that is why Apple Pay is secure.
 
Last edited:
It was featured in Harvard's newsletter.



"Apple Pay has the same problems as Bitcoin: There's no reason for the regular consumer to use it," he says. "Why would a consumer want to make a $100 purchase with Bitcoin when the consumer can pay with a credit card and get 2 percent cash back?"


http://hbswk.hbs.edu/item/7580.html

Nope.
I get cash back with my cash back card, on every transaction. Apple Pay or swipe. So the above shows that Bitcoin is not the way to go.
 
Apple Pay is, hands down, no if, no ands, no buts, no doubt about it, the most secure way on the planet, right now, to pay with a credit card.

Well stated. Anyone with doubts about ApplePay likely doesn't understand it.

TUAW had a decent article on what's going on "under the hood": http://www.tuaw.com/2014/10/02/apple-pay-an-in-depth-look-at-whats-behind-the-secure-payment/

From the article:
Highlighting the improved safety that Apple Pay provides, Tom Noyes -- a former credit card executive who has an excellent series of in-depth posts about the world of mobile payments -- said the following in the wake of Apple's Apple Pay announcement.

Apple is the first implementation of the new EMVCo tokenization specification. In my view this is a giant LEAP beyond EMV chip and PIN, and is now (by far) the most secure PAYMENTS scheme on the planet.
If ApplePay truly takes off then perhaps the rising tide will raise all boats and we'll see a wider adoption of tokenization on other mobile platforms as well. I know GW uses a form of it, but with Google servers still holding the actual card info rather than eliminating that information from anyone but the card issuer.
 

It's been pretty well established that that blog writer and the faculty cited didn't understand how ApplePay works when writing that article.

While the author does cite a couple salient points about adoption in the face of limited availability at merchants, she doesn't address the technology sea change that is underway as merchants prepare for the October 2015 liability shift.

Overall the article should be a bit of an embarrassment to Harvard Business School.
 
Yep, still gotta carry drivers license, medical insurance card, some cash, and a couple other items, so my wallet is still coming with me.

Where I see a benefit from Apple Pay is that I can carry just one credit card as backup and still have all my others with me virtually -- I can then use whichever is most advantageous for a particular transaction. (even better if I can associate particular cards to use with particular merchants).

So good points here. Though some can be addressed long term with Passbook recognizing things like driver licenses and such. I am seeing that with Apple Pay folks are looking towards a future in that the wallet would be obsolete.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.