All Devices iOS 13 reveals credit card info

[derekamoss]

Just a head's up. Saw this yesterday and figured it would appear on the main news page but didn't.

iOS 13 is apparently revealing credit card information to random strangers

Users on Reddit have been discovering a pretty major security flaw in iOS 13, which exposes credit card information to random strangers. Apple has acknowledged the issue and is working on a fix.

www.neowin.net

 

[chabig]

Not enough information. Probably fixed in 13.1.

 

[Cscottrun]

Considering this bug has been replicated by 2 different users at this point (2 different reddit posts), it is very concerning. Thanks for posting this thread...I would not have known about this issue otherwise.

 

[derekamoss]

No problem. As I said, I was surprised to see that they hadnt put a news article about it on the front page.

 

[chabig]

Sure, it’s a bug. But no useful credit information is leaked. So what is the threat—that you might discover the name and address of a random person? You can’t do anything with just the last four digits of a credit card number. I can go to any post office and dig through the trash to get names and addresses.

 

[derekamoss]

Sure, it’s a bug. But no useful credit information is leaked. So what is the threat—that you might discover the name and address of a random person? You can’t do anything with just the last four digits of a credit card number. I can go to any post office and dig through the trash to get names and addresses.

You can't be serious.... Yeah it doesn't show a whole lot of information but it's information that should never been shown. If this wasn't Apple but someone like Visa you and most people would be going nuts about the lack of privacy controls. You think there isnt anything you can do with the information shown but that's only due to the lack of knowledge you have on the subject. You would be amazed at what you could possibly access with that information if you really wanted too

 

[derekamoss]

Just bumping this so more people are aware since it hasn't really been brought up by apple news sites

 

[simonsi]

Sure, it’s a bug. But no useful credit information is leaked. So what is the threat—that you might discover the name and address of a random person? You can’t do anything with just the last four digits of a credit card number. I can go to any post office and dig through the trash to get names and addresses.

Quite useful in phishing scams actually. The point is its a <matching> name and last four digits. Send it to a large enough group of people with that name and initial, chances are you will get quite a few matches of the last four digits on a card they have, some will think you therefore have the full number and...

Never assume just because you can't think it would be useful, it won't be to someone who thinks differently.