Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: "Rod Speed" Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad,comp.sys.mac.system Subject: Re: Apple Pay Exposes Insecure Bank Policies Date: Mon, 23 Mar 2015 12:48:53 +1100 Lines: 37 Message-ID: References: <200320151703579843%michelle@michelle.org> <550da46e$0$34564$c3e8da3$dbd57e7@news.astraweb.com> <550f01cf$0$58829$c3e8da3$88b277c5@news.astraweb.com> <550f5c2d$0$1698$c3e8da3$e408f015@news.astraweb.com> <550f69d6$0$44541$c3e8da3$66d3cc2f@news.astraweb.com> Mime-Version: 1.0 Content-Type: text/plain; format=flowed; charset="UTF-8"; reply-type=original Content-Transfer-Encoding: 8bit X-Trace: individual.net 12zlpa5j/A2CJAgUSelAQgtJDh/+Uf3S4NLFbV67pvkiC+0rM= Cancel-Lock: sha1:+VYNRAfi7ASWzdD3xdTih7zr6YY= In-Reply-To: <550f69d6$0$44541$c3e8da3$66d3cc2f@news.astraweb.com> X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Newsreader: Microsoft Windows Live Mail 14.0.8117.416 X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416 Xref: csiph.com comp.mobile.ipad:46842 comp.sys.mac.system:71886 JF Mezei wrote > Jolly Roger wrote >> Where'd you read that? The reports so far have said that the >> cards in question are Yellow Path cards, so the banks are >> already aware information does not match what is on record. > How can a bank "ALREADY" be aware that information does not match > what is on record what that information has not been sent to Apple ? Of course its been sent to apple. > It is more likely that "yellow" cards have been marked as "high risk of > fraud" On what basis ? The card isn't holding is mouth just right and refuses to look at the camera when its photographed ? > and the simplistic default Apple Pay process Another bare faced lie. > is rejected with additional steps needed by > the person claiming to be the cardholder. > Boggles the mind though that a card that has already been > marked as high risk would be activated on Apple Pay after the > alleged cardholder contacted the bank and social engineered > himself to appear to be the legitimate cardholder. Just another of your silly little pig ignorant fantasys. > That is why I smell something funky which leads me > to beleive we don't know what really happened. We do know that some banks didn’t get fucked over.