Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.freenet.ag!news.space.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Jolly Roger Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad,comp.sys.mac.system Subject: Re: Apple Pay Exposes Insecure Bank Policies Date: 24 Mar 2015 15:04:56 GMT Organization: People for the Ethical Treatment of Pirates Lines: 50 Message-ID: References: <200320151703579843%michelle@michelle.org> <550da46e$0$34564$c3e8da3$dbd57e7@news.astraweb.com> <550f01cf$0$58829$c3e8da3$88b277c5@news.astraweb.com> <550f0c0b$0$56387$c3e8da3$38634283@news.astraweb.com> <55106678$0$44481$c3e8da3$66d3cc2f@news.astraweb.com> <55106ed4$0$46923$c3e8da3$aae71a0a@news.astraweb.com> <5510793d$0$42816$c3e8da3$9deca2c3@news.astraweb.com> <1m1saiv.gn7u1c12rsjhhN%dempson@actrix.gen.nz> <5510fa6d$0$45883$b1db1813$7968482@news.astraweb.com> X-Trace: individual.net Xs24JR8oO62ln5eR2P345Qxtlujc5R71bH7CJMyR2rS7FvqM/J Cancel-Lock: sha1:uTYQS6M1YYvnzoZ9MNKS00CTiCw= X-Face: _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1Y%b|b-Y~()~\t,LZ3e up1/bO{=-) User-Agent: slrn/1.0.1 (Darwin) Xref: csiph.com comp.mobile.ipad:46938 comp.sys.mac.system:72001 On 2015-03-24, JF Mezei wrote: > On 15-03-23 17:51, David Empson wrote: > >> Setup and Use Apple Pay >> https://support.apple.com/en-us/HT201239 >> >> Apple Pay FAQ >> https://support.apple.com/en-us/HT201469 >> >> Apple Pay security and privacy overview >> https://support.apple.com/en-us/HT203027 > > So I have read those and didn't learn anything except that Apple puts in > black and white the notion that after making the request, the bank has > some means to display a message to the user requesting that use take > extra steps to conclude the process. Then you didn't learn much, because it also says Apple sends more information than just what is on the card, as you have repeatedly claimed: "Apple decrypts the data, determines your card's payment network, and re-encrypts the data with a key that only your payment network can unlock. Then it sends the encrypted data, *along* *with* *other* *information* about your iTunes account activity and device (such as the name of your device, its current location, or if you have a long history of transactions within iTunes) to your bank." >> "other information about your iTunes account activity and device (such >> as the name of your device, its current location, or if you have a long >> history of transactions within iTunes)". > > SUCH AS is the operative word, it is not an authoritative list. This, coming from the dolt who repeatedly claims the only information Apple sends to banks is what is printed on the card itself! You can't even keep up with your own lies. >> Which is exactly what JR and others have been telling you repeatedly. > > JR does not have any credibility You have no basis on which to judge credibility. And I don't need to insult you when you do a fine job of insulting yourself regularly. -- E-mail sent to this address may be devoured by my ravenous SPAM filter. I often ignore posts from Google. Use a real news client instead. JR