this post was submitted on 01 Sep 2023
1 points (100.0% liked)

Apple

4 readers
1 users here now

A magazine for news and discussion about a small Silicon Valley fruit company.  ### See also

founded 1 year ago
1
NYC subway security flaw and 'impossible' Apple Pay vulnerability (9to5mac.com)
submitted 11 months ago by Nicenightforawalk@kbin.social to c/apple@kbin.social
2 comments fedilink hide all child comments
 

An inexcusable NYC subway security flaw has been revealed, allowing anyone with knowledge of a user’s credit card number and...

you are viewing a single comment's thread
view the rest of the comments
[–] kirklennon@kbin.social 1 points 11 months ago* (last edited 11 months ago)

If 9to5Mac were run by reputable journalists, this poorly-researched article with its conspiratorial conjectures would have been taken down already.

The explanation for the Apple Pay aspect is something called the Payment Account Reference (PAR). Mastercard has a brief overview. Everything is working exactly like it is designed and as advertised. Apple Pay is not (and cannot) send your full real card number, but if you give a merchant your real card number, they can look up a reference number shared by every token associated with the card.