this post was submitted on 24 May 2024
96 points (72.9% liked)

Technology

59574 readers
3219 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] hellothere@sh.itjust.works 10 points 6 months ago (1 children)

Sorry, I don't understand the motivation here, you want to not let Google spy on you via their OS, but are perfectly happy to give them your entire payment record?

[–] orclev@lemmy.world 11 points 6 months ago (1 children)

Not my entire payment record but certainly everything I use my phone to pay for. I'm willing to give Google some of my info as long as I'm in control of what info I'm giving them. Everything I do on my phone is too much. If a 3rd party offered a NFC payment app I'd happily use that over GPay, but until that exists GPay is the only option. Ultimately GPay is safer than using actual credit cards because it's more resistant to skimming. The extra security outweighs the loss of privacy in this specific case. I'm not happy about that but there doesn't seem to be a better alternative at this time.

[–] dsemy@lemm.ee 8 points 6 months ago (1 children)

You know that if someone skims your card and makes a fraudulent purchase, you will likely be able to get your money back, right?

What do you think will happen if someone exploits a 0-day in GPay to do this? How could your bank know the purchase was fraudulent? At least with a card it is obvious that this can happen.

If you care about "secure" payments that much, why not use cash?

[–] orclev@lemmy.world 3 points 6 months ago (1 children)

You know that if someone skims your card and makes a fraudulent purchase, you will likely be able to get your money back, right?

Sure but it's a major pain in the ass. Every time it happens I have to cancel my current cards, request a new one, find all the services I'm currently paying with the now cancelled card and update them to a different card while I wait for the replacement, and then maybe remember to swap them back when the new card shows up. It doesn't happen constantly but if I use cards to pay they seem to get skimmed about once every year or two.

What do you think will happen if someone exploits a 0-day in GPay to do this? How could your bank know the purchase was fraudulent? At least with a card it is obvious that this can happen.

Literally never happened before, but same way they know a credit charge is fraudulent, I tell them. Also if someone found a 0-day in GPay I wouldn't be the only one complaining of fraudulent charges, they'd be flooded with complaints.

If you care about "secure" payments that much, why not use cash?

Because that's a pain in the ass. I don't care about "secure" payments, I care about not having to spend days dealing with the aftermath of it. Paying with cash means I need to constantly go to ATMs to withdraw money, and if I'm doing that my odds of getting my card skimmed actually go up so it doesn't even protect my from that.

[–] dsemy@lemm.ee 1 points 6 months ago

Literally never happened before, but same way they know a credit charge is fraudulent, I tell them.

The reason I brought this up is because I read a story of a European guy who had someone pay for something in Brazil using his card, through GPay. He didn't get his money back, as the bank didn't believe him (as GPay is supposed to be secure). Take this with a grain of salt though, as I can't find this story now.

Also if someone found a 0-day in GPay I wouldn't be the only one complaining of fraudulent charges, they'd be flooded with complaints.

Not necessarily. Maybe a company like Pegasus is already exploiting a 0-day to see the purchase history of people, but they're smart enough to not attract attention by stealing.