351–360 of 432 posts
Apply Pay in stores is amazing and all, but holy cow the integration when you're using it to pay on your phone while using Safari or something (add in Sign in with Apple) is astounding. It's so smooth, no crazy pages or anything to go through, just click, scan, done. I'd love to see more places adopt it on the Mac store fronts as well.
Earlier quoted context omitted.
They make it sound like there is a special "Apple sauce" that they built and strongly suggest they generate a new PAN for every transaction. The suggest that a "token" instead of a PAN is used for the transaction. This is very misleading. If you read it very carefully they are not wrong, but for the uninitiated a wrong impression is crated. They are using an industry standard protocol that is 25 years old.
You are right that the core of Apple Pay security is functionally identical to chip and contactless transactions. However a seemingly trivial but important difference with Apple Pay is that it doesn't use your physical card number—instead it uses a different card number randomly assigned to your device. The payment networks can therefore recognise Apple Pay-assigned numbers and know to demand full Apple Pay authentic…
Earlier quoted context omitted.
Mostly there, you get a tokenized PAN (DPAN) for every card enrollment. Remove, and re-add a card to your digital wallet and you'll get a new DPAN. The unpredictable number is an (of a few) inputs into the generation of the CVV3, which is also based on a dynamic key from the issuer. Key rotation is on the order of weeks to months (depending on issuer). This is the "unique number" per transaction (part of tag 57 https…
> Remove, and re-add a card to your digital wallet and you'll get a new DPAN. Has anyone made a habit of rotating DPANs on a regular basis like this? Does Apple or your bank get irritated at some point?
I once had a very long call trying to explain to a very upset Mastercard person why this behaviour wasn’t an issue. I don’t think they understood.
Earlier quoted context omitted.
In Finland pretty much all places support NFC cards and by extension Apple Pay. Yet to come across a place where it didn't work.
I think Europe got rid of magstripes 15 years ago. IIRC 2005 was the deadline.
Apple Pay is great, but I wish it was more universally accepted at point of sale. But in the US we're not even at consistency in any form of POS payment method. Disney World (Florida) notably spent a BILLION dollars implementing a wonderful contactless payments++ system called MagicBand. [1] Last week I was shocked that at Disneyland (California), where they haven't implemented MagicBand, they not only don't accept A…
In Finland pretty much all places support NFC cards and by extension Apple Pay. Yet to come across a place where it didn't work.
What frustrates me is the way everyone talks about Apple Pay as if it's the standard in mobile payments. Everyone calls contactless payments Apple Pay, which is technology other countries have had for many years built into the cards themselves via an NFC chip. Visa calls it PayWave(TM), because you just wave your credit card over the terminal to pay. I have been taking advantage of the benefits of contactless pay sin…
My understanding is Google Pay, Samsung Pay, etc allow Google and friends to track your CC purchases because of the way it's designed, where Apple Pay is designed in such a way that Apple can not tell who you are spending your money with.
I thought Apple pay was really dumb... and then I started using it. Especially with an Apple Watch: when I get to checkout, I can fumble with my wallet, dig out a card, wait ten seconds for the chip to read, and then put the card away.... or I can tap a button on my watch twice and wave it near the reader. Done.
Earlier quoted context omitted.
To clarify for readers (doesn’t matter for you), terminals that support Apple Pay probably also support tap room pay with credit cards that have that feature. It’s just as fast as Apple Pay (once you have your card out).
Would you say it’s faster without having to use FaceID?
Earlier quoted context omitted.
> Remove, and re-add a card to your digital wallet and you'll get a new DPAN. Has anyone made a habit of rotating DPANs on a regular basis like this? Does Apple or your bank get irritated at some point?
I would avoid doing this. Mastercard guidance (and I assume Visa is the same) is to treat this behaviour as fraudulent. I once had a very long call trying to explain to a very upset Mastercard person why this behaviour wasn’t an issue. I don’t think they understood.
I settled a hotel bill for EUR1200.00 using Apple Pay. Totally painless; no card required.