Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: RinaseaofDs; ctdonath2
No. My position is that if Apple is selling a product, then Apple is responsible for making it secure - full stop.

You are delusional.

Apple does not and can not control what the banks do beyond requiring certain behavior in the contracts the banks sign when agreeing to participate in ApplePay. In that contract Apple required them to take what the bank industry themselves have defined as the "YELLOW ROAD" which requires two factor authentication of any credit/debit card authorized to be used in ApplePay. Some of the over 3000 banks signed up with ApplePay did not use the Yellow Road and for reasons known only to them, opted to use the GREEN ROAD, accepting any card they had issued as OK to be used in ApplePay without further validation.

The criminals who specialize in credit card fraud very quickly learned that these particular banks were not validating cards being put into ApplePay and the value of stolen card numbers and IDs associated with those banks skyrocketed overnight. . . because they knew they could buy stolen cards, put them into a fraudulently bought iPhone and the bank would not validate any of their cards put into ApplePay, unlike the other card issuers. It was a license to steal. . . and steal they did.

They control their developers that way. Why not the banks?

This was NOT a failing of Apple or Apple's requirements on the banks by contract, it was a failure of the banks who chose to take the GREEN ROAD in validating their own cards! There is NOT A THING APPLE COULD DO TO SAVE THE BANKS FROM THEIR OWN STUPIDITY! If you cannot see that, you are truly delusional.

BofA is so bad they’ll never qualify for this.

Bank of America and Wells Fargo were the first two banks signed up, and happen to be two of the card issuers that I use. BOTH use the YELLOW ROAD and two factor validation to authenticate the cards I put into my ApplePay. Bank of America telephoned me using my on file phone number which they had with my credit and debit cards, while Wells Fargo texted a PIN activation number to my on file phone number as per my arrangement for two-factor ID confirmations for activation. Neither just willy-nilly accepted the card. I also have a card with Chase and they called me on the phone to confirm that I was indeed adding the card. Several other credit or debit cards were handled either by emailing a PIN activation code to my email address on file with the credit/debit card issuing bank, or a phone call. Not once was it just suddenly activated without two factor YELLOW ROAD activation from my issuing bank.

So, yes, its Apple’s fault. That they aren’t going to deign to explain the product in the first place to anyone in a coherent manner is just part of their unique charm.

What part of "THE REQUIREMENT TO USE TWO-FACTOR VALIDATION IS IN THE CONTRACT WITH APPLE" do you fail to understand?

Apple did explain the product and the requirements to these banks. . . who must have competent legal departments who also explained to them what was required and expected of them. SOMEONE failed to follow through. It was easier to just not do the proper validation . . . or they just did not expect the sheer numbers of people who were going to be trying to provision their cards in their iPhones and did not put the staff in place to handle the influx. . . and pushed it off onto the Customer Service instead of their Fraud Prevention Department. . . or just threw up their hands and said "Approve every card!"

Perhaps the bankers were naive. . . in any case, the problem has been shown it was not at Apple's end. The logo on the box of ApplePay has an Apple on it. People rank on MSFT all the time for selling beta to their customers. I don’t see how this is any different, except that THIS beta can wipe you out financially, and perhaps lead to your identity being stolen so that you don’t $hit right financially for a decade.

This is NOT a beta product, RinasesofDs. ApplePay is working as described. ApplePay is secure. No one has hacked into ApplePay. And, no Rina, it cannot lead to having your identity stolen. There is no part of ApplePay that is even in question for that. As a matter of fact, the identity of the cards being used was ALREADY stolen before ApplePay was involved. Those were stolen when someone used their legitimate card to make a purchase at a restaurant and gave the card to a waiter or waitress who took it away charged it for your meals, but also made a complete copy of it, swiped it through a magnetic reader to copy what's on the strip on the back, and then sold it on websites dedicated to that purpose to supplement his or her income, or to buy something on line with the real card number and provided the information to a shady website, or a hacker got it from Home Depot, Starbucks, Target, or any number of merchants where the card was used sometime in the past. . . or the card owner used it at an ATM or Gas Pump with a secondary card reader added on top to the legitimate card reader and a miniature video camera positioned to record the entering of the PIN. . . or other phishing expeditions to separate the card owner from his information.

They think they’ve got political cover to do stuff like this, so they do it. It’s bad business.

This is a PROTOCOL problem at a few banks. This is an operator error. It's a Read the F'ing Manual problem. It is a problem created by someone making an assumption. It is a loose nut on the keyboard problem; an ID10T problem at the BANKS; a midlevel MANAGEMENT problem where some heads are going to roll. The cost of this will come out of the bottom line at the banks who allowed their mid-level manager to make the bad assumptions. . . and ignore the contract their upper level management signed with Apple which required much more stringent safeguards.

It is not, however, a problem inherent in ApplePay or at Apple.

27 posted on 03/18/2015 11:00:10 AM PDT by Swordmaker (This tag line is a Microsoft insult free zone... but if the insults to Mac users contnue...)
[ Post Reply | Private Reply | To 25 | View Replies ]


To: Swordmaker

ApplePay + the banks part in this = the product.

I can’t make it any simpler than that. It doesn’t matter than an idiot at the bank is responsible for the problem. All that matters is the product isn’t reliable.

That’s not a delusion. That’s marketing.

Talk to GM about this. The airbags being just one reason for the record recalls they had last year. GM’s logo is on the car. That the airbag tried to decapitate some of their customers, while being a significant supply chain problem, damages the GM brand.

Apple needs to be the one coming down on the banks - like a ton of bricks. The public and the government need to see that Apple’s got this.

Apple’s not doing that.

Government Motors, in the end, probably doesn’t care about the recalls like Ford would because in the end Uncle Sugar will be there to bail them out, like Chrysler.

“Imported from Detroit” - probably a truer statement now than it was 30 years ago, given you can put ‘-istan’ on the back of Detroit and be pretty close to the truth.

This is Apple’s problem. The bank is an absolutely critical part of the supply chain here. Either they deal with the supply chain issues or pull the product.


29 posted on 03/18/2015 12:13:02 PM PDT by RinaseaofDs
[ Post Reply | Private Reply | To 27 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson