Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm not interested in giving more parties access to my financial data, certainly not an ad company. And I'm not about to buy an iPhone to use it. Also, merchant support for it is abysmal. But, appreciate the tip all the same.


I don’t know where you are but NFC terminals are extremely common here (I’m in CA). And Apple Pay doesn’t track your transactions. It actually protects you better than a regular card by using a distinct number tied to the secure element in the phone, and thus your passcode/biometrics. Even if the merchant is hacked your number is useless.


Well, for the example that started this subthread, it's not exactly as if I'm entering my address to swipe my card. I'm talking about online purchases.

And I already addressed Apple, and I certainly don't trust Google. Like, sure, I'd use Apple Pay, except the entire concept of their ecosystem has no place for someone like me. Apple chooses not to support Android, not the other way around. Not least of which, I'm not at all impressed at Apple's ability to run financial products, or manage online security.

Imagine my surprise upon finding out that the only way to use 2FA with an Apple ID is a phone number. Stunning.


Apple Pay also fills all of your address information when you buy online. You can tap Apple Pay, double click the side button and done. Trusted devices are the basis of Apple 2FA, not a phone number. All of your information stored with icloud (aside from email and calendar) can also be encrypted such that if you lose your recovery key and passcode, your data is gone forever. That’s the best online security available in a consumer device.


Bruh.

> Trusted devices are the basis of Apple 2FA, not a phone number.

I own a SINGLE Apple device, a Macbook. The only option for 2FA is a phone number. And again, Apple Pay is not available to me because Apple can't be bothered to add Android support.

I came here saying crypto's completely device agnostic, app agnostic, open protocol experience of "scan a barcode, hit pay, wait 2 minutes" was ideal.

You have suggested an alternative that is proprietary, unavailable to most users of the world, and requires me trusting a company that again, can't offer me real two-factor auth protection for my Apple ID.

I'm sorry, it's not a serious recommendation.

EDIT1: To produce this screenshot, I had to login twice, once after another, in different dialog boxes, both of which let me edit my input after submitting the contents. And then the entire process stopped. Then I hit "Turn On" again and ... it's just spinning. I'm sorry, I can't take any of this serious.

https://files.catbox.moe/p6kwv5.png

EDIT2: Oh and after taking that screenshot, writing this prose, and returning, now it wants my password, again. And now it's just an empty dialog:

https://files.catbox.moe/e4qi0a.png

EDIT3: And again, now it's loaded and asked me my security questions. And finally:

https://files.catbox.moe/eolfeu.png

No, no, no, a million times absolutely not.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: