Skip to content
TopicTracker
From daringfireball.netView original
TranslationTranslation

Apple Pay Express Mode for Transit, When Used With a Visa Card, Is Vulnerable to Scam Tap-to-Pay Readers

A security vulnerability in Apple Pay's Express Transit Mode allows scam tap-to-pay readers to exploit Visa cards linked for transit payments. The issue is specific to Visa cards and iPhones, and doesn't affect Mastercard, American Express, or Samsung Pay. Apple states this is a Visa system issue unlikely to occur in real-world scenarios.

Related stories

  • For three consecutive days, the Headspace app has been silently installing itself on some iPhones around 1pm EST, despite automatic downloads being turned off. Users on iPhone 12, 13 Pro, and iPhone 17 have reported the same issue on Reddit. The cause of the unwanted installation remains unclear.

  • A long-time Yahoo Mail user reports receiving a notification that their account, held since 1998, will require a subscription or Plus upgrade to send or receive emails. Without payment, they face being locked out of their email account of nearly 30 years, raising concerns about the ethics of the policy.

  • A user reports that One Medical's broken system has left them unable to update an expired membership due to a data duplication error, and support is unhelpful, with Amazon and One Medical blaming each other. After two weeks of failed attempts to resolve the issue, the user now faces an urgent need to find a new provider to avoid running out of monthly medication renewals.