Tried at gigi coffee mytown card terminal just now and it failed lol. Tried at Daiso and MrDIY ok

This the one you should be worried about; Visa + Express Transit.

Mind the date; Oct 2021. It might have been fixed, but FYI FYA.



https://www.thestar.com.my/tech/tech-news/2...-dangerous-flaw

Remove Visa from Apple Pay travel card feature due to dangerous flaw

CYBERSECURITY
Friday, 01 Oct 2021 11:45 AM MYT

Researchers have urged iPhone users to remove Visa as a transport card via Apple Pay after uncovering a flaw which they say fraudsters could use to bypass security and make unlimited contactless payments.

Experts from the University of Birmingham and the University of Surrey warned the issue could be exploited to make transactions from an iPhone inside someone’s bag, without their knowledge.

They claim the vulnerability only happens on Apple Pay when a Visa card is set up as an Express Travel Card, also known as Express Transit mode – a feature intended for owners to tap in and out of public transport without needing to unlock their phone.

Using simple radio equipment, the team were able to trick the iPhone into thinking it was communicating with a transit gate when it was actually a payment reader used by shops, known among cyber experts as a “man-in-the-middle” attack.

This was done by identifying a unique code broadcast by transit gates or turnstiles, which was then used to interfere with the signals between the iPhone and a shop card reader.

“iPhone owners should check if they have a Visa card set up for transit payments and if so they should disable it,” said Dr Tom Chothia, co-author of the study, from the University of Birmingham.

“There is no need for Apple Pay users to be in danger, but until Apple or Visa fix this they are.”

Back-end fraud detection checks were also unable to stop any payments going through in tests carried out by the group.

Researchers said they shared details of the problem with Apple and Visa, claiming both companies acknowledged the seriousness of the vulnerability but have not come to an agreement on who should implement a fix. Apple and Visa have been approached for comment.

“Our work shows a clear example of a feature, meant to incrementally make life easier, backfiring and negatively impacting security, with potentially serious financial consequences for users,” said University of Birmingham’s Dr Andreea Radu, who led the study.

“Our discussions with Apple and Visa revealed that when two industry parties each have partial blame, neither are willing to accept responsibility and implement a fix, leaving users vulnerable indefinitely.”

The weakness does not affect other combinations, such as Mastercard in iPhones or Visa on Samsung Pay.

Full results of the study will be presented in a paper at the 2022 IEEE Symposium on Security and Privacy.

“We show how a usability feature in contactless mobile payments can lower security,” co-author Dr Ioana Boureanu, from the University of Surrey, added.

“But, we also uncovered contactless mobile-payment designs, such as Samsung Pay, which is both usable and secure. Apple Pay users should not have to trade-off security for usability, but at the moment some of them do.” – dpa

This post has been edited by Oltromen Ripot: Aug 9 2022, 05:55 PM

Just now tried at speedmart using apple watch. Both credit and debit failed lol. Using Maybank Mastercard. If using AW need to unlock phone first?

same here, ass itchy went to try at speedmart first also failed, try again at 7 eleven then no problem

should be speedmart prob? kek

if using aw no need,

just double click button and tap

Tomorrow there will be an announcement in the news in terms of payment security related stuffs.

Edited: Not to bring trouble to those that are involved.

This post has been edited by sadukarzz: Aug 10 2022, 10:39 PM

used it today at tescogot

pull out the card more convenient

I got 2% cash back using Amex on apple pay on top of 5% cash rebate from Amex. Does anyone know about this?

Problem is
Not many places accept Amex.

Yes because they charge more to merchant then Visa and master. But because of that they can offer more then the other two.

wise card now accepted in apple pay

inb4 necro