{"id":14940,"date":"2019-03-27T10:45:09","date_gmt":"2019-03-27T18:45:09","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/03\/27\/news-8689\/"},"modified":"2019-03-27T10:45:09","modified_gmt":"2019-03-27T18:45:09","slug":"news-8689","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/03\/27\/news-8689\/","title":{"rendered":"Want Apple Card\u2019s Security Benefits? Just Use Apple Pay"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5c9a49226dc4985db71f1166\/master\/pass\/Security-Apple-Card-1132776593.jpg\"\/><\/p>\n<p><strong>Credit to Author: Lily Hay Newman| Date: Wed, 27 Mar 2019 00:00:59 +0000<\/strong><\/p>\n<p><span class=\"lede\">At a typically <\/span>glitzy <a href=\"https:\/\/www.wired.com\/story\/everything-apple-announced-march-25-apple-event-news-tv-card\/\">launch event<\/a> in Cupertino on Monday, Apple debuted the <a href=\"https:\/\/www.wired.com\/story\/apple-credit-card-apple-pay\/\">Apple Card<\/a>, a new credit card offered in collaboration with Goldman Sachs and <a href=\"https:\/\/www.wired.com\/story\/mastercard-digital-id\">Mastercard<\/a>. Apple claims it will resolve many consumer frustrations with current credit cards: the card will be simple to sign up for, there won&#x27;t be any fees, and it will be easy to redeem rewards. The company also firmly <a href=\"https:\/\/www.apple.com\/newsroom\/2019\/03\/introducing-apple-card-a-new-kind-of-credit-card-created-by-apple\/\" target=\"_blank\">asserts<\/a> that Apple Card \u201ctransforms the entire credit card experience by \u2026 providing a new level of privacy and security.\u201d<\/p>\n<p>But you don&#x27;t need to wait until Apple Card comes out this summer to experience its touted security features. All you need to do is use Apple Pay and whatever credit card you already own.<\/p>\n<p class=\"paywall\">&quot;Nothing really changes with the Apple Card,&quot; says Avivah Litan, vice president of research at the analysis and advisory firm Gartner. &quot;It&#x27;s pretty genius actually. They already have the whole Apple Pay infrastructure built and tremendous adoption now across the world, so this is a competitive move.&quot;<\/p>\n<p class=\"paywall\">When you add a credit card to Apple Wallet to use with Apple Pay, whether it&#x27;s an Apple Card or another credit card, the service cryptographically morphs the credit card number and other details into a unique card identity that is stored in Apple&#x27;s &quot;secure element&quot; for added protection. Completing a transaction through Apple Pay then requires that unique identifier and a one-time-use security code, along with additional biometric verification from you via FaceID or TouchID. This way, your real credit card number is never even transmitted for the transaction, and a fraudster would need the one-time transaction code and your face or fingerprint to make unauthorized charges. These same security benefits will extend to Apple Card.<\/p>\n<p class=\"paywall\">Though there have been some examples of fraud on Apple Pay since its launch in 2014, security advocates generally consider these protections to be a solid improvement over typical credit card transactions. But in cases where Apple Pay isn&#x27;t an option, the Apple Card is, in terms of protections, just that\u2014a typical credit card.<\/p>\n<p class=\"paywall\">The physical card is exactly the minimalist, etched titanium slice you would expect from Apple, and it takes a good security step by displaying only your name, without a card or CVV number. But if you use the card at a store for a regular chip transaction, it seems to function like any other credit card. There&#x27;s no tech in the card itself; it can&#x27;t complete <a href=\"https:\/\/www.cultofmac.com\/614816\/apples-titanium-credit-card-is-not-contactless\/\" target=\"_blank\">contactless payments<\/a>. The card also appears, based on photos from Apple&#x27;s announcement, to have a magnetic strip on the back, which comes with its own set of <a href=\"https:\/\/www.wired.com\/2014\/09\/emv\/\">security woes<\/a>. And though the card number isn&#x27;t physically displayed, you can access it in Apple Wallet and use it to make online purchases just as you would with any other credit card. Apple would prefer that you do online transactions with Apple Pay anyway, but if you don&#x27;t there aren&#x27;t any additional special attributes of Apple Card protecting you.<\/p>\n<p class=\"paywall\">And Apple&#x27;s arrangement with Goldman Sachs and Mastercard\u2014as issuing bank and payment network, respectively\u2014is a standard setup for a branded card.<\/p>\n<p class=\"paywall\">&quot;In general for all merchants this is going to be treated as another Mastercard transaction and it\u2019s going to follow all of those rules,&quot; says John Drechny, CEO of the Merchant Advisory Group, an independent industry body. &quot;And if merchants accept the card online they\u2019re still going to have the same liability arrangement with the payment network. I don&#x27;t believe it will be any different than a normal co-branded deal.&quot;<\/p>\n<p class=\"paywall\">As is the case with any other credit card, the bank and the payment network involved in routing and executing transactions will have normal data access. Which isn&#x27;t all bad. Banks analyze consumer financial data to spot patterns and attempt to reduce fraud. They just also typically share and sell this data for other purposes.<\/p>\n<p class=\"paywall\">That&#x27;s one area where Apple Card could prove to stand out, and would be in line with the company&#x27;s emphasis on data privacy. Apple noted in its announcement that &quot;Goldman Sachs will never share or sell your data to third parties for marketing or advertising.&quot; Apple did not make mention of whether Mastercard has agreed not to share or sell user data, and did not return a request from WIRED for comment.<\/p>\n<p class=\"paywall\">As for Apple itself, the company says that it won&#x27;t have access to any user transaction data or purchasing information. Apple Card features meant to help users track their spending and analyze statement information will all be populated locally on users&#x27; devices, not on Apple servers.<\/p>\n<p class=\"paywall\">&quot;Apple gets the best of both worlds by becoming a card issuer and partnering with a bank,&quot; Gartner&#x27;s Litan says of Apple&#x27;s decision to box itself out of accessing user data. &quot;They can keep their nose clean.&quot;<\/p>\n<p class=\"paywall\">Overall, Apple&#x27;s efforts to increase Apple Pay usage are commendable from a security and anti-fraud standpoint. And it&#x27;s clear that <a href=\"https:\/\/www.wired.com\/story\/apple-subscriptions-apple-news-plus-apple-card-apple-arcade\/\">the purpose of Apple Card<\/a> is to drive adoption and use of Apple Pay. But the Apple Card itself is a little more run of the mill.<\/p>\n<p class=\"related-cne-video-component__dek\">It\u2019s time to start using an encrypted messaging app. Why? Using end-to-end encryption means that no one can see what you\u2019re sharing back and forth.<\/p>\n<p><a href=\"https:\/\/www.wired.com\/story\/apple-card-security-benefits-use-apple-pay\" target=\"bwo\" >https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5c9a49226dc4985db71f1166\/master\/pass\/Security-Apple-Card-1132776593.jpg\"\/><\/p>\n<p><strong>Credit to Author: Lily Hay Newman| Date: Wed, 27 Mar 2019 00:00:59 +0000<\/strong><\/p>\n<p>Apple says Apple Card offers &#8220;a new level&#8221; of security, but nearly all those protections are already available if you use Apple Pay.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[714,21357],"class_list":["post-14940","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-security","tag-security-security-news"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/14940","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=14940"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/14940\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=14940"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=14940"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=14940"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}