Slashdot Mirror
Starbucks Gets Mobile Payment System
Ron writes "Starbucks has started accepting mobile payments. Customers can now use the Starbucks Card Mobile app on their iPhone, iPod touch, or BlackBerry at nearly 6,800 company-operated Starbucks stores in the US plus more than 1,000 outlets inside Target stores. To pay with their phone, app users simply select 'touch to pay' and hold up the barcode on the screen to the 2D scanner at the register. The app also lets users manage Starbucks accounts and find nearby stores. To start using your device as tender, you can download the app now for iOS and BlackBerry. An Android application is also said to be in the works, but the company has not yet given a release date, and there's no word yet on plans for a Windows Phone version."
Achievement unlocked: ability to be even more pretentious whilst in line at Starbucks
Shutting down free speech with violence isn't fighting fascism. It IS fascism!
So, what? The thief buys 200 coffees on your account and sells them for cash to punters outside?
I think it would just be easier to sell the phone itself if you're going to go to the trouble of stealing it.
That's not it. Right now it's Starbucks, but soon it will be McDonalds and Wal Mart and the gas station, etc. Watch, you'll see.
Now you could argue that there's no difference between this and a credit/debit card. However there is one huge difference. With a credit card the merchant obtains the equipment from the bank, and you obtain your card from the bank. They work together, the card never leaves your presence, the card reader never leaves the merchant's point of sale, and it's hard (but not impossible) for someone to get in between both of them.
With a cell phone the "equipment" is partly in the hands of the public and relies on software and encryption to prevent hacking and "man in the middle" exploits. Well the first rule of security is never give someone physical access to your system... If the bank is assuming that the cell phone/reader combo is "safe" and does little checking (which is probably the case: banks are masters of "security by obscurity"), soon you'll be able to bill more than a coffee to someone else's account.
Where's the defectivebydesign tag when I need it?
Seven puppies were harmed during the making of this post.