Slashdot Mirror


Rite Aid and CVS Block Apple Pay and Google Wallet

An anonymous reader writes CVS and Rite Aid have reportedly shut off the NFC-based contactless payment option at point of sale terminals in thousands of stores. The move will make it impossible to pay for products using Apple Pay or Google Wallet. Rite Aid posted at their stores: "Please note that we do not accept Apple Pay at this time. However we are currently working with a group of large retailers to develop a mobile wallet that allows for mobile payments attached to credit cards and bank accounts directly from a smart phone. We expect to have this feature available in the first half of 2015."

84 of 558 comments (clear)

  1. Good luck with that. by Noxal · · Score: 5, Insightful

    CurrentC seems way too involved for most people to ever give a shit about.

    1. Re:Good luck with that. by Anonymous Coward · · Score: 5, Interesting

      Not only that, but it's a huge pile of data mining/theft. They requires direct access to take money from your current account (it bypasses the credit card companies, which is why they want to use it), and it requires access to your health data (for no known reason, but it requires it). Basically, it's a cluster fuck of ID theft.

    2. Re:Good luck with that. by schwit1 · · Score: 3, Insightful

      Current account? It's your checking account.

      There are bad ideas out there but few come close to this one. Allowing retailers the ability to directly deduct money from your checking account is a hackers wet dream.

    3. Re:Good luck with that. by Lehk228 · · Score: 2

      there is no obligation to accept legal tender, except for a debt. a store can choose not to sell to you if you choose to pay with a $100 bill.

      --
      Snowden and Manning are heroes.
    4. Re:Good luck with that. by SeaFox · · Score: 3

      How does this not violate these stores' agreements with Visa (etc), which have explicitly partnered with Apple and Google to provide Pay and Wallet as a valid method of using their (virtual) cards at the register?

      Because their agreement is to accept credit cards issued by Visa/Mastercard? What makes Apple Pay more secure and private is you're literally not giving the store your card (information) in any form. It's more like Paypal -- you give Apple Pay permission to disperse the fund from your Visa/MC to the retailer, And Apple Pay is using a one-time payment code so you can't just make a nice little list of purchases by a customer from the number being given over and over.

      I don't know why CVS or Rite Aid would be so bent out of shape about this. Don't all drugstores nowadays have Loyalty Cards programs in place? Even if you don't have a credit card account number to use the customer is willingly giving them personally identifiable info to link their purchased items to.

    5. Re:Good luck with that. by whoever57 · · Score: 5, Informative

      Current account? It's your checking account.

      UK terminology.

      --
      The real "Libtards" are the Libertarians!
    6. Re:Good luck with that. by exabrial · · Score: 3

      Think of the soccer mom scenario...

      Lady enters checkout line with baby on hip and two kids in cart. She's tired of wrangling, wants to leave ASAP.
      Apple/Google: Using one hand, pulls phone out of purse, taps, enter pin on phone.

      CurrentC: Pull phone out of purse. Unlock phone. Launch CurrentC app. Due to poor cell signal in store, app takes a long time to connect. Enter app pin. Request new transaction. Wait for QR code to show. Explain to the cashier you need them to scan this code. Wait for the second code to appear on Casher's screen. Scan that. Wait some more. Kids screaming murder now. Poor lady begins to cry.

    7. Re:Good luck with that. by Applehu+Akbar · · Score: 4, Insightful

      Because it's tapping your checking account directly, customers are not going to like this. And to use CurrentC, you have to open up an app on your smartphone and scan a QR code to make the transaction; with NFC, you just bring your phone up to a point near the register until the register recognizes a near-field chip, ready to ring up the sale as soon as you authenticate, which in Apple's case means placing your thumb on your phone's reader. NFC transactions are so fast that customers are going to want them used for everything. There are already vending machines that support it.

    8. Re:Good luck with that. by theshowmecanuck · · Score: 5, Interesting

      Bullshit. Canada was using direct debit with Interac since the early 80s. It is run by a group of banks and hits your bank account directly. It doesn't go through credit card companies. It is the most common form of payment here. I could go into a mom and pop corner store and pay this way for 30 years. People like it. It is not for profit but was formed by the banks and run on a private network. People didn't and don't want single companies like Visa or Google or Mastercard or Apple having all the power doing this. Companies that are for profit that want to take an even bigger cut of your money, run on public networks, and make money selling your data. I have a debit card that is very thin. It even fits in with the rest of my ID that I take everywhere anyway, and it is only online on a private network when I make a purchase... when the card is in the machine. Please explain what is so fucking great about Apple or Google pay on phones that run all the time on public networks, open to possible hacks.

      --
      -- I ignore anonymous replies to my comments and postings.
    9. Re:Good luck with that. by PopeRatzo · · Score: 4, Insightful

      Think of the soccer mom scenario...

      Lady enters checkout line with baby on hip and two kids in cart. She's tired of wrangling, wants to leave ASAP.
      Apple/Google: Using one hand, pulls phone out of purse, taps, enter pin on phone.

      CurrentC: Pull phone out of purse. Unlock phone. Launch CurrentC app. Due to poor cell signal in store, app takes a long time to connect. Enter app pin. Request new transaction. Wait for QR code to show. Explain to the cashier you need them to scan this code. Wait for the second code to appear on Casher's screen. Scan that. Wait some more. Kids screaming murder now. Poor lady begins to cry.

      or...

      Credit Card: One hand. Swipe. Finished.

      Why does anyone think that it's "more convenient" to use NPC than swiping a credit card?

      --
      You are welcome on my lawn.
    10. Re:Good luck with that. by ShanghaiBill · · Score: 5, Insightful

      My bank account is just as protected as my credit cards are, possibly more so.

      Not true at all. Credit cards have explicit legal protections for consumers. Also, merchants must go through an approval process before they can charge credit cards. Additionally, you keep your money while the dispute is resolved. If instead, they deduct directly from your bank account, the money is GONE, and it might already be gone from the recipient account, and in the hands of some Nigerian prince, before you even file your dispute. Unlike with a credit card, your bank has no direct financial interest in resolving the dispute.

    11. Re:Good luck with that. by GNious · · Score: 2

      We have a partially-sortof-almost-similar thing in Denmark - it has transformed into a beast of fuckeduppedness, stupidity, incompetence and security-flaws ...

    12. Re:Good luck with that. by Barsteward · · Score: 2

      "Why does anyone think that it's "more convenient" to use NPC than swiping a credit card?" - who the fuck knows? its seems like a solution looking for a problem - unless its cheaper (customer or retailor) to use the phone based solution

      --
      "The hands that help are better far than lips that pray." - Robert Ingersoll (1833-1899)
    13. Re: Good luck with that. by tysonedwards · · Score: 2, Insightful

      Than opening wallet, removing card and swiping it, entering a pin / signing a signature, returning it to your wallet versus just touching a device to a reader and having your device authenticate via your fingerprint / continuous biometrics?
      Yeah, that is so much easier. Plus, there's the general liability concern with the transaction being biometric secured versus someone stealing your card. There's obviously some interest in why banks are interested in this detail for sure, hence why they even implemented single transaction card numbers.

      --
      Thirty four characters live here.
    14. Re:Good luck with that. by PopeRatzo · · Score: 3, Interesting

      Because NFC (esp. Apple Pay) really is more convenient,

      Your arguments are a little bit nonsense. Why do you have people with credit cards "digging them out of their wallet", but phone users seemingly already having their phones in their hand? Why would I "already have the phone in my hand" unless I'm a teenager?

      Seriously, I engage in maybe two transactions with brick and mortar merchants a day. The difference between pulling out a credit card and unlocking my phone, typing in a PIN or futzing with a fingerprint, finding the NFC app (or whatever) is so tiny as t be meaningless. Then on top of it, I would feel foolish paying for something with my phone, because so far, everyone I have ever seen paying for something with a phone looks either a little bit foolish or very foolish.

      Being an obedient consumer is very low on my list of priorities. I'm OK with letting the NFC revolution pass me by.

      --
      You are welcome on my lawn.
    15. Re: Good luck with that. by PopeRatzo · · Score: 4, Insightful

      Yeah, that is so much easier.

      There must be something wrong with me. Not once have I ever purchased something in a store and thought, "Gee, conducting that transaction was incredibly difficult. I wish someone would make an easier way to pay for this bag of groceries than this complex and difficult process of swiping a credit card."

      --
      You are welcome on my lawn.
    16. Re:Good luck with that. by PopeRatzo · · Score: 2

      Well because most stores will make you sign a receipt if you are swiping.

      Not if the transaction is under $50, which is by far the majority of my transactions.

      --
      You are welcome on my lawn.
    17. Re:Good luck with that. by whoever57 · · Score: 4, Informative

      I do not intend to own a credit card, I do not need one, as the same is with most people.

      Need, perhaps not. Nevertheless, it is a smart decision to use one. Need to dispute a charge -- with a credit card, you have protections under Federal law. Using a debit card, you have fewer protections. Want to rent a car? Good luck doing that without a credit card. I could go on, but the list is too long.

      Bottom line, unless you have very poor impulse control, not having a credit card is a poor financial decision.

      --
      The real "Libtards" are the Libertarians!
    18. Re:Good luck with that. by AuMatar · · Score: 4, Informative

      In several ways

      1)Debit cards don't build credit history. This makes it hard to get a car or house loan at good rates.

      2)Credit cards have 0% interest if you pay at the end of the month every month.

      3)Debit cards do not earn you interest. If you have an interest checking account (rare, and usually such a low rate that its a joke, sub 1% in most cases), you earn that money regardless of if you have or use a debit card.

      4)In the US, many purchases such as hotel, rental car, and gas put a hold on your account for more money than the actual charge. This hold goes away once the car is returned/hotel is checked out/a few days (for gas), but in the meantime that's additional money you can't access.

      5)Emergencies/hard times. Sometimes shit happens. You may lose your job and run low on cash. You may have a series of car and house repairs. Its always a good idea to have an additional emergency fun you can call on for short term cash.

      6)Your bank may put a hold on your debit card for suspicious activities. In that case, your card is useless. Having a backup is always a good idea. There's been several times this has saved my ass when traveling.

      --
      I still have more fans than freaks. WTF is wrong with you people?
    19. Re:Good luck with that. by Noxal · · Score: 2

      No it is not. Disputing a credit charge and dealing with a bullshit checking account withdrawal are just so different. With the latter your money is already gone and you may never see it again, where with the former you're not out anything but the reduction in your available credit while the dispute processes.

    20. Re: Good luck with that. by R3d+M3rcury · · Score: 2

      But you need a device out so open purse find phone, swipe, authorize and put away.

      Gosh, if only you had something like a watch that could do this...

    21. Re: Good luck with that. by cbeaudry · · Score: 3, Interesting

      Maybe in the USA.

      In the rest of the world, restaurants have WIFI pay terminals that waitresses can bring to the table for credit card or debit card transactions and all the new ones support NFC as well.

    22. Re: Good luck with that. by Goetterdaemmerung · · Score: 2

      Yeah, that is so much easier.

      There must be something wrong with me. Not once have I ever purchased something in a store and thought, "Gee, conducting that transaction was incredibly difficult. I wish someone would make an easier way to pay for this bag of groceries than this complex and difficult process of swiping a credit card."

      In the name of progress:

      In the beginning people counted out change in chickens and goats, or other favors.
      Then came currency, where change was counted out in pennies and dollars.
      Then came bank checks, which were convenient, but took time to write out.
      Then came credit companies with a mechanical swipe tool in carbon copy. Too slow: add convenient swipe and sign. Gosh, who uses checks, they take forever!?
      Finally comes touchless. Precious seconds are saved! No swipe, no sign, no finding a pen - just touch phone/device and authenticate with it.

      This probably saves a few seconds, and potentially adds important network security. Hopefully your phone doesn't run out of power or criminals don't find a loophole through the extra third parties.

      Personally, I still prefer cash wherever possible with credit card as secondary. Lots of small companies give a cash discount if you ask...

    23. Re:Good luck with that. by Minupla · · Score: 5, Interesting

      Actually, post Chip+Pin (and RFID interact flash for that matter) this sort of attack isn't possible. That's because the chip inside the card creates a unique one time approval for the transaction. The approval is un-replayable,

      At worst, attack wise, you might be able to perform a turnstile attack on it (Interac flash reader, taped to a turnstile say), but transactions over Interac flash are capped at under 100$ and every 5 transactions you have to re-auth with a full chip and pin, so the banks' risk is pretty limited there.

      Disclaimer: I've not done an indepth analysis of the security controls myself. I know there were some weaknesses in the Euro implementation around not signing the list of allowable transaction verification mechanisms or somesuch (look up the blackhat talk if you need to know) but it's a LOT more difficult these days then inserting a skimmer on the terminal and video recording the pin. (Interac was always two factor, until interac flash).

      Min

      --
      On the whole, I find that I prefer Slashdot posts to twitter ones because I don't get limited to 140 chars before
    24. Re:Good luck with that. by Bent+Spoke · · Score: 2

      "Why does anyone think that it's "more convenient" to use NPC than swiping a credit card?"
      Because then you can say "this payment was sent from my iphone"! whoppee

    25. Re:Good luck with that. by tlhIngan · · Score: 5, Interesting

      Because it's tapping your checking account directly, customers are not going to like this. And to use CurrentC, you have to open up an app on your smartphone and scan a QR code to make the transaction; with NFC, you just bring your phone up to a point near the register until the register recognizes a near-field chip, ready to ring up the sale as soon as you authenticate, which in Apple's case means placing your thumb on your phone's reader. NFC transactions are so fast that customers are going to want them used for everything. There are already vending machines that support it.

      Actually, the QR code is because iPhones didn't come with NFC. And Apple isn't allow app access to NFC yet (most likely because the NFC APIs aren't stable yet, but we can pretend it's to kill bad ideas like CurrenC as well).

      The only reason for the fingerprint reader usage is because EMV demands it to access the secure element (Note: iPad Air 2 actually has an NFC chip in it, but no NFC antenna! It's suspected at least part of the secure element is the NFC chip, otherwise why have a completely useless chip htere?).

      Apple Pay is just a fancy implementation of the EMV payment spec - it actually doesn't really have much "Apple" to it other than spiffing it up to make it all shiny and usable Apple-style. The spec is from EMV and that dictates how it all works.

      People didn't and don't want single companies like Visa or Google or Mastercard or Apple having all the power doing this.

      Apple doesn't control squat. All Apple Pay is is a virtual credit card implementing the spec with EMV. That's why it works practically everywhere with ZERO retailer involvement - as long as their terminals can do NFC purchases, Apple Pay will work. It does require the payment processor and the banks to have their end of the EMV spec done, which is why it only works with a few banks right now.

      This is unlike Google Wallet, which is a payment system like Paypal - Google gets all your transaction information because they need to charge you. In Apple Pay, it's just using another representation of your credit card, which means Apple doesn't get involved in the transaction. It's why Apple Pay gets charged out at Card-Present rates, while Google Wallet only gets Card Not Present (higher fees because higher fraud).

    26. Re: Good luck with that. by bickerdyke · · Score: 2

      and how do these $10 compare to your annual credit card fee?

      --
      bickerdyke
    27. Re: Good luck with that. by N1AK · · Score: 2

      Than opening wallet, removing card and swiping it, entering a pin / signing a signature, returning it to your wallet versus just touching a device to a reader and having your device authenticate via your fingerprint / continuous biometrics?

      Went to London on Saturday. Got off my train, used my NFC credit card to tap onto/off all underground trains. Paid for lunch using NFC. Paid for dinner using Wahaca's app (you can pay and leave without having to wait for bill etc). Also went to the supermarket on Sunday and they have NFC payment. Didn't have to get my card out of the front pocket of wallet once all weekend. Phone payment has benefits, and downsides, but comparing to some some backwards implementation of card payment doesn't prove the need for it.

    28. Re: Good luck with that. by Jack+Griffin · · Score: 2

      Than opening wallet, removing card and swiping it, entering a pin / signing a signature, returning it to your wallet versus just touching a device to a reader and having your device authenticate via your fingerprint / continuous biometrics?

      Credit cards must be different where you're from. Here retailers all have contact-less payment terminals. My credit card works through my wallet so the transaction consists purely of taking wallet out of pocket, swipe past the reader, putting wallet back in pocket. From transactions over $100 I have to type a four digit pin which takes all of 1 whole second. Interestingly, my bank has an app which already uses my NFC chip on my phone to perform the exact same transaction. But also lets me withdraw up to $200 cash from an ATM without my card. Apple and Google have a solution to a problem that doesn't exist.

  2. No thanks. by grub · · Score: 4, Insightful

    A token based system vs. direct access to my personal data and bank account? I'll take Apple Pay, thanks.

    --
    Trolling is a art,
    1. Re:No thanks. by Alan+Shutko · · Score: 3, Informative

      Apple Pay is more secure than a card, since magstripe cards are woefully insecure (read any of the recent POS hacks). It won't release a payment ID until after it reads your fingerprint, and it sends a token with cryptogram instead of the PAN in the clear.

      It is not smaller, but it may be easier to use as people switch from swipe to chip and sign in the US.

    2. Re:No thanks. by Anonymous Coward · · Score: 2, Informative

      Think for two seconds. It's called Fraud.

      Target data breach. Home Depot data breach. TJ Maxx data breach. And the list goes on forever. I have to replace my credit cards every 12-18 months because of fraud.

      The value of Apple Pay, and other tokenization technologies, is that they prevent merchants from ever receiving a credit card number and severely limit the ability for malicious employees or hackers from obtaining raw CC data.

    3. Re:No thanks. by Alain+Williams · · Score: 4, Informative

      since magstripe cards are woefully insecure

      In Europe we moved to EMV some 6-9 years ago. It is not without its problems, but cloning cards & other fraud is much harder. A resulting problem is that the banks try to claim that it is 100% secure and so claim that any fraud must be with the knowledge of the card holder- or due to their carelessness.

    4. Re:No thanks. by hey! · · Score: 5, Funny

      Yes but we're Americans. If we pay attention to what works for you then the socialists have won.

      --
      Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
    5. Re:No thanks. by Zontar+The+Mindless · · Score: 3

      /me recalls hearing about something called "single point of failure"...

      --
      Il n'y a pas de Planet B.
    6. Re:No thanks. by CaptainDork · · Score: 5, Insightful

      Apple has negotiated a lower fee and banks are agreeable to absorb initial revenue loss in an effort to make NFC a standard.. The fees are needed mostly to pay off credit card fraud and Apple Pay reduces that liability (so the reasoning goes). Rumor has it that the Apple Pay user will be liable for fraud to a much larger degree because it's so hard for the process to be abused.

      The competing CurrentC standard, supported by major retailers, kills credit card fees and puts the fraud burden 100% on the consumer. For that reason, retailers favor CurrentC over Apple Pay and Google Wallet, both of which use NFC.

      While Google Wallet and Apple Pay are available now, CurrentC is going to be late to the party by about a year.

      That delay is what's prompting Rite Aid and CVS (supporters of CurrentC) to pull NFC from their POS.

      --
      It little behooves the best of us to comment on the rest of us.
    7. Re:No thanks. by Richard_at_work · · Score: 2

      Its amazing how few European retailers are on that lit of data breaches involving payment data - I wonder why that is, and how we did it without Apple or Google getting involved.

    8. Re:No thanks. by AK+Marc · · Score: 3, Insightful

      Your credit cards don't stop working when your phone does. There is no single point of failure. You just have to go get your cards, for your hypothetical failure.

    9. Re:No thanks. by TubeSteak · · Score: 4, Informative

      In Europe we moved to EMV some 6-9 years ago. It is not without its problems, but cloning cards & other fraud is much harder.

      MasterCard, Visa, Discover and American Express set a USA deadline of October 2015.
      After that deadline passes, any merchant who hasn't switched over to a chip & pin/signature setup will be liable for credit card fraud that happens in their stores.

      Naturally, no one actually expects 100% compliance by the deadline, so who knows how it will actually shake out.
      Keywords: Liability Shift

      --
      [Fuck Beta]
      o0t!
    10. Re:No thanks. by R3d+M3rcury · · Score: 2

      Your credit cards don't stop working when your phone does. There is no single point of failure. You just have to go get your cards, for your hypothetical failure.

      Uh...yeah. What if your cards are at home and you're 300 miles away with only enough gas in your tank to drive for 200 miles?

      It's a worthwhile point. You're putting all of this on your phone. So you're out with friends at a bar and you accidentally spill a beer on your phone. Bzzt! One shorted out phone! Well, let's hope the people at the bar won't mind if you leave your tab open while you go home and get your credit cards. I'm sure they'll trust you to come back and settle your tab.

      There's also the battery issue. You may want to think twice about watching that movie on your phone if you're going to need to pay for a cab at your destination. Or, at least, always make sure you have a charge cable with you.

    11. Re:No thanks. by Darinbob · · Score: 2

      And a chip is more secure than NFC, which most smart people turned off on their phones within an hour of buying them.

    12. Re:No thanks. by Goetterdaemmerung · · Score: 2

      Part of the US credit card fee of ~3% or so is to cover fraud. When your banks switched to EMV, did they reduce the fees at all to compensate or are they taking the reduced risk of fraud as profit?

    13. Re:No thanks. by rahvin112 · · Score: 4, Informative

      Don't be foolish. The laws that govern this have no requirement that a "credit card" be involved. The law is called the Federal Credit Billing Act [FCBA] and it covers any use of interstate consumer credit. The only reason debit cards aren't covered is because credit is never extended, the transaction is a banking transaction that falls under separate banking laws which treat a debit transaction as an electronic check. To avoid the FCBA requirements Apple would be required to essentially act as a bank, which they aren't, and process the transaction as debit cards. This would mean preloading money into the account before you could spend it.

      If Apple were stupid enough to attempt what you suggest they would get smacked down so hard they wouldn't stop spinning for a month. The FCBA is incredibly strict and provides guaranteed consumer rights and very harsh penalties for violations including the immediate suspension of business if caught violating it. I sincerely doubt Apple's lawyers are that dumb so this "rumor" your heard is the made up variety that is quite common with Apple.

      http://www.consumer.ftc.gov/ar...

      The law applies to "open end" credit accounts, like credit cards, and revolving charge accounts, like department store accounts. It doesnâ(TM)t cover installment contracts â" loans or extensions of credit you repay on a fixed schedule. People often buy cars, furniture, and major appliances on an installment basis, and repay personal loans in installments, as well.

      This should bloody well be common knowledge. The FCBA is the only reason credit cards ever became successful and was a major act of congress that superseded many state laws. It covers pretty much any act of credit except for a few very special exceptions.

  3. This is a special kind of stupid. by jpellino · · Score: 2

    To push away the two leading mobile solutions especially when you're in the midst of losing smokers in CVS (a good move health-wise but consequential for sales nonetheless)? Heck they wouldn't even do Passport.

    --
    "Win treats sysadmins better than users. Mac treats users better than sysadmins. Linux treats everyone like sysadmins."
  4. Good luck with that. by pla · · Score: 4, Interesting

    How does this not violate these stores' agreements with Visa (etc), which have explicitly partnered with Apple and Google to provide Pay and Wallet as a valid method of using their (virtual) cards at the register?

    And worse than simply not accepting it, they did so because they plan to come up with their own competing product??? WTF, Rite Aid, do you really think people will rush to use yet another crappy store-specific solution, rather than look confused at the cashier for a few seconds before walking away, leaving their stuff at the register?

  5. DOA due to Liability shift to consumer... by kbonin · · Score: 5, Insightful

    It appears that CurrentC moves liability exposure almost entirely onto the consumer, whereas Visa limits consumer exposure to $50 that most banks waive in actual fraud. Add full access to your bank account to make the worst-case liability exposure whatever you have in your account, and privacy terms that allow them to use health related data that could have been protected under HIPPA. Tell me again why I would want to use this?

    1. Re:DOA due to Liability shift to consumer... by Solandri · · Score: 5, Insightful

      It appears that CurrentC moves liability exposure almost entirely onto the consumer, whereas Visa limits consumer exposure to $50 that most banks waive in actual fraud.

      They are two sides of the same coin. One shifts liability from the merchants to the consumer, the other shifts liability from the consumer to the merchants.

      If we really want security in the electronic transaction system, liability has fall upon the organization(s) operating the transaction system - Visa, the banks, etc. If they don't pay a financial cost for fraud, they have no incentive to improve the system to prevent fraud. Penalizing consumers just drives them to use cash. Penalizing merchants just drives them to stop accepting cards and electronic payment. It's only when you penalize the folks who control the electronic transaction systems that you'll see improvements to said system.

    2. Re:DOA due to Liability shift to consumer... by AK+Marc · · Score: 3, Interesting

      HIPAA (note spelling) doesn't protect billing data, when properly signed away in the ToS. That you can figure out from someone's purchases that they are a teen on the pill doesn't mean that "health data" is being transmitted, or that the information transmitted isn't required for proper billing records.

      But then, someone who talks about HIPAA and doesn't know how to spell it, obviously doesn't know what they are talking about, but isn't afraid to post like they do, confusing others.

  6. I don't blame the retailers by tenverras · · Score: 2

    There are a lot of hidden costs associated with using cards and other technologies with payment terminals. When you pay $6.00 for your purchase, the retailer doesn't get all that money.The processing company that processes all the transactions paid for with cards at a retailer gets a cut of every transaction. If it is a credit card, like Visa or MC, then the credit card company also takes a small percentage.

    While Google Wallet and Apply Pay may be free to the end-user, I highly doubt that it is free for the retailer. Google and Apple are likely taking another slice of the pie. So... percentage for the processing company, percentage for the credit card company and a percentage for Google or Apple. It's not beyond belief that this could easily exceed 5% of the purchase price, which could be about 10% of the profit margin. That's a huge number, even if it only amounts to $0.30 on a $6.00 purchase.

    It's an annoying hassle for CVS customers to have to wait and deal with another mobile payment system, but it easily means millions in savings each year, nationwide.

    1. Re:I don't blame the retailers by gnasher719 · · Score: 4, Interesting

      While Google Wallet and Apply Pay may be free to the end-user, I highly doubt that it is free for the retailer.

      Apple doesn't get a penny from the end user or from the retailer, so I suppose Google doesn't either. With Apple Pay the retailer pays the lowest rate available (percentages depend on how secure the payment method is; the more secure, the cheaper for the merchant). Apple gets some money from the bank; the bank saves money by having less fraud.

    2. Re:I don't blame the retailers by recoiledsnake · · Score: 2
      --
      This space for rent.
    3. Re:I don't blame the retailers by DogDude · · Score: 2

      Apple doesn't get a penny from the end user or from the retailer

      So they're doing this out of the goodness of their corporate heart?

      If you believe this, then I have a bridge to sell ya'.

      --
      I don't respond to AC's.
  7. Re:This'll end up in court... by silfen · · Score: 4, Insightful

    This isn't the sort of thing that "the market" can decide. I expect that it'll end up in court.

    Why can't the market decide this? Why should this end up in court? We currently have deeply entrenched market dominance by credit card companies. Alternative payment schemes are coming out and attacking that dominance, and that only works if a critical mass of retailers actually stand up to the currently dominant players. If courts intervene, it will lock in the dominance and monopoly profits the credit card companies are extracting. Why do you think that would be a good thing?

  8. The customer is wrong, wrong, wrong. by Primate+Pete · · Score: 4, Insightful

    Shitty customer service is not a strategy.

    1. Re:The customer is wrong, wrong, wrong. by ColdWetDog · · Score: 2

      You MUST be new here.

      --
      Faster! Faster! Faster would be better!
  9. Re:HooRay! by ColdWetDog · · Score: 2

    A CVS fanboi?

    If this isn't a poster child for the 'long tail of the Internet' I don't know what is.

    --
    Faster! Faster! Faster would be better!
  10. Re:I'm waiting to see who gets compromised first. by Karlt1 · · Score: 4, Informative

    Do I really believe even for a moment that letting google, apple, or someone else manage my cards for me will stop that? Can you imagine a situation where one of these companies is compromised and not just one but maybe all of your accounts become compromised with it?

    Apple never stores your credit card. You enter your credit card into the phone, it is sent to the credit card issuer and the credit card issuer sends one time use tokens directly to your phone. Those one time use tokens can only be used by authenticating with your fingerprint.

  11. Re:Good for them by Zontar+The+Mindless · · Score: 4, Informative

    What magstripe? I live in Europe, where we dropped that nonsense in favour of chip+PIN years ago.

    --
    Il n'y a pas de Planet B.
  12. Gruber at DaringFireball nails it by dackroyd · · Score: 3, Informative

    Gruber at DaringFireball nails it:

    What Apple gets and what no one else in the industry does is that using your mobile device for payments will only work if it’s far easier and better than using a credit card. With CurrentC, you’ll have to unlock your phone, launch their app, point your camera at a QR code, and wait. With Apple Pay, you just take out your phone and put your thumb on the Touch ID sensor.

    Tim Cook was exactly right on stage last month when he introduced Apple Pay: it’s the only mobile payment solution designed around improving the customer experience. CurrentC is designed around the collection of customer data and the ability to offer coupons and other junk. Here is what a printed receipt from CVS looks like (https://twitter.com/fromedome/status/526027483901333505). It looks like a joke, but that’s for real. And that’s the sort of experience they want to bring to mobile payments. ...

    And the reason they don’t want to allow Apple Pay is because Apple Pay doesn’t give them any personal information about the customer. It’s not about security — Apple Pay is far more secure than any credit/debit card system in the U.S. It’s not about money — Apple’s tiny slice of the transaction comes from the banks, not the merchants. It’s about data.

    Apple's great strategic advantages over Google, is that they put their customers (i.e. the people who buy Apple's goods and services) needs over their partners needs to be able to data mine those users.

    --
    "Free software as in beer, copy protection as in racket" - Telsa Gwynne
    1. Re:Gruber at DaringFireball nails it by AmiMoJo · · Score: 4, Interesting

      You realise Google Wallet is pretty much the same. Unlock your phone, touch the pad. No data handed over, one time code that can't be reused so cloning is pointless.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    2. Re:Gruber at DaringFireball nails it by pherthyl · · Score: 2, Interesting

      Pretty much doesn't cut it. With Google wallet you need to unlock your phone (entering that pin) and then potentially enter the Google wallet pin to authorize the transaction. So two pins versus none. Google wallet hasn't taken off because it's more hassle than using a credit card, which was the point.

    3. Re:Gruber at DaringFireball nails it by AmiMoJo · · Score: 3, Informative

      You don't need two PINs. In fact you don't need a PIN at all in some situations. It's up to you, you can configure it how you like. I use it often, it's very easy and quick.

      Google Wallet has some other advantages. You don't have to pay with a credit or debit card, you can use the balance from your Wallet. You can control the balance available to spend that way, and it prevents purchases being reported to the bank.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    4. Re:Gruber at DaringFireball nails it by Overzeetop · · Score: 4, Insightful

      Google knows only one thing more than Apple does - the value of your purchase. Apple knows which store you went to and when you paid (you are using their hardware; yes, they know). If you're paranoid enough to worry about the difference, you're probably paranoid enough to know that the Bank is tracking your purchase and selling your information on the open market and you should be paying with cash.

      I'll say this, though - these merchants are NEVER getting a direct connection to my bank account. To me, Visa/MC/Amex's role is to buffer me from fraud and abuse. I realize that the merchants chafe over rates, swipe fees, and liability (I do to), but they seem to care very little about security and I really don't want their hand in my till.

      --
      Is it just my observation, or are there way too many stupid people in the world?
    5. Re:Gruber at DaringFireball nails it by vjl · · Score: 2

      Google Wallet also currently requires a live data connection because the transaction is verified in the cloud, not on a chip on the handset/watch. With Apple Pay, no data connection is required, which is useful in areas like where I live, where network coverage is very spotty due to the rural-nature of the area.

  13. Re:Good for them by Ksevio · · Score: 2

    So you should feel right at home with NFC+PIN then

  14. Target, KMart, and WalMart by exabrial · · Score: 3, Informative

    First, CurrentC involves scanning TWO QR Codes. Wow. It's almost like we should use a radio to exchange the data. Durr. Second, Target, KMart, and Walmart are involved with this... KMart and Target are idiots; Walmart has an empire, what are they colluding with them? Apple customers are elitist that will go out of their way to use their fancy phones to do anything (ex: boarding passes). Whichever one of these retailers wakes up first and embraces secure technology wins a whole lot of new business.

  15. Re:I'm waiting to see who gets compromised first. by jedidiah · · Score: 3, Insightful

    One hack can compromise the credit cards for MILLIONS of people.

    "Hacking your wallet" requires a particular person to target you specifically and physically.

    In order to do as much damage as a single credit card breach can, everyone in New York City would have to be the victim of a pickpocket at the same time. The great thing about computing is automation. You can fuck up on a grand scale really quickly and really easily.

    --
    A Pirate and a Puritan look the same on a balance sheet.
  16. Re:There will be what we end up using by Applehu+Akbar · · Score: 2

    NFC is not for Apple only. It's a multi-vendor standard.

  17. Re:This'll end up in court... by XxtraLarGe · · Score: 2

    This isn't the sort of thing that "the market" can decide. I expect that it'll end up in court.

    Sure it is. Rite Aid & CVS will shortly discover whether or not their customers who use Apple Pay & Google Wallet are more loyal to them than they are to Apple or Google, and make their adjustments accordingly.

    --
    Taking guns away from the 99% gives the 1% 100% of the power.
  18. Re:There will be what we end up using by LynnwoodRooster · · Score: 2

    > Yup, multiple credit cards have been able to survive over the long term.

    Yes. And multiple credit cards have also died out and been pushed out of the market.

    ...checks UID of jedediah...

    OK gramps, just because your JCB card isn't universally accepted, and Golden Corral no longer takes your Diner's Card is no reason to get worked up over newfangled payment systems...

    --
    Browsing at +1 - no ACs, I ignore their posts. So refreshing!
  19. Re:This'll end up in court... by Noah+Haders · · Score: 2

    The market will decide this just fine. By the time CurrentC actually comes to market (likely 12 months late and missing promised features) apple pay will already be deeply engrained and driving traffic to participating retailers. Then, once CurrentC is launched there will be a massive pwnage. Then, the current CurrentC backers will flee, people will get fired, and the system will die. Yes, the market works.

  20. Re:This'll end up in court... by Richard_at_work · · Score: 2

    That argument covers Apple Pay as well - I can already pay with contactless technology using both my Visa and MasterCard cards without having to sign up to Google, Apple, PayPal or anyone else, so what do they bring to the table?

  21. There is absolutely no good reason for this. by grahamsaa · · Score: 4, Insightful

    I used to use Google Wallet / tap to pay at Rite-aid frequently as there's one across the street from my office. I liked it. The other day when I went in and tried and got a message about Apple pay not being supported, I was pretty confused. I don't use Apple pay. Why disable functionality that was previously working and that customers want to use? Google wallet does not charge merchants at all (http://www.google.com/wallet/business/faq.html). If stores want to set up their own competing wallet apps, that's fine, but disabling something that previously worked and that costs them nothing is really stupid.

    --
    Facts have a liberal bias.
  22. My solution: (hint-it's cold, and it's hard...) by Anonymous Coward · · Score: 2, Interesting

    I already carry something around in my wallet for paying for things that's convenient, secure, (as long as I don't lose my wallet,) and accepted virtually everywhere I go.

    It's called, "cash."

    Are there downsides to using "cash" for paying for things? Sure, you have to remember to get it before spending it, and generally you have to earn it before you can use it. On the upside... you have to remember to get it before spending it, reducing frivolous and mindless, impulse-buy spending, and you have to earn it before you can use it, reducing the odds of going into debt.

    It also assures me of privacy, (it's way harder to track than credit/debit cards, mobile payment systems, etc.) doesn't cause me to get e-mailed or snail-mailed spam or junk-mail, etc., I don't have to worry that some ass-hat will think my "spending habits" are "irregular" and decide to decline my "cash" payment, or that some jack-booted government thug will decide my spending habits are too similar to someone else' spending habits and that I'm therefor up to no good...

    "Cash" is the best mobile-payment system ever created, which is why its catch-phrase has hung around so long... "Cash is king."

    But enjoy your magical, hackable "near-field" bullshit, and your "magnetic-stripe" crap. I tried many such things, and have gone back to cash. Accepted pretty much everywhere I ever go, or might go, trace-free, and if you're really worried about cooties... you're much more likely to get sick from inhaling the air than from touching money. Best of luck to you all. I'm going to go hit the ATM. (Since I use a credit union, and not a bank, and I use the network ATM's, I don't pay any fees either.)

    Cheers!

  23. Re:Good for them by PopeRatzo · · Score: 2

    Absolutely. NFC was the first thing I turned off. Like the "Internet of Things", NFC is one of those things that for me are solutions without problems.

    I've got ninety-nine problems, and one of them ain't that it's too hard to make a purchase in a store.

    --
    You are welcome on my lawn.
  24. Re:Good for them by graphius · · Score: 2

    don't use magnetic stripe, but I'm pretty comfortable with chip and pin. Physical contact is required as well as a (somewhat secure) PIN. and because of the pin, yes I do keep my card. The waiter brings a wireless payment terminal and I keep a receipt.

  25. Read the fine print. by Mr_Wisenheimer · · Score: 4, Informative

    Except for the fact that when you dispute a transaction on a credit card, the worst thing that happens to you is that your card may be frozen or the line of credit may be reduced by the disputed amount.

    When you dispute a check or a debit transaction, your money is gone until the dispute is resolved and the bank may freeze all of your accounts during the investigative process, meaning you may essentially have no access to the money in your checking or savings account for a month or more.

  26. Overwhelm them with complaints. Use these links by grahamsaa · · Score: 4, Informative

    https://www.riteaid.com/custom...
    http://www.cvs.com/help/email-...

    Here's the message I sent. If you're lazy, feel free to use it:
    Disabling Apple Pay and Google Wallet, which were previously accepted is not OK. If you want to come up with your own competing system and give people rewards to use it, that's fine, but don't break existing functionality. Google Wallet just works. Apple and Google's solutions don't cost you any more money than a credit card transaction. Your payment app isn't even available yet and relies on QR codes, which means that when it does launch it will likely be very clunky by comparison.

    If you can't come up with a sane response to this, I guess I'll be switching to Walgreens.

    --
    Facts have a liberal bias.
  27. Re:This'll end up in court... by DocHoncho · · Score: 2

    Exactly! We need a new set of companies to dominate the market, to create new and exciting security problems, innovative modes of discrimination and exploitation, and new types of excessive charges. So what if it has a clunky interface, requires always on mobile service (and data charges) and probably creates new efficiencies for remote theft?

    Theoretically NFC payment systems should allow greater degrees of consumer control, security measures and ease of use, but lets be realistic here: which software company do you believe can actually pull off more than two of the three? Google will be changing shit around every version for no reason other than because they can, the Apple version will be easy to use for one or two use-cases and a complete clusterfuck for the rest and this CurrentC thing will be the complete abomination that it sounds like. Amazon will jump in with some poorly thought out copy-cat version of the Google NFC that only works on Amazon.com, and Microsoft will blunder in late in the game with a solution that's reasonably well engineered and has a slick interface, but no one uses it because no one uses it.

    At this point, I imagine that if NFC were the new way of payments, that Google and Apple will end up being the de facto means of utilizing the technology, and we'll all be stuck a little bit deeper in either of their respective tar pits, dependent on them first for communication, then for financial transactions. "My Android was free with a two year contract, sign me right the fuck up for some more sweet, sweet vendor lock in baby!"

    --
    Celebrity worship is a poor substitute for Deity worship and costs more to boot.
  28. Re:Good for them by PopeRatzo · · Score: 2

    For those of us who do want to use it, why does it matter to you?

    Because when I got my new phone, NFC was turned on by default, which drains the battery and creates a potential security hole.

    Most people do not use NFC. I don't think the company from whom I buy a phone should be engaging in social engineering to use something I do not want to use.

    Honestly, if the feature was there and turned off unless I wanted it, it wouldn't matter to me. As long as we don't go to a cashless society, it doesn't matter to me. But I do not want Apple to become a bank. I do not want Google to become a bank. They are already so big as to be anti competitive. .

    --
    You are welcome on my lawn.
  29. Re:Good for them by Zontar+The+Mindless · · Score: 2

    No data travels to or from the card unless I put it in the card reader, or the salesperson does so under my watchful eye.

    NFC should be renamed NAG: No Air Gap.

    --
    Il n'y a pas de Planet B.
  30. Re:Good for them by Zontar+The+Mindless · · Score: 2

    Apparently you are intimidated by complete sentences. There's a cure for that problem: Learn how to do it right. Then people will understand you better, and you'll no longer have to try to hide your ignorance behind "I know what I meant and you're an idiot if you can't read my mind".

    Perhaps His Holiness is old enough to have learnt about something called "The Law Of Unintended Consequences". This often seems to crop up in conjunction with the implementation of Solutions Without Problems. You should read up on it sometime.

    --
    Il n'y a pas de Planet B.
  31. Re:This'll end up in court... by hackertourist · · Score: 2

    No, I'm saying there should be ONE contactless pay system, not several competing systems. Because if the market decides, you just get the biggest player, not the best system. This was worked out long ago for money, it's not called "legal tender" for nothing; companies aren't free to come up with their own coins and bills. Why should abstractions of coins and bills be any different?

  32. No incentive = why would they want it anyway? by RubberDogBone · · Score: 2

    Why would CVS or RiteAid want Apple Pay anyway? If a shopper has bothered to come to the store, select items to buy and then go checkout, chances are they want the items relatively more than someone who hasn't gone to that effort. The stores of course support several different existing methods of payment which work just fine from their perspective. The customer is likely to pay anyway.

    Perfect? No. There are middlemen involved in the transaction but it's a system everyone more or less tolerates. Extremely complicated financial deals are behind every card terminal you see in a store. None of that stuff just happens. It's all very carefully planned.

    Along comes Apple which puts themselves into play as yet another layer of middlemen, one which the stores have zero control over and one which is outside their established payment process. It also runs counter to their own payment initiative which they have agreed to support exclusively. So what Apple tried to do was an end-run around the established players AND they did it using the existing installed card terminals. NOBODY piggybacks like Apple tried to do without having some major skin in the game. You try stunts like that, you are going to get your hand burned.

    So, Apple is at once both another layer of middlemen interference and also potentially a contract issue for the other payment product. Apple was too late to the game. And from the store's perspective again, you have a cart full of stuff, you aren't going to just walk away, you'll probably pay with another method so they have nothing to lose really buy rejecting Apple Pay. Same for GooglePay which I never saw in the wild. Whatever.

    Apple has a habit of intruding on entrenched turf and taking on the existing players. They did it with phones. But payment systems are a much more spread out target where everyone has their own idea of what they want and most of them think it works just fine as is, including the customers. Nobody who mattered much was asking for NFC payments. Apple has been pushing this, suddenly, so it's up to Apple to tell everyone why they should want it. It's totally on them. Until they do that, until they make some inroads at the card terminal issuers, Apple Pay is going to be limited.

    --
    Sig for hire.