3 ms·

To quote someone that the article links to: http://www.droplabs.co/?p=1231 http://www.droplabs.co/?p=1231 "Isn’t this a Bank problem? And don’t that absolve Ap

by baldfat 12y ago

To quote someone that the article links to: http://www.droplabs.co/?p=1231 http://www.droplabs.co/?p=1231 "Isn’t this a Bank problem? And don’t that absolve Apple and Networks of their responsibility in this? "It is unconscionable that Apple did not, and was not strongly advised by its partners – to make the Yellow Path implementation (by an issuer) mandatory sooner than it did – which was 4 weeks before AP launch. "

crusso 12y ago
"unconscionable" that banks should be expected to understand security well enough to know that not using any verification was stupid? It was mandatory 4 weeks before the launch, so it's been 6 months since then... and yet we're seeing how banks haven't bothered to fix it? I think Apple could have said something sooner, but in order to throw the word "unconscionable" around, I think that they would have to have done something deliberate or secretive. I view that 90% of this rests directly on the banks' shoulders for not implementing good security in the first place, then sitting on not implementing it for months.