Hacker News Reader

> So NFC reading of embedded card details is always on

Apple have a similar option BUT they restrict its use to certain payment terminals (for example it is only supposed by TfL in the UK) and can be disabled if you want. Dunno if the data it exposes (in a physical read attack) could be used for other payments.

> With Express Transit mode enabled, you don't have to validate with Face ID, Touch ID or your passcode when you pay for rides with Apple Pay on your iPhone and Apple Watch. And you don't need to wake or unlock your device, or open an app.

https://support.apple.com/en-gb/HT209495

Express Transit mode is also disabled by default.

That's an EMV [1] standard and there is a lot more info you can get [2] from your card. There are plenty of apps you can use to read your card [3].

[1] https://en.wikipedia.org/wiki/EMV

[2] https://www.eftlab.com/knowledge-base/145-emv-nfc-tags/

[3] https://play.google.com/store/apps/details?id=com.github.dev...

It's a Google Pay feature, but it only works up to the "no CVM" limit, which varies by country (but is usually something like $20-$50 or the local currency equivalent).