Hacker News Reader

Comment by WirelessGigabit | Hacker News Reader

I am not sure if I'm losing it but the following statement doesn't make sense in my head:

> Your same card used through Apple Pay on your iPhone and iPad will show different DPANs, though since each device gets its own number.

That 'though' does not compute.

> Basically, when that Apple Pay card pops up when you’re checking out, expect everything on that card to be sent to the merchant

Apple Pay. But what about Apple Pay? You know, the one in store, where you hold your phone against the NFC reader?

View on HN

I might be wrong but they are acutally differnt CC numbers, with the prefix linked to ApplePay, and then they resolve or proxy to your acutally CC.

You can use NFC Sniffers like the Flipper to see this in action.

Same how ApplePay on the watch works without network, cuz it has already preset the AppleCC prefix on ur watch, and its just emulating that AppleCC to the card receiver.

Same for the phone.

It will transmit everything in EMV contactless spec, tokenized like always.

DPAN is just token to represent a combination of device+card.

But it will not contain my address right?

So if I use Apple Pay in store, at say Kroger for 100 times, can they track me? Or do I get a new credit card number every time?

You'll get every time the same card number, with said card being specific to the device. So they will be able to track that the same buyer is doing the purchase, which is what most POS-based analytics are interested in.

Way more important is the (sometimes filtered) dump of everything on your bill that is passed on to various corporations (Nielsen, sometimes direct to suppliers), and how in-store analytics then build data at neighbourhood or per-store level.

Store analytics need not know that specifically "WirelessGigabit" bought something, store analytics is more interested in "we have repeated customers with such and such spending and purchases" and "in this zip code we have this kind of population with associated types of buyers" and "This is how much people are buying certain products and when, so that suppliers can plan campaigns and production"

> That 'though' does not compute.

s/", though"/"though, "

Reply on news.ycombinator.com