Venmo privacy flaw reveals users’ sensitive info

By

The website Public by Default highlights the weak privacy of Venmo.
The website Public by Default highlights the weak privacy of Venmo.
Photo: Hang Do Thi Duc

Companies don’t always succeed at keeping user data private, but Venmo doesn’t even seem to be trying. This service that allows users to make payments to individuals or merchants has the privacy for transactions set to public by default. 

A researcher found that with very little effort she could track the purchases made by most of the 7 million active Venmo users. That includes everyone who installed Venmo from the App Store.

Apple Pay’s next step? Peer-to-peer payments

By

doxo Apple Pay
It couldn’t be faster to pay for your ride.
Photo: Jim Merithew/Cult of Mac

Apple is again working to deliver its own Venmo competitor that will allow fans to transfer money to one another using their iPhones, according to a new report.

Multiple sources familiar with the company’s plans expect the service to be unveiled later this year.

How to use Siri to send people money with PayPal

By

Siri can now send friends cash using PayPal.
Siri can now send friends cash using PayPal.
Photo: PayPal

PayPal is making it super-easy to send friends money, thanks to new Siri support introduced in the company’s iOS app today.

Now you can use voice commands to tell Siri how much money to send, and who to send it to. All you have to do is set up the PayPal app to give Siri access. Here’s how to do it:

Venmo flaw allowed attackers to use Siri to drain accounts

By

money
You might wanna check your account.
Photo: Jim Merithew/Cult of Mac

A critical flaw with PayPal-owned Venmo left iPhone users’ accounts exposed to a lethal account that could have allowed attackers to steal $2,999.99 in just two minutes.

The Venmo security flaw was discovered by Salesforce security engineer Martin Vigo who found that Siri can be used on locked iPhones to drain an account just by sending a few text messages.

Check out the hack in action: