OLBlog: Apple

7:05 PM

16 Best Blogging Apps for iPhone & iPad 2017

The list of the Best Blogging Apps for iPhone & iPad is here. In this list, you can see 16 best blogging apps. If you are are a blogger and own iOS device(s), this article for you. You can see here 16 best iOS apps that are most useful for a blogger. Now see the best iOS blogging apps-

1. WordPress

Probably the most popular blogging site for the tech industry is WordPress. This official app makes it possible for you to manage your posts on the go. You can create and edit posts and pages, upload pictures and videos, moderate comments, and view your website’s stats. When you are finished polishing your daily masterpiece, you can publish it right on your iPhone. You can also keep track of blogs you follow in your personal feed. Find new WordPress users to follow and keep track of their posts, as well. This app is available for free.

2. Flipboard for iPad

When it comes to reading apps, Flipboard and Zite are my favorite feed readers for iPad. It really is a perfect app if you are planning to use your iPad to keep track of the latest news.

You can integrate Flipboard with your Twitter, Facebook, Google Reader and custom searches. The magazine-style look makes your reading experience comfortable.

3. PressSync Pro - for WordPress ( iPhone + iPad)

If you have a WordPress blog(s), this app should be helpful for you. This is an unofficial WordPress app that can be used to manage multiple WordPress.com and Wordpress.org blogs easily from your iPad or iPhone. PressSync Pro has some useful features, such as- image tag editing, categories and tag management and more. With this app, you can upload photos to your blogs without losing EXIF information, and if you want to protect your privacy, you can remove geotags from your photos.

Also read: How to Transfer Photos from iPhone to PC Windows 7/8/10

4. Blog with iBlogger

It is a superb blogging application, which is not free but costs only $10 to users and that is quietly affordable. It supports platforms, i.e. WordPress, Blogger, ExpressionEngine, TypePad, and lots more. Typically, it is known as a home based blogging application, which is entirely designed especially for SEO experts and daily blog writers.

5. BlogPress

It is easy to use the app and offers bloggers almost everything they need. They can upload files, videos, images, anchor texts, hyperlinks, etc. using this app. Besides this, many other features are also provided to the users by this superb application. It is available on both iPad and iPhone devices. The platforms BlogPress supports include Blogger, MSN Live Space, WordPress, and much more. It is paid for bloggers and costs $3 only.

Also read: 25+ Surefire Tools That Make You Successful in Digital Marketing

6. Tumblr ( iPhone + iPad )

This is the official app of the Tumblr. Tumblr is one of the most widely used free blogging platforms in the world. If you've Tumblr blog(s), download this app. Tumblr's official app is available on the App Store for free. This app has all the features that help you to manage your Tumblr blogs, and this app has a very easy to use user-interface, so you can easily blog from your iPhone, iPad or iPod touch. With this app, you can posts text/pictures/video/links, see and reply to messages, save drafts, queue posts and more. This app also lets you post, like, reply and reblog when you're offline.

7. Squarespace Blog

Squarespace is a lesser-known, but incredibly beautiful web-building platform that allows users to craft elegant websites. This official app gives you complete access to editing and managing your Squarespace content from multiple accounts. You can create and edit posts using the company’s Layout Engine, add photos, format text, and create links while on the go. Keep track of comments and reply to readers with little effort. You can even mark a comment as spam “with a flick of your finger.” Instead of logging in and out of different pages, this app allows you to toggle between websites seamlessly. This app is available for free.

Also read: 16 Essential Blogging Tools That Will Make You More Productive

8. Blogo Blog Editor App for iOS 9.0 Devices

Suitable for iPhone, iPad, and iPod Touch with iOS 9.0 and above, the Blogo blog editor gives you all the tools you need to create amazing blogs. The Pro version works with WordPress and other blogging software. You can list, edit and update existing or new posts, pages or drafts. Plus a lot more.
The Pro version allows you work with multiple blogs simultaneously. The Free version is packed full of features, but if you want more than the Pro version costs $2.99/month.

9. Buffer Tool

Schedule Posts for Twitter & Instagram ( iPhone + iPad ) - This is not a blogging app, but handy app for bloggers who have iOS devices. If you want to automate and manage your blog post sharing tasks from your iPhone, iPad or even from your Apple Watch, you should use Buffer official app on your iOS and watchOS devices. With this app, you can use Buffer's features on the go and automate your blog post sharing on most popular social networking site including Facebook, Twitter, Google+, Instagram, LinkedIn, and Pinterest. You can connect up to 4 social networking accounts for free.

Also read: How To Use Apple Pay On Apple Watch

10. Weebly Mobile

Weebly is a well-known simple website creation tool. You can download the app free from iStore. Weebly mobile enables to you blog log and edits your blogs directly from your iPhone or iPad. You can use photos you have just taken on your iPhone and immediately publish them on your blog.

It allows almost instantaneous publication of anything you have on your iPhone or iPad. The only issue is that, like any other free application, it can fold at any time. You will also have the Weebly advert on your site. If you want to pay for no Weebly ads, more storage, and functionality, fees for begin at $14/month – or $96 for one year in advance.

11. Posts

Whether you use Blogger or WordPress, or even both, this iPad app helps you create and publish great content from anywhere. If you manage multiple blogs, you’ll have easy access to all of them and be able to check on everything at a glance. Browse your content by date by checking the built-in calendar. Create, edit, and publish content, including image layout and video uploads. Receive notifications when someone comments and then write and respond from within the app. Work offline, including creating and editing new and previously published posts. All work will be saved in the “outbox” and published when you are back online. This app is available on the iPad for free.

12. BlogTouch Pro (for Blogspot Blogger) for iPhone

BlogTouch Pro is a powerful Blogger/Blogspot editor for Apple products. It can be downloaded for just $4.99 from iTunes/iStore. This blogging app can be used on iPhone, iPad, iPod, and Mac! Blog Touch devices. It makes blogging easier for you by helping you manage multiple blogs – publish, edit and delete comments, post, and pages.

BlogTouchPro enables you to blog directly from your phone when on the go. Have you ever come across something you must share with others – now!! Well, you can do it with BlogTouchPro – just start typing wherever you are. On foot, in a train or even in your home – fire up BlogTouchPro and get it down and online in almost no time at all! Text, pictures or just your thoughts!

Also read: 10 Money-Making Blogger Tools to Make Your More Money

13. HootSuite

In recent years, blogging has taken on a whole new meaning. Many people consider posting to Twitter, Facebook, LinkedIn, and more, to be part of the “micro-blogging” world. If you are a mini content creator, HootSuite is a great way to manage your various social networking sites. The app gives you access to an account, giving you control over when and how you share content. Create and schedule publication to various sites over different dates and times. Keep track of messages, “likes” and comments. Plus, you can monitor and track click-through stats from wherever you are. In iOS 8, use app extensions to share content from any app.

14. SEO Tool (iPhone & iPad)

If you want to analyze your site’s search engine ranking on the main search engines, this great app can help you to check your site’s position on major search engines. This app comes with some useful and essential SEO tools.

15. Evernote

Evernote usually sits at the top of the list for any serious note-taker, and for a good reason.

As one of the first “online notebooks,” Evernote lives up to its promise to help you “remember everything.” It is also available online, as a desktop app (Mac and Windows) and as a mobile app (both iOS and Android) so you can jot down ideas wherever inspiration strikes.

What makes this particularly useful for us bloggers is the search functionality. You can make an unlimited number of notebooks and quickly search through them.

Best of all, it is free to use, although you would need to upgrade to the paid plan to unlock more features.

Price: Freemium

Platform: Online, mobile, and desktop (Windows and Mac)

16. Drafts (iOS only)

What if you just want to quickly take notes without scrolling through half a dozen menus and buttons? This is where Drafts comes in.

Drafts were designed from scratch as a “write-first, organize-later” type app. Everytime you open the app, you get a blank page so you can jot down your inspiration right away. This design choice fits the writers’ workflow correctly.

But there’s more: once you’ve got your notes down, you can use one of the many pre-built ‘actions’ to get more from your notes.

For example, you can automatically send the note contents straight into your Dropbox.

Think of it as a built-in IFTTT for your notes. You can see a list of actions here.

The only downside? It’s only available on iOS (iPhone, iPad and yes, even Apple Watch).

Price: $5.99

Platform: iOS

Have I missed to include any of your favorite blogging apps? I would love to know that in the comments.

8:31 PM

Best New Year Resolution Tracker Apps for Android & iOS (Achieve Your Goals in 2017)

Resolution tracker apps help you to achieve your goals successfully. Accomplish your goal with the help of new year's resolution app android or iOS resolution tracker app. There are plenty of resolution tracker application for both android and iOS platform. Even you can use many useful progress tracking application on windows mobile (formally windows 10) or Learn to use free apps on your PC.

Best New Year's Resolution apps for android

Best New Year Resolution Tracker Apps for Android & iOS (Achieve Your Goals in 2017)

These free apps will help you organize and achieve the goals you set for 2017.
These applications will help you monitor, fulfill, and organize your New Year's goals. Resolution tracker apps well known as productivity apps as it helps people to track their progress of work to reach the destination.
Also read: 10 Productivity hacks for entrepreneurs

Organize your work and personal life

Dropbox lets you save files, photos and videos in the cloud and access them from any device. It also allows you to share files with partners, clients, partners and suppliers.

The best way to take advantage of Dropbox is knowing how to properly organize the files. We suggest using general categories first and then filtering them into more specific categories. If you have a good file structure you can quickly find what you need. To protect important information uses free apps like AxCrypt or Wickr, to encrypt files. Download Wickr for android on google play store, or Apple store.

Dropbox is available for Android and iOS. Click here to Download Dropbox productivity apps.
Also read: How to achieve success in seven steps

Take control of your health

One of the most popular weight loss apps, MyFitnessPal allows you to monitor the calories and fat you burn, as well as the amount of exercise you do. It helps you maintain or lose weight by showing you basic information such as your height and current weight and how many kilos you want to lose a week. The app calculates how many calories and grams of fat you can consume each day to reach that goal. It's available for iOS and Android.

Renew your earring list

Do is an easy-to-use productivity apps designed to help you in your work by organizing your projects, tasks and making everyone involved in one place. You can invite colleagues, clients, lawyers or consultants to participate in different projects and control who can see each one.

The apps lets you communicate with key people in each project. You can also create to-do lists and invite members of your team to participate in a news update. It's available for Android and iOS.
Also read: 10 Simple rules for achieving goals

Make more effective brainstorms

If you are a very visual person, check out SimpleMind + (for iOS). With this tool you can create "maps" or visual representations of your ideas by arranging them, assigning them color and changing the shapes of the text clouds to help make decisions and organize elements of a project or idea.
this is one of my favorite productivity apps to make my work easier and faster.
To change the connections between ideas, simply touch and slide text clouds. You can export maps to share with colleagues and partners.

Do you know any other productivity apps to achieve your goals? Do you have to suggest us for listing new year resolution apps for android, iOS, Windows, Desktop, Mac, Linux? Which productivity apps is best for you? Let us know in the comment box.

6:25 PM

How To Use Apple Pay On Apple Watch

6:28 AM

Apple Pay: A Guide In Five Steps

How to use Apple Pay: To begin using Apple Pay, open Wallet (formerly Passbook), Pay in stores. Pay with iPhone. Pay with Apple Watch. Pay with a different card instead of your default card. With Apple Pay you can use your Visa, Mastercard, American Express card, or Discover Card at any store that accepts.

The race is on: From today, customers can pay in Switzerland with Apple Pay. So the mobile payment service works in practice. Lets learn How to use Apple Pay!

Also Read: Apple Pay: How It Works and How safe is it?

The time has come: Since this morning, consumers can go shopping with the mobile payment service Apple Pay in Switzerland. Stefan Holbein, CEO of Visa Europe Switzerland, praised the offer immediately. He was confident that Apple pay "for convenient mobile payment solution" would, it said in a statement. Comparis Digital expert Jean-Claude Frick shares this view, he says, but for all shopping willing - as does the service in practice "The high iPhone density in Switzerland is decisively contribute to the success of Apple Pay."?

How to Use Apple Pay: five step instruction

1. The right device
First, you need an iPhone, an Apple Watch or iPad. Apple Pay works here on recent device versions from the iPhone 6, iPad Air 2 or iPad mini 3. Do you have a Apple iPhone 5 Watch, however, you can register the card and pay my watch, but not a smartphone.

About your iPhone or iPad you can enable Apple Pay. Before you get started, make sure that you have Touch ID furnishings. When paying via Apple Pay you identify with your stored fingerprint.

2. Add Credit Card

Equipped with Touch ID, open your wallet Apple, in which you have been able to store tickets, hotel reservations and airline tickets. Since this morning, you will find the Funktioni "credit or debit card to add". Once you have identified my code, you can scan the credit card of your camera. Now you have to prove that the credit card is also your. The system provides two options: the identification via SMS or callback through Apple.

You can choose any credit cards that accepts apple pay server. Even with the ok prepaid card payment is possible if the bank is charging.

Important could for Apple Pay therefore be that Wire-card would start in Europe, like the "Business Magazine" reported. The German company offers via app a function that the application of Apple Pay allows all credit cards - even if no partnership with the company exists. but bonus cards like the Coop Super-card or Cumulus Migros remain before been outside.

3. Shopping in business

If you have entered your credit card, you can start: The purchase by Apple Pay is just one touch away. If you use your iPhone, hold the phone as a contact-less credit card over the NFC device at checkout. Then confirm by Touch ID to purchase and it is paid. You also do not need to activate the iPhone screen for this, even in sleep mode can be paid. The Apple Watch on your wrist only needs to be held to the NFC device laterally to pay, and the purchase is made.

A prerequisite for a purchase that the store where you want to go shopping, paying via NFC - "Near Field Communication" - offers. Of which there are today in Switzerland to 100,000 units so Think how many in total Europe? This is around 70 percent of transactions - including at Aldi Suisse and Valora outlets as k kiosk or Brezelkönig. By 2020, then have all Visa payment terminals offer Europe contact-less payment.

4. Shopping in the app

In addition to the contact-less payment, you can use Apple Pay for in-app purchases. Therefore, to offer the app, the choice for Apple Pay. This falls away that when you single vendor credit card data store, it submits the confirmation by Touch ID. In Switzerland Easyjet is one of the first who integrated this possibility. Which apps will follow, will show in the coming months.

5. In case of loss

If you use Apple Pay, it is advisable that you have the function "Find my iPhone" activated. If you lose your iPhone or iPad, or should it be stolen, you can make it over to the "Lost" mode. Once this is selected, the payment function is locked (for yes anyway identification via touch ID would be necessary).

A word about data security: Apple itself does not store your credit card information and also encrypts your purchases. the company Your payments are therefore unknown.

6:05 AM

Apple Pay: How It Works and How safe is it?

How does apple pay work? The ultimate guide to how and where to use Apple Pay. Apple Pay is a mobile payment and digital wallet service by Apple Inc. How to use apple pay at apply pay stores?

Apple has announced Apple pay a new payment system that could solve some problems. Especially the become in the United States become a major problem attacking the credit card information in the point of sale are in Apple Pay is not impossible, but futile.

On September 9, 2014 Apple introduced together with the presentation of iPhone 6 and iPhone 6Plus be payment system Apple Pay. Apple Pay was introduced first in the United States. Nine months later, on 14 July 2015 it was finally time also in Europe and Apple Pay was in Britain at the start - in more than 250,000 stores, restaurants, gas stations, post offices and public transport.

The following description is based on the published information on the website of Apple, in a support document, and in iOS Security Guide, edition October 2014. The description is divided into three parts: First, get to know the components involved. After activating Apple Pay and finally follows the payment in a shop. The also possible use for payment in Apps is described in the box. Finally, it comes to the question of how safe is it everything.

Payment within Apple Pay apps

Payments within apps are handled via the Apple Pay server. Apple Pay stores this anonymous transaction information such as the approximate payment amount. This information can not be traced back to the user and contain no information about what the user has purchased. The settlement of payments via an API and requires the specification of a Merchant ID (Merchant ID) that uniquely identifies the merchant behind the app, and will be applied to the payment information.

The beginning of the Apple Pay: payment

Requires an app a payment, it first checks via the API, if the iPhone Apple Pay supports whether it is activated and if the payment service used for this is accepted by the merchant. If a payment is possible, the app for the necessary information, such as billing and shipping addresses and contact information, together. Thereafter, calls on the App iOS to display the Apple Pay dialogue, displaying all relevant information for payment.

Where the user of the payment by the Touch ID or passcode to, all information displayed on the Apple Pay dialogue are communicated to the dealers.

The actual payment

After the user has authorized the payment, a cryptographic nonce value is requested by Apple Pay server that matches the nonce provided in the payment business in the NFC terminal merchant. then all required information is summarized from the Secure Element and encrypted with the key of the Apple Pay server As with the payment in the business. Thereafter, the data is sent to the Apple-pay server, which decrypts the nonce checks and encrypts the data in case of success with the members of the Merchant ID Merchant Key.

The re-encrypted payment information is then sent back to the iPhone, which forwards them to the app via the Apple Pay API. The app turn forwards the data to the server of the dealer who decrypts and further processed. As in the case of a payment transaction can it be made to the existing infrastructure for payment by credit card again.

Protection of additional data

Apart from the payment information needs to send additional information, such as order numbers or customer number to the seller the app in general. To protect this data from being tampered with, the app can let signatures via the API from the Secure Element.

A hash of this data is added to the encrypted payment information. The merchant can therefore check if necessary, whether the data supplied to it by the app are intact.
Let's do it with us (it) ...

to describe Apple Pay in all aspects, is beyond the scope of the article quickly. Therefore, some simplifications are needed.

To enable Apple Pay is either a registered iTunes Store credit card added to Passbook or the data of a new credit card, either typed or the card simply photographed with the iPhone. In the description, I go out from photographing the map since incurring the most data.

When I write iPhone in the description of payment in shops, I mean even the iPhone, because so far does this payment with Apple Pay only with the iPhone 6 and 6 Plus. The Apple Watch there are not yet, and until it appears, it may well come to changes to the previously planned functions and processes.

but in the case of payment within apps that described above applies analogously for iPad Air 2 and iPad mini 3, although I for simplicity hereinafter referred to as write iPhone there.

And when I write bank so is also the respective payment service provider, such as the credit card company meant if there is one.

1. The components of Apple Pay

In iPhone more components are essential for the function and safety of Apple Pay. Let's start with the hardware, which is also shown in Figure 1:
The Secure Element

The secure element is an industry standard for the secure storage and management of sensitive data. In a certified microcontroller with the requirements of the financial industry running corresponding Java Card platform for electronic payments. In the case of Apple Pay on running applets for managing Apple Pay, and certified by the PSPs Payment applets. The data required for payment will be by credit card company or issuing bank with just them and the payment applet known keys encrypted sent to the applet in the Secure Element. They are managed by the applet and protected by the protective measures of Secure Elements.
The NFC controller

The NFC controller is the one for the communication of the iPhone with the point-of-sale terminal in the business over the minutes of the Near Field Communication responsible. During a transaction, the terminal communicates in the business over the NFC controller directly to the Secure Element. NFC controller and secure element are connected via a separate hardware bus directly to each other, so that iOS has no access to the transferred data.

Secondly, the NFC controller wrapped in the payment within an app communication between the app and the Secure Element from.
The Secure Enclave

The Secure Enclave is a specially protected area within the iPhone processor and managed generally every authentication process on the iPhone. In her are stored as well as the fingerprint data for the Touch ID. It is responsible for the authorization of a payment transaction in the case of Apple Pay. Only after the user a transaction approved by the Touch ID or passcode, clear the payment is initiated and passed control to NFC controller and secure element.
The connection of Secure Enclave and Secure Element

Secure Enclave and Secure Element communicate via a serial interface; the secure element is additionally connected to the NFC controller, which in turn is connected to the application processor.

Secure Enclave and Secure Element can also no direct connection securely communicate with each other, because the connection with an installed during the manufacturing process common pairing key is encrypted. This key is calculated from the Secure Element from the UID key and the unique identifier of the secure elements and transferred to the factory in a secure way in a Hardware Security Module (HSM), from where it is then transferred to the Secure Enclave. Encryption and authentication are based on AES, which come on both sides cryptographic nonces to protect against replay attacks used.

The "Authorization Random" - (AR) value

No part of the hardware, but an important constant is the "Authorization Random" - (AR) value. It is produced in the Secure Enclave, when the user uses a credit card for the first time, and is persistent as long as Apple Pay is activated. When he is sent to the Secure Element, it is encrypted with the pairing key; in the Secure Enclave, he is protected by the encryption and anti-rollback mechanisms against spying. Receives the Secure Element a new AR, all previously added maps are marked as deleted.

To secure element added credit cards can be used only when the secure element is authorized to do so with the same pairing keys and AR, which were used when adding the map. This allows iOS to let make the cards of the Secure Enclave unusable by the AR is marked as invalid. This is necessary if

the passcode is turned off
the user logs out from the iCloud
the user deletes all content and settings
the iOS device is recovered in recovery mode

Apple Pay comes naturally not without software. Besides the already mentioned apps of different payment service provider in the Secure Element that is the Passbook app.
The Passbook app

As part of Apple Pay Passbook accepts adding and managing the credit and payment execution. The user can, for example, consider in Passbook his credit card details and additional information such as the terms and conditions and privacy policy of his bank or the last payments, add new credit cards to Apple Pay or make payments in shops or Apps.

Apart from the iPhone and the software that runs on servers also are involved in the function of Apple Pay.

The Apple Pay Server

The Apple Pay server manages the status of the activated in Passbook credit cards and the data stored in the secure element Device Account Numbers (see below). The Apple Pay server communicates with both the iPhone and the servers of banks and mediates between the two. He is also responsible for re-encryption of payment data for payments within apps.
The bank server

The bank server have two purposes: First, they are responsible for the release of the credit for Apple Pay. A new credit card can only be used with Apple Pay, unless authorized by the issuing bank. Secondly, they naturally develop from the payments.

When making payments in shops the existing infrastructure for processing credit card payments on the merchant website used. The data is sent over to the bank server, the payment then performs (or denied on misuse). Here, in principle, come the same procedures as for credit card payments used, only that the customer is not identified through his credit card details, but Apple Pay.

2. How to Activate Apple Pay

To communicate with the bank Apple Pay uses two server-side views, "Check Card" and "Link and commission". The bank can also check cards, approve and add to Apple Pay. The communication is encrypted using SSL.

To enable Apple Pay the card is simply photographed with the iPhone. The Passbook app then attempts to detect the name, the card number and expiration date. The photo is not saved on the device yet added to the photo album. If all fields are filled in, checks the "check card" process the card number and the expiration date, which is then encrypted is sent to the Apple Pay server.

The "check-card" process may then return a "terms-and-Conditions" ID, whereupon the Passbook app loads the additional terms and indicates to the user. Accepts these conditions, is the ID of the accepted conditions, together with the information required by your users Card Verification Value (CVV, the security code of the credit card, which must be entered by the user during online use to prove that he really be the map) sent to the "link-and-commission" process. The will also receive some information about the device such as the last four digits of the phone number, the device name and the current location of the device, rounded up to integers.

The collected data from the "Link-and-commission" process encrypted sent to the bank, which decides on the basis of this information whether the credit card for Apple Pay may be used. If a bank customer, for example, usually staying within the United States and perhaps even decide with a newly purchased iPhone to activate Apple Pay during a Russia holiday and that activation of this test might fail.

The "Link-and-commission" process ends with the download of the credit card representative Passbook pass file on the device as well as the binding of the card to the Secure Element.

The passport file contains the URL for downloading a map image and metadata such as contact information, the associated Bank app and supported features of the card. It also contains a status field that contains information about whether the personalization of secure elements has been completed, the card is currently locked by the publisher or if prior to the use of the card by Apple Pay an additional verification, for example, by a text message, an e- mail, a phone call or the like, is required. The process of activation is summarized in Figure 2.

The Device Account Number

Grants the Bank its consent to the use of the card, it generates a unique, device-specific Device Account Number, which is encrypted and stored along with additional information, such as the key to generating transaction-specific security code in the Secure Element on the iPhone.

The Device Account Number is unique and linked to the iPhone and the credit card, thus identifying the originator of a payment clearly. It is insulated from iOS and is never stored on the Apple Pay server or in iCloud backups. Apple does not save the credit card information and has no access to the data stored on the device.

To facilitate the administration of the card by the user (somehow must indeed possibly of several offices for Apple Pay Credit can choose the desired date), Apple Pay, however, stores parts of the credit card number and the Device Account Number along with a description.

Deleting credit card from Apple Pay

The user has several ways to remove the activated for Apple Pay Credit. On the one that goes directly through Passbook, the other remote via Find My iPhone or iCloud settings. Activated by Find My iPhone the "Lost Mode", Apple Pay will be disabled.

In addition, there is also the possibility of using the "all data and settings delete" the entire iPhone or delete Find My iPhone. Then, the secure element is instructed to select all cards as deleted, so that they can no longer be used. The next contact with the Apple server Pay the credit card will be deleted from the Secure Element. Regardless marks the Secure Enclave the AR as invalid, so that no more payments can be authorized for the credit thus installed. The same thing happens when an iPhone is restored in recovery mode.

3. Payment in business

When paying in the terminal business merchant via NFC communicates with the previously held iPhone, which then displays the default credit card and the amount to be paid. Payment is made only when the user has confirmed them on the Touch ID (the default method) or entering the Passcode.

The passcode can always be used regardless of the default method. In certain situations, it is imperative, for. Example, if Touch ID is disabled or is not enabled for Apple Pay, or after five failed attempts with the Touch ID. After three failed attempts with the Touch ID, the passcode is proposed, but not yet enforced.

After the user of the payment has agreed to be of the Secure Enclave for authorization data on the type of authentication and details on the type of transaction (in this case "non-contact" as opposed to the use within apps), linked to the "Authorization Random "- (AR) value, signed sent to the Secure element. The Secure Element checked with the pairing key and his copy of the current AR, whether sent by the Secure Enclave authorization is correct. Only if this check is successful, the payment applet for contactless payment is enabled.

The Payment Applet now generates a transaction-specific security code, the part is like the Device Account Number for each payment. To calculate this only once valid codes of this stored during activation of the credit card in the payment applet key is used, which is known except the applet only the bank. The calculation includes among others the following data:

an incremented with each new transaction counter
a random number generated by the Payment Applet
a random number generated by the NFC terminal

The security code, the Device Account Number and any other needed for payment data is then sent via NFC to the merchant terminal. From there, the payment will go the normal way of a credit card, while the credit card data is transmitted just without that.

The Bank may use the Device Account Number identify the payer and verify the payments with the security code. The code must belong to the specified device and be unique. A replay attack, are re-transmitted in which recorded transactions, so it is not possible.

What data gets Apple Pay?

A portion of the transmitted data has been already mentioned above. A summary is attached but still. Apple gets in the use of Apple Pay the following data (or in some cases, explicitly not), but according to Apple, not all will be saved:

When you activate a credit card

when you add a credit card using a photo, the image is analyzed locally on the iPhone and is neither stored on the Apple Pay server sent yet in the Photo Album or elsewhere on the device.
The credit card information will be forwarded to the bank server, but neither stored on the Apple Pay server yet on the iPhone.
The Device Account Number is stored element in the secure, where it is isolated from iOS. It is therefore not stored in iCloud Backup. Apple she learns during the payment within apps, but does not save it.

When paying in business

Payment is made between iPhone and NFC terminal of the dealer; Apple Pay server is not involved.
Date and time of use, and the location (if location services are turned on) is sent anonymously to Apple Pay server. As usual, in order to improve this information with Apple Pay.

When paying within an Apple Pay app

Since the Apple Pay-server encrypted payment information, Apple can read all the information contained therein as the device account number and the payment amount. These data are not evaluated.

Now we come to safety, starting with:
Protection of credit card information ...

The credit card data could be spied in several places: In the iPhone on Apple's servers Pay, traders and banking as well as during the transfer between these sites. Consider at the different options in more detail.
... During activation

As part of the activation of Apple Pay the credit card information of greatest risk are exposed, since they are both on the iPhone than be transferred over the network. On the iPhone, the data could be spied from injected malicious software, one that so far only one exception, however, are only available on devices with Jailbreak [1].

When installing a jailbreak the user deliberately avoids any existing safeguards and is responsible for the consequences alone. The exception mentioned above is on iOS devices installed on Enterprise Certificates under the WireLurker attack without jailbreak threat. And that is only active when the user explicitly allows, which he in turn is your own fault.

In addition, the introduced malware then also has to get to the sandbox with the Passbook app access to access to the processed data thereof. Or the memory of the iPhone camera, there to see the picture of the credit card spy - both no trivial operations. So I think this danger can be ignored until the emergence of new attacks or vulnerabilities.

Let's talk about transmission of credit card data. Since this is protected via SSL, here are the usual attacks, for example, by a man in the middle or a compromised server, possible. However, they are just as possible if the credit card data is transmitted, etc. in the conventional use of the card to pay in stores. In this respect there is therefore no real new threats, quite the contrary: With Apple Pay the credit cards are only transmitted during activation, then never again. In addition, they are only sent to the Apple-pay and banking servers, not to some merchant server. Overall, there are so much less opportunity for an attack.
... When paying

The greatest risk when paying with a credit card is that the card data be spied and abused. Even if the user replaces the harm suffered, he has a lot of trouble by the abuse.

In the US, this risk is particularly acute for some time because there are now specialized for the attack on the Point of Sale malicious software [2]. The only two tasks: the point of sale as long as possible unnoticed to compromise and to send all running over credit card details to the cybercriminals. And that has been folded several times in shockingly large extent.

In Germany, such attacks are not yet occurred, as is paid here rarely with the credit card. But the much more frequently used bank cards are not without danger; there have been attacks from compromised card reader.

Before these attacks, the use of Apple Pay is an effective protection: As the credit card data is not transferred, they can not be spied on. And if the cyber criminals spy on the Device Account Number instead used, they have none of it, because every transaction must be authorized with the transaction-specific security code. Den also spied value can cybercriminals not reuse, and a new they can not create, because of using a only the iPhone and the bank known key is generated.

The same applies analogously to an attack on the payment within apps: If cybercriminals compromise the merchant server, you can find there, as in the case of the point of sale no usable for carrying out unauthorized payments data.

In general, the replacement of the credit card data is designated by a value other than "tokenization", the replacement value accordingly as tokens. The credit card company for some time been working on developing their own solutions, but Apple quickly and then ship additionally a universal solution.
... On iPhone and servers

The credit card data is stored in the use of Apple Pay neither the iPhone nor the Apple Pay server. For Apple, the data, however, are stored; if the user is using his credit card for payment in iTunes, app or Mac App Store, it is indeed necessary for the processing of payments.

The bank server know the credit card anyway, so here comes the use of Apple Pay no new point of it.

In the case of the merchant even a point of attack falls away: While these will need to save with credit card, the credit card data in the payment, they find it not in the use of Apple Pay only.
Abuse of Apple Pay

Can Apple Pay are abused? With many other contactless payment options, such as the RFID-based bank cards, payment without user interaction when the card is brought to the RFID readers of Business close enough. In contrast, the user of the payment by Apple Pay must explicitly agree.

Consider the two possible attacks:

First, the use of a malicious reader, with a criminal empties the cash cards of all close enough coming people. In November 2014 was even shown for the usual UK RFID-based cards such as the limit in force there can be 20 pounds circumvented by withdrawals in a currency other partially. Such attack fails in Apple Pay on the necessary authorization of the payment by the user. Secondly, the abuse of a stolen card or a stolen iPhones. A working without authentication card could be abused to the consumption of the existing credit. But whether a wallet with 20 euro cash or charged with 20 Euro cash card is stolen, does not matter in this respect.

Which brings us to the possible abuse of a stolen iPhones. First you need to enable the use of Apple Pay the Touch ID or Passcode; So the thief would have to first time obtain access to the device before it can Apple Pay abuse. If he does know the passcode or determine or outwit the Touch ID, he would not only gain access to the iPhone, but could also use Apple Pay.

The fact that the Touch ID is not insurmountable, was demonstrated shortly after the presentation of the new equipment. This was also the case of the iPhone 6 otherwise (text / video) here even with a finger dummy, which has already works on iPhone. 5 The attacker must however have a very good fingerprint of the user to use it as a starting point for his dummy. And he needs to come off for now. The blurred residues on a stolen iPhone will be appropriate in most cases.

For casual thief the effort for an attack should therefore be too great, and for the more organized criminals it is too small. This think big and peeking masse credit card data, which are then written on blank cards and used in any other country, to withdraw money from ATMs. Individual iPhone that can not be easily deleted this from afar, are much too small a fish for her.
Attacks via NFC

How safe is the communication via NFC? Already 2012 Ecardgrabber for Android was developed which can spy transmitted via NFC credit card data when the Android device comes close to the NFC terminal or communicating therewith smartphone to a few centimeters. 2013 has bridged approximately 90 cm by NFC a researcher. This facilitates attacks on systems in which payments without user interaction are possible, bringing the attacker in the case of Apple Pay but also no closer to his goal. Because Apple Pay makes payment yes only if the user authorizes. At what distance from the transaction was triggered, it does not matter. And the spying of transmitted data is not a problem for Apple Pay. As described above, the ausspähbaren data for the criminals are worthless. Another problem are attacks on NFC, the weaknesses in the driver of the controller or the other about accessible software exploit. Charlie Miller warned, for example, at the Black Hat USA 2012 "Do not Stand So Close To Me" and published an analysis of the attack surface of NFC. And when Pwn2Own Mobile Competition in 2014 was twice the NFC Samsung Galaxy S5 and once successfully compromised the LG Nexus. 5 For the iPhone attacks NFC time were not an issue, since only the iPhone 5 was as the destination. NFC was indeed introduced with the iPhone 6, and iOS and have to prove next year only times that they better resist attacks than its competitors.

However, there is for the attacker while still to master another potential hurdle: At least so far NFC is reserved in the iPhone only Apple Pay. The attack surface is thus significantly lower than in devices that make NFC a variety of services available so but of course much more interesting.

But even if attacks are being developed, it does not mean that they are also "in the wild" occur, because it should not underestimate the "N" in NFC. A criminal must generally fairly close to his victim zoom before he can launch an attack on NFC. Or he may have to compromise a trader terminal and prepare so that it engages the iPhone during use. This is not impossible, but connected with some effort. Attacks on NFC I guess therefore indeed as possible in principle, retain it "in the wild" but very unlikely.
Conclusion

Apple Pay is a very well-designed solution that can make especially with the problem of scouted credit card data in the US circuit. From a security perspective there is nothing wrong with it; how it looks with the Privacy Policy, remains to be seen. Just because Apple says you saves almost nothing, that does not necessarily remain so yes. But in this respect is in paying the business anyway cash the only truly safe solution, because only thus can be paid anonymously. Online always leaves a payment tracks, the only question is where and how many. And Apple's solution seems quite economical with the stored data.

OLBlog