iOS 13 iTunes Security Flaw Is Allegedly Leaking Credit Card Information
iOS 13 arrives with a slew of new features and performance improvement. Apple released the iOS 13 last week and reports about security issues have already cropped up. iOS 13 users have shared some peculiar security issues on Reddit. Apparently the iTunes payment method is displaying credit card information about other users.
Typically, we tend to use take picture functionality while changing the payment method for iTunes. Some users tried doing the same and were taken by surprise when an unknown users credit card information was displayed. Apparently, iTunes payment system is displaying name, address and also the last four digits of an unknown users credit card. Multiple users have reported the same issue and this points at a security flaw that is looming large. A Reddit user recalled the incident and posted the details online.
Today I decided to change my iTunes credit card. I used the take picture feature. It read my card well but then when I saved the card someone else’s credit card was saved! A woman’s from Illinois. I have her full name, billing address and last 4 digits of her credit card!
That felt like I could steal their money any time. And they could steal mine? As proof I took a snapshot of their info and then immediately removed the card.
Other users reported a similar incident. Createdbyeric says that Apple has a case number for the issue and has taken screenshots to support the claim.
I went to update my payment info in iOS13 and while doing so, it showed me info for a Discover card (no one I know even has one of these) and the woman’s full billing address.
I took screenshots of everything and am going to report this to Apple ASAP, however, I just read a post here on Reddit, not sure if it was this sub or another sub related to iOS/iPhone who posted the exact same issue.”
Furthermore, Createdbyeric spoke with Apple and updated the thread as follows,
Spent about 40 minutes on the phone with Apple. They are aware of my issue and I was able to reference the case number of u/Thanamite from his post and they are taking the issue very serious. I was transferred an senior manager who quickly acknowledged how big of an issue this was and he will be escalating both our cases to higher ups. While this is a pretty scary issue, this is why I love Apple as a company. I was worried they wouldn’t take the issue serious but everyone I spoke too took this matter very serious.
iOS 13 is taking flak for bugs and reliability issues. Despite numerous betas, iOS 13 is still plagued by bugs. It is also possible that the bug is not exclusive to iOS 13. A Reddit user by the name “helpkilbananas” said that he first saw this bug a year ago.
Weird. Ever since my wife and I got our brand new iPhones from Rogers (Canada) a year ago, she’ll occasionally get a credit card from China as a suggested payment method from Siri. We contacted apple about this a couple of times without a straight answer, they couldn’t explain it either. This was definitely before iOS 13. Of course, we have tried our sanity checks (resetting from iTunes, checking saved info, security checks, etc…)
via iPhone Hacks http://www.iphonehacks.com/2019/09/ios-13-security-flaw-leaking-credit-card.html
link : http://www.iphonehacks.com/2019/09/ios-13-security-flaw-leaking-credit-card.html
September 23, 2019 at 08:57PM