Sber ✅ recently began a beta test of a new feature - now payments at terminals can be mad…

Sber ✅ recently started beta test of a new feature — now payments at terminals can be made from iPhone using BLE. Today they reported that everything has already been rolled out into production, that is, into Sber app it became possible to pay via BLE

Let me remind you, after Apple left 📱 from Russia and the shutdown of Apple Pay, iPhone owners were actually left without the usual contactless payment. Access to NFC on iOS is closed to third-party developers. Android users quietly switched to Mir Pay 💳 , but the Apple audience was in limbo all this time

Now about safety. Since we are talking about Bluetooth, this is a double-edged sword. NFC works at a distance of a couple of centimeters, and in the case of Bluetooth we are already talking about several meters of distance. Theoretically, this gives much more opportunities for attackers: they can intercept or initiate a transaction from a distance where the victim will not even notice ( yes and attacks the protocol itself is more than enough ). True, the video shows that confirmation of the operation is required, and this already removes some of the risks. But globally, it is still very early to say anything - there are few details, and without them, any safety assessments will be guesswork. ☕️

I myself haven’t had time to try the new function yet, and certainly haven’t tinkered with it in any way to confirm anything

In any case, it’s cool that they are looking for an alternative to NFC for iPhones. But it all doesn’t look too reliable yet ( and I would advise you to be extremely skeptical about this ). And objectively speaking about convenience - well, it’s doubtful. Payment stickers and cards look more convenient than go to the application -> click “pay” -> bring the phone to the terminal -> confirm the operation . And I’m keeping quiet about payment using a QR code, smile, etc. 😎

For now, we can just hope that Sber didn’t make fatal mistakes ( and the guys are aware of the risks that this method of payment poses ) 🤝

#information_security