Interesting! Wasn't aware of that. Is this something that's being actively exploited in the wild though? It won't let me read the actual paper so it's hard for me to tell how practical the attack is.
I don't think tap to pay can be skimmed in the same way you can with swiping. You'd have to actually clone the data on the NFC chip, which isn't possible through a tap from what I understand.
Protection against account skimming should happen on the customer's iPhone (it should only send data allowing a single transaction of a certain size) not the merchant's iPhone. If the customer's iPhone doesn't have that protection it's pretty easy for the merchant to hide a skimmer in their iPhone case / POS system / gas pump.
I’m not saying apps shouldn’t be allowed to run in the background. But for notifications specifically it’s an unacceptable solution. It just doesn’t scale to the number of apps the average user receives notifications from.
Eh, you just need a different "crypto" that's quantum safe. Yes if someone today had a computer that could crack private keys, all current crypto would be dead immediately. If crypto has some advanced warning (enough time to implement a new quantum safe private key scheme, update node software, and allow users to move funds to quantum safe addresses), then it's not existential.
Yes, exactly the same type of stuff. And the other day a legitimate email from a company I was interviewing with (from an email address I have had two way communication with) got marked as a promotion.
Either way though, this is different from skimming. Skimming allows the skimmer to make future transactions which is much much worse.