Veritasium · Video summary

Can you steal $10,000 from a locked iPhone?

This video reveals how a man-in-the-middle attack exploits Apple Pay's Express Transit mode via NFC vulnerabilities to steal large sums from locked iPhones without unlocking or customer verification.

Watch on YouTube ↗

Key takeaways

• 🎯A man-in-the-middle attack can intercept and alter NFC transaction data to authorize large payments without unlocking an iPhone.05:02
• 💡The Express Transit Mode relies on a high/low value label, which can be manipulated to bypass transaction limits and verification steps.06:44
• 🔍The attack manipulates transaction bits—like the high-value indicator and customer verification flags—to trick the system into approving large payments.10:02
• 📈Visa's use of symmetric and asymmetric cryptography can be exploited due to unencrypted data, unlike MasterCard which employs more security layers.17:00
• 📝Banks and system providers should implement encryption and cryptographic validation for NFC transaction data to close such exploits.19:00
• 🚀Disable Express Transit Mode if not needed, especially with Visa cards and iPhones, to prevent this vulnerability.22:01

Chapters

• 0:00🎯 Introduction and Setup
• 0:41🎯 Initial Test of Contactless Payment
• 2:08🎯 Attempting Larger Transactions
• 4:46🎯 Explaining the Attack Method
• 6:53🎯 How the Exploit Bypasses Security Measures
• 8:28🎯 Breaking Down the Security Layers
• 16:19🎯 Cryptography and Verification Processes
• 19:54🎯 Implications and Real-World Risks
• 20:21🎯 Broader Security Concerns and Social Engineering
• 21:47🎯 How to Minimize Risk
• 22:03🎯 Industry Response and Ethical Considerations
• 26:01🎯 Conclusion and Reflection

The digest

More from Veritasium

All Veritasium summaries →