NFC Contactless payments with Android!

grandstream

Tried to use this in Spar today on my S7. It went through initially but 10 seconds later the cashier said it was rejected and showed me the receipt. Was I supposed to input the activation code code that Boon sent me somewhere? Do you need to load money on to the app prior to using the €5 free credit?

evolutionqy7

Got a coffee and an air freshner in one of Topaz Re-Store shops. Failed to pick up first time, but 2nd attempt went through straight away and the balance went down.

Using S6

antodeco

Using a z3 compact and worked perfectly to get me a free McDonalds breakfast! Didn't pick it up the first time, but worked fine the second time!

If I use a different SIM, wi I get another free fiver?

12Phase

If you're using a Nexus 6P they've only whitelisted the H1511 model which is the American one and not H1512 which would be the EU model.

The only difference is the selection of radio bands and the US model supports CDMA for Verizon and Sprint etc which non GSM based.

Might actually be worth emailing them and explaining this.
Email: contact (at) boonpayment . com

ED E

pah wrote: »

I have this working on my galaxy note 4 rooted using the rootcloak module in xposed framework.

Thanks for the tip

peteb2 wrote: »

Bit strange they support the Galaxy S6 and not the S7. Disappointed.

S3 also excluded (my backup phone).

RonyPonyBah wrote: »

Same here, i wonder if we edit the build prop with an s6 device name will it open up?

Managed to get that working?

12Phase

Nexus 6P is being supported from the end of May onwards.
(They emailed me back)

ceroc81

syklops wrote: »

An exploit is not a vulnerability. An exploit leverages a vulnerability. Root access is achieved by exploiting a vulnerability. If you didnt root your phone that vulnerability would still exist.

Yes rooting your phone gives you access to the entire OS, but mobile apps should be designed in such a way that their security is ensured despite root access, not as a result of the phone not being rooted. In fact mobile apps should be designed in such a way that even after decompiling the application or sniffing its traffic, the protocol can't be tampered with.

Its basically Kerckhoffs's principle but for the modern age. Kerckhoff stated that a cryptographic system could be considered secure even when everything about the system apart from the private key is public knowledge.

With the leap topup app, I have root on the phone, I've decompiled the application, and I've viewed the network calls it makes across the internet, but Ive not found a way of tampering with anything which is then accepted. I'll be curious to see if this app stands up to that kind of scrutiny.

Should the apps also be designed in such a way that they wouldn't be able to abused and 'remotely' controlled by other malicious apps who might be taking advantage of the rooted device? (Yes I know the app would have to request root access to use it)

Rooted devices breaks the sandboxing technology that the apps rely on so that they can be reasonably sure that the action that takes place (making a purchase, transfer money etc) are done by an actual person and not in some automated way without the user being aware.

Rooting a device is a security concern, as a user you'll have to decide if that is worth it (there is advantages, and when I had an android phone I rooted it as well).
And I think its totally fair that the app developers can decide if they want to be at risk of having their apps controlled in a way that could cause fraud and/or loss of money of their users.

I think any app that have control over a users money should have security as their top priority.

MOH

ceroc81 wrote: »

Should the apps also be designed in such a way that they wouldn't be able to abused and 'remotely' controlled by other malicious apps who might be taking advantage of the rooted device? (Yes I know the app would have to request root access to use it)

Rooted devices breaks the sandboxing technology that the apps rely on so that they can be reasonably sure that the action that takes place (making a purchase, transfer money etc) are done by an actual person and not in some automated way without the user being aware.

Rooting a device is a security concern, as a user you'll have to decide if that is worth it (there is advantages, and when I had an android phone I rooted it as well).
And I think its totally fair that the app developers can decide if they want to be at risk of having their apps controlled in a way that could cause fraud and/or loss of money of their users.

I think any app that have control over a users money should have security as their top priority.

But if they're relying on that as a security feature and some users have managed to install it on rooted phones, then surely that's a serious security concern?

ceroc81

MOH wrote: »

But if they're relying on that as a security feature and some users have managed to install it on rooted phones, then surely that's a serious security concern?

How you would prevent that though? Fingerprint authentication ala Touch ID? Using a second device where you authenticate your login? 2-factor authentication?

The problem with having an app with unlimited access to the system is that the system is now potentially compromised. Is that fingerprint authentication actually coming from the user pressing it or is it a emulated from an app?

Compare it to a rootkit running on a desktop computer, and you want to login to your bank to transfer some money to another account, pretty sure if the bank website could detect rootkits they would refuse to let you use their service on that computer.

And yes I understand that rooting phones is mostly done by experienced users and use it for good reason(s), but it doesn't mean that it can't be used for 'wrong' purpose...

Now having said that, I don't know how widespread such rogue apps there is out there in the world who is trying to steal your money but I think its "better be safe than sorry" to use a cliche

ED E

Maybe fork this discussion of opsec into its own thread guys?

jontr

Working fine on Xperia Z5 Premium.

Red Silurian

Not working on Amazon fire phone, rooted or not

DopeTech

Couldn't get it to work with my iD sim, luckily I just received my 3uk sim in the post the other day. Activation pin came through straight away with that.

Vodafone smart ultra 6 running stock uk rom, rooted, with root cloak installed.

paconnors

Anybody using this on Meteor can't receive activation sms

TheChizler

Tried in Dunnes and Aldi and was rejected both times, do you need to hold it for longer than a card or something? Queues behind me both times so didn't get a chance to look at the message on the phone.

Berty

TheChizler wrote: »

Tried in Dunnes and Aldi and was rejected both times, do you need to hold it for longer than a card or something? Queues behind me both times so didn't get a chance to look at the message on the phone.

Used it in Dunnes. Nothing happened the first time I faced the phone down. Second time I placed the phone back plate down and it worked.

Girl was looking bemused.

TheChizler

Berty wrote: »

Used it in Dunnes. Nothing happened the first time I faced the phone down. Second time I placed the phone back plate down and it worked.

Girl was looking bemused.

I've got a beep and message both times but a few seconds later the terminal says declined. Do boon. require you to put your own money in before you can use it? I've been trying to use the free fiver and am reluctant to throw my own money at it until I know for sure I can use it. Phone is a S5 neo which is supposedly compatible.

The amount of information online is very poor!

Dard23

TheChizler wrote:

I've got a beep and message both times but a few seconds later the terminal says declined. Do boon. require you to put your own money in before you can use it? I've been trying to use the free fiver and am reluctant to throw my own money at it until I know for sure I can use it. Phone is a S5 neo which is supposedly compatible.

No I used it with just the 5 euro credit I was given. Not being funny but was your NFC definitely on?

thierry14

Thanks OP will try in lidl later 😀

Berty

TheChizler wrote: »

I've got a beep and message both times but a few seconds later the terminal says declined. Do boon. require you to put your own money in before you can use it? I've been trying to use the free fiver and am reluctant to throw my own money at it until I know for sure I can use it. Phone is a S5 neo which is supposedly compatible.

The amount of information online is very poor!

My device is an S6 on the new Marshmallow. Got my Sandwich, Crisps and Coke for €3.50 in Dunnes. Free Lunch. Thanks Boon.

I'll wait for a way to pay where the App can take the money from my account by a charge. Parcel Motel comes to mind, they debit my card each time something arrives.

TheChizler

Dard23 wrote: »

No I used it with just the 5 euro credit I was given. Not being funny but was your NFC definitely on?

Definitely, terminal acknowledged the presence of a "card" but declined it. Must check was it trying to use Samsung Pay or something instead, but I've set boon. as the default payment method.

Edit: the "prioritise foreground application" button under NFC settings was off so maybe it was trying to start boon. from scratch when I had already opened it and entered my pin. I'll try again and report back. I get very self conscious when I'm in queues being awkward so if something goes wrong I don't try to debug, just fire a tenner at the attendant to get out of there quickly.

Redsoxfan

Berty wrote:

My device is an S6 on the new Marshmallow. Got my Sandwich, Crisps and Coke for €3.50 in Dunnes. Free Lunch. Thanks Boon.

Does it work in every Dunnes? Would they have same terminals etc?

Arbie

Redsoxfan wrote: »

Does it work in every Dunnes? Would they have same terminals etc?

Works in Dunnes self pay machines in Stephen's Green anyway.

Berty

Redsoxfan wrote: »

Does it work in every Dunnes? Would they have same terminals etc?

Arbie wrote: »

Works in Dunnes self pay machines in Stephen's Green anyway.

All their POSU seems to be the same in every store. I used the Customer Service Desk in Carlow as there's no Self Service.

wilsixon

Finally got it to work on Irish Vodafone SU 6 (not rooted, stock).
Got free €5 as welcome, then extra €5 bonus when I topped up. Very happy with that!

inel

brookedave wrote: »

Finally got it to work on Irish Vodafone SU 6 (not rooted, stock).
Got free €5 as welcome, then extra €5 bonus when I topped up. Very happy with that!

How much did you top up and you got the bonus?

wilsixon

inel wrote: »

How much did you top up and you got the bonus?

€100 - though I had no idea I'd get any bonus, so it was a nice surprise!

TheChizler

brookedave wrote: »

inel wrote: »

How much did you top up and you got the bonus?

100 - though I had no idea I'd get any bonus, so it was a nice surprise!

Definitely not risking that much until I know it works for sure! Is there any way to return the the balance to your bank account if you can't use it?

Are there any alternatives available? I like my rooted phone too much to undo it all.

wilsixon

TheChizler wrote: »

Definitely not risking that much until I know it works for sure! Is there any way to return the the balance to your bank account if you can't use it?

No risk for me - it works at the petrol station across the road from me.

peteb2

Anyone know when you go to a self service till like in super valu do you have to select cash or card? Or just neither and let it do its thing?

TheChizler

Got this working in McDonald's the other day. Can't convince myself of the benefit of it though.

Hmm_Messiah

Hi are people still using this


It never lets me log in - just says "Sorry something went wrong please try later "

after re-installing etc with no luck ( I have 15 euro credit I think)

I emailed a few times with no reply

last email I sent on 14th July - they replied TODAY 5th Sept - saying all ok on their side etc etc

wondering if any one else had problems

djkac

hey
I had a same problem. i put 30 e on the account and problems began.
I finally log out and log in back and worked for a while. I had to repeat this every time I got this error. Im down to 6 euro and not going to top up.
Maybe finally our banks open their eyes and offer this functionality.
Im from Poland and there most of banks offer NFC apps on phones for years:

http: //www .ingbank.pl/indywidualni/karty/nfc
http: //www .bph.pl/repo/bph/microsite/platnosci_mobilne/index.html
http: //www .bzwbk.pl/karty-platnicze/karty-do-kont/karty-mobile/platnosci-zblizeniowe-telefonem-hce.html
etc
and some TV advertisements:
https: //www .youtube.com/watch?v=mVvuKIeAS-A

I gave those links so maybe our banks will try to catch eastern friends...

dohouch

Deleted User wrote: »

Are there any alternatives available? I like my rooted phone too much to undo it all.

Have you tried "Systemless Root ".

I haven't, as it means resetting to stock and then doing the thing.
Chainfire reckons it's a game of cat and mouse, all the time becoming more difficult to outwith the root checking apps. Look on XDA. Let us know how it goes, might be tempted.:)

antodeco

My phone isint rooted and it says that it is. Pretty annoying!

inna981

Tried it in Dunnes Kilkenny yesterday at the self checkouts. Worked first time and got a free lunch. Thanks OP!

CJmasgrande

I just tried to resister and it said my number is already in use. I don't recall registering before

errlloyd

Well I am a convert, I used it in the work cafe yesterday for the first time and it's great. I am going to try and set it up as a catch all for small payments (and use it to budget them), but I also leave my wallet or debit card at home a lot, so I will keep enough in it for it to be used to cover me when that happens.

ezra_pound

With a vf ultra 6, is the NFC at the middle of the phone. I've not managed to pay yet but I've always used the top the phone.

NikoTopps

Anyone still using this regularly?

Wish they supported the OnePlus 3

Yggr of Asgard

NikoTopps wrote: »

Anyone still using this regularly?

Wish they supported the OnePlus 3

Have a look at this similar service which should work on the OnePlus 3:
https://play.google.com/store/apps/details?id=com.eu.leupost

NikoTopps

Yggr of Asgard wrote: »

Have a look at this similar service which should work on the OnePlus 3:
https://play.google.com/store/apps/details?id=com.eu.leupost

Installed, will try it out!

Cheers!

Yggr of Asgard

NikoTopps wrote: »

Installed, will try it out!

Cheers!

Just to put too many funds in it.

It's a Bank in Malta using an English Electronic Money License utilizing a Bulgarian Card issuer.

Now the bank behind it, SATA Bank is pretty stable and the Maltese regulator is not afraid to close down banks if they don't perform, but I would not park more than a couple of euros on it.

Or get the 5€ plastic mastercard so that you can cash out if needed.

NikoTopps

Just to update in case there's any OnePlus 3 users wondering, I used it today in McDonalds/Tesco in Dublin with no problems so many thanks to Yggr of Asgard for pointing that in my direction. Only thing which I suppose could be a hindrance is you seem to have to tap twice, once to initialise the transaction and another to actually pay. Otherwise it just seems to hang and it gets cancelled. No hassle to just do it again though.

alexinkildare

I checked the whitelist and it said my P9 is compatible but when I went to register it said phone not compatible !

iggy

Just registered but didn't get €5. Do u have to give your photo ID to get the fiver?

Truckermal

iggy wrote: »

Just registered but didn't get €5. Do u have to give your photo ID to get the fiver?

No you don't but I used it once and it worked but then I threw 20 quid in it and now it says card declined every time, I have gave up on ringing them...:(

Yggr of Asgard

There is now also another option beside boon. and Leupay, it's called SEQR.

https://tapandpay.seqr.com/

However a.) it needs more taps as you have to have the app open and b.) you need to be willing to give them Direct Debit access to your current account, as it debits the amount from that rather a balance.

There are no fees and there is a cashback (1% to 3%). Foreign transactions are 2%.

They are a Swedish company.

NikoTopps

Yggr of Asgard wrote: »

There is now also another option beside boon. and Leupay, it's called SEQR.

https://tapandpay.seqr.com/

However a.) it needs more taps as you have to have the app open and b.) you need to be willing to give them Direct Debit access to your current account, as it debits the amount from that rather a balance.

There are no fees and there is a cashback (1% to 3%). Foreign transactions are 2%.

They are a Swedish company.

I tried this, nicely designed app but unfortunately (for me) not OnePlus 3 compatible.