- Student Loan Debt Is Keeping Adult Kids From Leaving the Nest
- The Crime Americans Worry About Most Is the Hacking a Credit Card
- 64 Countries Have a Smaller Gender Pay Gap Than the US, Study Says
- Does Money Lingo Make Your Head Spin? Here’s What It Really Means
- Budget from 1987 Tells the Tale: Americans Are Severely Underpaid
- Trick-or-Treaters Want Cash, Not Treats
- Fast-Food Workers (McDonald’s Included) Earn $20 an Hour in Denmark
- Delinquent Doctors Publicly Outed for Unpaid Student Loans
Does this admission shock you? When a security expert revealed this week how lax the security is on Starbucks’ payment app, the company said: “That was not something that was news to us.”
The security expert, Daniel Wood, said that user passwords, email addresses, user names and GPS location files are stored in clear text in Starbucks’ mobile payment app.
What does that mean to you, Starbucks customer? Plenty, if your phone is stolen. Explains the Los Angeles Times, “By connecting the device to a computer, [thieves] could download all of the information above within 30 minutes, whether the smartphone is protected with a security code or not.”
Starbucks doesn’t encrypt the information or store it on its servers because then customers would have to log in every time they use the app to pay for coffee, says the Times. What a dreadful inconvenience that would be!
This is the most widely used payment app in the U.S., Computerworld says.
You’d think a company would do better than that. Still, a Computerworld reader pointed out, this isn’t in the same ballpark as the massive data breach at Target, where the information of up to 110 million customers was compromised.
How can you protect yourself from the Starbucks app? Don’t allow the app to automatically dip into your bank account for more funds. And don’t use your Starbucks password for any other accounts.