Remix.run Logo
severino 4 hours ago

Whatever they come up with, I hope it doesn't tie you to a Google or Apple smartphone.

Can't we have cards for this? In Spain, for example, to use Bizum, you need either an Android/iOS smartphone (and for the Android case, as you use it from your bank's app, it would typically require some Google security assurances - so no Huawei phones allowed, for example) or logging into your bank's website and use Bizum from there, only if your bank allows you to use Bizum via web. And it's not very practical or convenient to do that when you're in a store and want to pay, in contrast to swiping your credit card.

So while I see very convenient gaining some sovereignty from American companies for these payments, I think we're losing it when we will need devices controlled by other American companies in order to use the new system.

digiown 3 hours ago | parent | next [-]

This is really a human right issue. No one should be required to carry an attacker-controlled tracking device, especially not for interacting with the government. It's funny that the EU uses all this mobile attestation BS more than the US does. So much for sovereignty and consumer protection. No monopoly Google can build is as good as the government forcing you to accept their terms.

joe_mamba 2 hours ago | parent | next [-]

>No one should be required to carry an attacker-controlled tracking device

What about being required to carry a your-own-government-controlled tracking device?

Because the US or Chine government can't harm me in Europe via the data they collect from me, But the EU authorities can if they want to, so naturally I fear them more if they were the ones hoovering my data.

What are the odds they're using this on-shore tech grab to implement their own domestic version of China's social credit score system, to easily get data on their own citizens who commit "wrong-think", without having to through the effort to twist the arm of US entities every time they want to do that?

Food for thought, but I do think we're living the last years of online anonymity, it's inevitable.

Archelaos 30 minutes ago | parent | next [-]

The odds are very low. It all depents on the people. So far, the European citizens are very privacy senstive. The European institutions are characterized by a huge devision of power. There is no chance that European instutitions can impose their will against a considerable majority of people. If people turn away from liberal democracy, that's another matter. But then everything is lost anyway.

miohtama 11 minutes ago | parent | next [-]

> There is no chance that European instutitions can impose their will against a considerable majority of people

The EU commission just passed chat control to have government mandated software in every phone

joe_mamba 24 minutes ago | parent | prev [-]

> So far, the European citizens are very privacy senstive.

Only from corporations, but not from their own governments. A lot of Europeans put a lot of blind faith into their governments and the EU, and criticism of these institutions is usually met with accusations of being a bot, MAGA or russian troll.

>The European institutions are characterized by a huge devision of power.

Didn't really stop them passing whatever rules they wanted during Covid, did it?

>There is no chance that European instutitions can impose their will against a considerable majority of people.

Famous last words. People always can be, and routinely are, manipulated to vote against their own best interests, even if everyone claims manipulation doesn't work on them.

A individual person can be smart, but people together as a collective voting block, are stupid, and the elites treat us as cattle.

scythe 39 minutes ago | parent | prev [-]

Tracking device might be the wrong thing to focus on. The US has other ways of messing with foreigners who depend on services provided by US companies, like suddenly cutting off those services in the case of ICC judges.

joe_mamba 35 minutes ago | parent [-]

IIRC, ICC judges lost access to their O365 work email accounts. Worst the US can do to me is turn off my Steam, and Gmail but I can easily live without those.

Now imagine being debanked by your own government because they don't like what you're saying and becoming unemployed, homeless and dead. I don't think they're remotely comparable.

For example, a few years ago, a power tripping gov bureaucrat turned off my unemployment payments over a technicality. Luckily, I had enough money to pay a lawyer to sue them and won, but it was tight. What if I hadn't had the money to hire a lawyer? Since I was in a foreign country, with no family or close friends to fall back on. I was exclusively relying on the welfare state I paid into for years, that then turn its back on me for shits and giggles.

So I don't think you understand just how bad it can be for you if your government decides to turn on you and fuck with you, if you're comparing this to losing access to your work email account.

See the famous case of UK postal workers that got fucked by their government trying to hide their mistakes.

digiown 22 minutes ago | parent [-]

It's all the same. How is suing Google any different, if you instead get debanked by Google for violating their "terms"? The only solution is untraceable, permissionless money, like Monero. Why do you think governments try so hard to ban it?

joe_mamba 20 minutes ago | parent [-]

Since when is google a bank?

digiown 18 minutes ago | parent [-]

Your bank (like most European ones) requires you to pass attestation to use their services. If you don't accept Google/Apple's terms, you can't access it without extreme difficulty.

joe_mamba 10 minutes ago | parent [-]

I can always access my bank via a web browser or even in person at the teller at a branch somewhere, or as a last resort via snail mail from attorney, but most importantly even if I get locked out somehow by google, the account still runs and I won't be homeless as my salary and rent auto-payments keep going regardless if you can access it or not.

How is this comparable to your government debanking you meaning that no bank, landlord, layer or job will touch you?

skeptic_ai an hour ago | parent | prev | next [-]

Carrying this device is the key here. Eventually we all need to carry it around, track us everywhere.

moffkalast an hour ago | parent | prev | next [-]

Yeah it seems that some politicians have noticed that they can enact a lot of self serving authoritarian legislation that wouldn't fly otherwise if they push it as populist independence-from-US thing. Can't let a good crisis go to waste, of course.

One only needs a few looks at what the EU Commission has been doing lately to see that if left unchecked their plan is a UK-like total surveillance state.

digiown 28 minutes ago | parent [-]

I don't disagree but that wasn't the point here. The point is they are handing even more control to a different US entity. Putting my tinfoil hat on, I assume the authoritarians are intending to simply buy the data from the American companies to circumvent legal restrictions, as in the Five Eyes arrangement.

ignoramous 2 hours ago | parent | prev [-]

> It's funny that the EU uses all this mobile attestation BS more than the US does

Attestation in on itself isn't unwarranted which (to me) is an important security measure. Attestation as commonly implemented on Android via Play Integrity (the way banking apps are known to do) is restrictive, sure: https://grapheneos.org/articles/attestation-compatibility-gu... / https://archive.is/snGEu

digiown 31 minutes ago | parent | next [-]

> important security measure

It's a security measure against the owner of the device, in other words, an attack. Would you be okay with me using a remote control to forcibly slow down your car so I can merge? Using attestation this way is fundamentally incompatible with ownership. If the bank wants some assurance about a device, they need to sell or issue one to me, like credit cards or point of sale machines, which are explicitly not your property.

The fact that the assurance is provided by a third party you have little recourse against just adds insult to injury.

xyzzy123 an hour ago | parent | prev [-]

An important security measure for who, though? The servers at the bank should "never trust the client" in case the attestation is bypassed or compromised, which is always a risk at scale.

If it's an important safety measure _for me_, shouldn't I get to decide whether I need it based on context?

I think it's fair for banks to apply different risk scores based on the signals they have available (including attestation state), but I also don't want the financial system, government & big tech platforms to have a hard veto on what devices I compute with.

pimterry 3 hours ago | parent | prev | next [-]

> for the Android case, as you use it from your bank's app, it would typically require some Google security assurances - so no Huawei phones allowed, for example

I don't know about Huawei, but actually most (all?) of the banking apps in Spain should work on a non-Google-certified Android builds. There's an community list tracking GrapheneOS compatibility at https://privsec.dev/posts/android/banking-applications-compa... and all of them currently appear supported just fine.

fhdkweig 3 hours ago | parent | prev | next [-]

> Whatever they come up with, I hope it doesn't tie you to a Google or Apple smartphone.

I would also hope so, that is the entire point. The reason they are scrambling right now is because Starlink just shut off all of Russia. Because Starlink was so cheap and easy (and stable for the last 4 years of the war), a lot of people in Russia stopped using any other form of internet access. And while all of Europe is happy to see Russia go away, they are concerned that the same can be done to them at a whim by any number of American companies. So they are trying to quickly create alternatives to anything American including software providers like Microsoft 360.

As for credit cards, it is not as if there is something intrinsically American in credit card processing. They can just as easily create a new system that uses the same protocols as Visa and Mastercard.

Having your entire economy dependent on a company you don't control in a country you don't control was considered acceptable for as long as a concept of "allies" existed. That is not the world we are living in right now.

pennaMan 2 hours ago | parent | next [-]

> they are trying to quickly create alternatives to anything American

They're the same bright minds that ensured no alternatives could naturally come out of the European market trough relentless bureaucratic central planning. I have zero hopes of a good outcome

maigret 33 minutes ago | parent [-]

Actually European integration the last 30 years has been pretty remarkable. In the past, not even electric plugs were compatible. But the EU is not a country. A lot of the inefficiencies are actually features sought by key members to protect their own local incumbents.

YarickR2 2 hours ago | parent | prev [-]

> Because Starlink was so cheap and easy (and stable for the last 4 years of the war), a lot of people in Russia stopped using any other form of internet access.

What are you smoking ..err.. any source to your claim ? (Which is between bizarre and just plain wrong).

munk-a 12 minutes ago | parent | prev | next [-]

Canada has the interac system and it works pretty wonderfully, it's integrated into other systems for overseas compatibility but it can operate entirely independent of VISA/Mastercard if the POS supports it.

ChrisMarshallNY 17 minutes ago | parent | prev | next [-]

An Indian friend of mine, constantly raves about their UPI system:

https://en.wikipedia.org/wiki/Unified_Payments_Interface

It sounds a lot like what they're discussing.

pjmlp 3 hours ago | parent | prev | next [-]

On Portugal we have the Multibanco network, which already provided Internet like services for buying stuff on the terminals and eventually graduated to have online payments as well, however only in Portugal.

Likewise, in Germany we can have SEPA for most stuff.

And in Greece there is Viva.

Problem is getting something that actually works across all European countries.

margana 3 hours ago | parent | next [-]

The problem isn't just getting something that works across all European countries. It's getting something that works globally.

While we may make most of our payments within EU, basically everyone still occasionally pays for something outside of EU, either online or when they travel. This means if the new thing only works in EU, every European will still need and have a MasterCard/Visa even if they use it less often than before.

This is still a massive amount of leverage - MC/Visa still have the ability to block payments made from EU citizens/companies to outside.

RobertoG 2 hours ago | parent | next [-]

You can buy things from your local Amazon or national equivalent that come from outside using this systems, so, you are not so restricted to EU sellers.

I suppose the most problematic would be traveling. I recently when outside the EU and was surprise how smooth the process was using my Visa card, to the point I didn't use any local currency.

On the other hand, I recently buy books from the UK and it get stuck for two weeks in customs, and it had nothing to do with the payment platform. I had not realized how difficult is to import something from outside the EU, even for personal use.

graemep 3 hours ago | parent | prev [-]

Also European merchants who need to accept payments from non-Europeans need to accept Visa and Mastercard.

wolvoleo 2 hours ago | parent [-]

Of course but they can support an EU standard as well. It's not mutually exclusive.

The big benefit is that all internal EU card transactions are no longer routed via US companies which is quite ridiculous.

graemep an hour ago | parent [-]

Internal transactions all over the world are routed through US companies. I have paid using Visa or Mastercard at some point in Australia, Indonesia, India, Frnce, Sri Lanka, Singapore, Dubai.....

its not exclusive, but there is a problem with network effects. From the point of view of a business why should they add support for a new payment system no one users, from the point of view of consumers why should they sign up to a new system that no one accepts?

As I said in another comment the most likely alternative is a more decentralised system that all countries/currency blocks that want sovereign payments can get behind.

severino 3 hours ago | parent | prev | next [-]

I've been in Portugal sometimes, and to me MB was synonymous with "we accept credit cards", and in fact it is in the sense that you can pay using Visa or Mastercard in those shops. But, is it a standalone system that doesn't require anything outside Portugal in order to work? With their own non-Visa credit cards? And can you use them when abroad in the EU, for example?

tiagod 2 hours ago | parent | next [-]

It's a standalone network. Most Portuguese cards are also VISA/Mastercard, but payment terminals may only have a contract with Multibanco, meaning only Portuguese cards are accepted. It's quite common for foreign cards not to be accepted.

pjmlp 2 hours ago | parent | prev [-]

Nope, it has nothing to do with credit cards, although it also accepts them.

It is majorly used for debit cards, and similar in use to the famous Minitel in France.

You can use it to load pre-pay phones, or other kinds of rechargeable services, buy tickets for public transport and various kinds of shows, pay water, electricity, taxes, among other services.

There is now an app used to pay on shops via QR codes.

You can also pay online with one time cards, that are generated for a single transaction.

Outside Portugal it is a regular debit card.

When you access Multibanco with foreign cards, you can only withdraw money usually.

rkomorn 2 hours ago | parent [-]

I'm French and living in Portugal and I do not get the Minitel comparison. Minitel was basically a Telnet device to various services' servers.

That said, I love MB and MB Way. What an upgrade it's been over paying for stuff in the US (where I lived before moving to Portugal).

pjmlp an hour ago | parent [-]

From what I know from Minitel, the same Internet before the Internet applies.

I was buying tickets on MB, before it became common place in the Internet.

rkomorn 31 minutes ago | parent [-]

Could you search for tickets and such on MB?

All the stuff I'm familiar with is only payments (with entity and reference).

Now that I think about it, you could search for things on Minitel but I don't remember if payments were made as phone charges or if they could also be done with transfers.

Minitel was so prohibitively expensive to use (just about every service cost multiple francs per minute), I didn't do much with it.

bjghknggkk 3 hours ago | parent | prev | next [-]

Show me a german webshop that supports modern payment methods. It usually old school bank transfers still.

victorbjorklund 2 hours ago | parent | next [-]

Which payment method is missing from Zalando? https://en.zalando.de/ It’s a German company

heikkilevanto 3 hours ago | parent | prev | next [-]

I just bought Kampot peppers from https://www.unclespepper.com/ which is in Germany, the name notwithstanding. And yes, I paid with my Danish Visa card. No problems except that I had to adjust my ad blocker once.

looperhacks an hour ago | parent | prev | next [-]

I have never paid anything via bank transfer, where are you buying?

pjmlp 2 hours ago | parent | prev [-]

Yes, why did I mentioned SEPA?

It works for the purpose to pay something online.

If you want an example, Eurowings.

moffkalast an hour ago | parent | prev [-]

SEPA would be a decent solution with instant QR code generation and app payments, but the transfer fees are ludicrous for daily use (~1-2€ per wire). Or maybe it's just my bank being greedy fucks as usual.

pjmlp 44 minutes ago | parent [-]

It is your bank, I don't pay for transfers.

gdulli 3 hours ago | parent | prev | next [-]

I use my credit and debit cards the same way today as I did before smartphones existed. I never invited the extra surveillance middleman of Google/Apple into my transactions. And the convenience of tapping or swiping a plastic card is simpler than using my phone anyway. Is this not possible in Spain?

hearsathought 2 hours ago | parent | next [-]

> I never invited the extra surveillance middleman

What's an extra layer of surveillance? Why accept the "credit and debit" surveillance middlemen but not the google/apple middlenmen?

What the world needs are "cash cards". Something equivalent to cash not tied to your identity that you can use in the real and virtual world.

I simply do not understand why governments or the private sector do not provide such options.

supertrope 5 minutes ago | parent | next [-]

Governments frown upon KYC-less digital purse cards. Gotta force everyone to share their national ID number to just open a bank account to keep out drug dealers, terrorists, or NSFW game peddlers.

Banks generally don't like disposable digital purse cards. They make money off fees and interest. If a product doesn't rope you into a customer "relationship" where you link your pay deposits or later might get a mortgage or car loan they can only make money off fees. Enjoy paying $5 to activate a $100 prepaid debit card!

gdulli 2 hours ago | parent | prev [-]

Credit cards provide convenience and cash back benefits. Some might prefer to pay cash for everything for ultimate privacy, and that's fine. But credit cards are the compromise I make. I can still pay cash when I think it's appropriate for a given transaction.

Using Google or Apple Pay so I can tap my phone instead of my card gives me no extra benefit that I care about and complicates my ecosystem with another party.

Curiositiy 19 minutes ago | parent | prev | next [-]

Thanks! ANOTHER SANE voice of reason! Nothing tops the simplicity of using plastic, either via chip or NFC. Leave the friggen' phone at home!

severino 3 hours ago | parent | prev | next [-]

Yes, but in Spain all of our cards are Visa or Mastercard, afaik, so you can't really avoid using American tech in your daily payments (unless you use cash, which remains a very convenient method, by the way).

mig39 3 hours ago | parent | prev | next [-]

I'm with you. Low-tech works just fine. I hate the idea of having to depend on a working phone just to pay for things.

But isn't the promise of Apple Pay that you never expose your real credit card # to the merchant? So they can't track you? I know Walmart in Canada really resisted Apple Pay for a few years because it would mean no more ability to track people by their payment methods.

nozzlegear an hour ago | parent [-]

> But isn't the promise of Apple Pay that you never expose your real credit card # to the merchant? So they can't track you? I know Walmart in Canada really resisted Apple Pay for a few years because it would mean no more ability to track people by their payment methods.

Yes, this is exactly what Walmart does in the US since they still don't accept Apple Pay/Google Pay. When I go in and make a purchase using my credit or debit card, they'll associate it with my Walmart account and it'll show up as a "recent order" in the Walmart app because I have the same card saved there for ordering groceries online. They use those in-store purchases to recommend things to add to my grocery orders all the time.

direwolf20 3 hours ago | parent | prev [-]

I put my debit card in my smartphone case. Best of both worlds.

Curiositiy 21 minutes ago | parent | prev | next [-]

This. A sane voice of reason in an insane, software-tech dork driven world.

Physical cards ftw!

Btw i love simply using cash in South America when getting a taxi, no stupid "apps", no tech nonsense. Just wait at a proper spot and hail.

Freak_NL 2 hours ago | parent | prev | next [-]

> Whatever they come up with, I hope it doesn't tie you to a Google or Apple smartphone.

The article starts with Wero right off the bat, which a pan-European rebrand and continuation of the Dutch Ideal. The Dutch have been using Ideal everywhere, and you usually use that to pay online. It redirects you to your bank to acknowledge the transaction, and most bank have auth methods where a smartphone is optional. Most often used for sure, but optional, and you can complete the transaction with a hardware reader and your debit card as well.

The only exception are the neobanks like Bunq, which actually are smartphone-only. That one in particular is great if you appreciate the CEO and staff keeping a personal eye on your transactions (no kidding).

ncruces 3 hours ago | parent | prev | next [-]

> Whatever they come up with, I hope it doesn't tie you to a Google or Apple smartphone.

Even if it does, Google won't be taking a cut from it.

Also, it's then much easier to provide a mobile web version, or something else.

My country's internal system also sells a bracelet for contactless payments, and there are obviously payment cards.

Once there's a mandatory standard, it's much more likely competition will show up. EU wide SWIFT, direct debits, instant transfers, all show this.

KellyCriterion 3 hours ago | parent [-]

What would Google prevent from taking a similar cut as Apple is taking?

supertrope 10 minutes ago | parent [-]

Lack of negotiation power. Less control over Android than Apple has over iOS.

Google keeps self-sabotaging Android Pay. They lacked market power so cellular carriers blocked it hoping to advance their own payment ecosystem (ISIS). Google changes the payment brand every few years, and fragments it into two separate apps or combines them. It's rather like their messaging strategy.

skadge an hour ago | parent | prev | next [-]

FWIW, I'm using Bizum on a daily basis in Spain, on a de-googled android phone running e/os/, via my bank app (revolut)

hahn-kev an hour ago | parent | prev | next [-]

It's true that it's a problem, but it can be easily fixed in the future. For example they could just change the app to work on any old android fork. You still get the benefit of no longer having transaction data run through the US.

ulrikrasmussen 32 minutes ago | parent [-]

But right now many of us are concerned with not being able to run e.g. GrapheneOS without locking ourselves out of all basic digital infrastructure. We shouldn't wait until it gets untenable for the EU to lock us into Google and Apple, we want independence from the start.

hiire 3 hours ago | parent | prev | next [-]

Wero is expanding around Belgium, France and Germany while Bizum has "joined" the European Payments Alliance with Bancomat and SIBS from Italy and Portugal respectively, not sure how these work exactly as I'm also located in Spain.

My point being, if these payment systems start becoming more interconnected and join within a standard, I wouldn't be surprised if we eventually saw Bizum cards around here, Wero cards in other places, and many more.

At least that's my take on it. Of course there's still a long way to go, such as developing the system, banks adopting it, businesses adopting it, then customers (which would probably take years, many people wouldn't bother switching at least until their current card expires)

clawlrbot 3 hours ago | parent | prev | next [-]

I’m sure Brussels will do the right thing.

whynotmaybe 3 hours ago | parent [-]

What does Belgium's capital has to do with this? Do you imply Brussels = European Union?

createaccount99 2 hours ago | parent | next [-]

Brussels = location of EU headquarters, and in common lingo Brussels thus means "People running the EU and deciding things on everyone's behalf."

the_biot 2 hours ago | parent | prev [-]

"Brussels" is often used to mean the entire blob of EU and related institutions.

nozzlegear an hour ago | parent [-]

Exactly, it's just like people saying Washington to refer to the US government, or Beijing to refer to Chinese government.

pfortuny 3 hours ago | parent | prev | next [-]

With my bank (bankinter) you can bizum from a browser (just checked).

Sorry: This is Spain (to clarify).

zb3 3 hours ago | parent | prev | next [-]

This "Play Integrity" garbage is the first thing europe should break with. Instead we have Italian government app refusing to run on devices not serving Google's interest.. shame.

rich_sasha 3 hours ago | parent | prev [-]

I think absolutely Europe needs it's own mobile OS. And thankfully they can "just" fork Android - or better still, adopt one of the existing forks.

I suspect simply stating that it must be a supported standard will do most of the work, much like standardising phone chargers.