The COVID-19 pandemic accelerated a trend that was already well underway: employers letting their workers perform their jobs remotely, from home, most or all of the time. But even if you and your employer both know exactly where you live and work, you may be surprised to learn that state departments of taxation can have some very different ideas about where "here" is. As a result, Texans, Utahns, and Arkansawyers who work for New York- or Massachusetts-based companies will have income taxes withheld from their paychecks, even if they've never set foot in the home office.

In the wake of the pandemic, dozens of major companies are embracing employees' desire to stay remote, increasing their support for working from home permanently. Some businesses have even closed offices or let leases lapse, counting on a physically distant, flexible workforce to reduce their real estate needs.

In many ways, this can be a win/win: employers can save overhead costs on expensive square footage in high-demand cities, and employees can save time and money by skipping the commute and dialing in from, basically, anywhere they want. New York, San Francisco, and Los Angeles are expensive; maybe you want to move to Montana and dial in from the woods or get a nice little ocean-view place in Florida. Unfortunately, as far as the state is concerned, your beachside cabana may as well be squarely in the middle of Manhattan, and you will be taxed as such.

Even before COVID, living in one state but working in another was common in many of the biggest US metropolitan areas. Many commuters into New York live in New Jersey or Connecticut, for example, and vast numbers of workers in Washington, DC live in Maryland, Virginia, or sometimes even farther out in Pennsylvania, West Virginia, or Delaware. Kansas City sprawls into both Kansas and Missouri, so traveling across city limits can mean crossing state lines. Any major city near a border likely has loads of workers that saunter over that line every day.

From a tax perspective, that's tricky because both the state where you perform a job and the state where you actually live are going to want to try to tax your income. Still, only one state at a time can, and most jurisdictions with a lot of overlap have agreements worked out with their neighboring states that make it easy for workers to take state withholdings and pay state tax where they live. (I, for example, only had to fill out one short form when I worked in downtown Washington, DC to make sure my taxes were properly withheld across the river in Virginia.) 

However, the increase in remote work means as offices downsize, some employees are now migrating to areas of the country where there are not tax agreements in place, leaving individuals to try to muddle through multiple states' tax codes on their own. Even more challenging: states are losing money hand-over-fist due to the pandemic and are likely to be more aggressive about chasing down every dollar they can claim.

Seven states – Arkansas, Connecticut, Delaware, Massachusetts, Nebraska, New York, and Pennsylvania – have so-called "convenience" rules on the books that require any work performed for an employer based in their state to be taxed as if the worker performing the job is in their state, no matter where the employee is located. Those states are still attempting to collect tax from telecommuting workers, and other states are fighting back.
​
New Hampshire,  one of nine states that do not have an income tax, is suing neighboring Massachusetts over its convenience rule. Four other states – New Jersey, Connecticut, Hawaii, and Iowa – are supporting the suit.

In the near future, your phone may take its 5G signal from the sky instead of a nearby mast on the ground. It's an innovative way to solve the problem of increasing connectivity without relying on thousands of terrestrial cell towers. The concept is known as a High-Altitude Platform Station (HAPS), and it essentially takes the cell tower from the ground and puts it in the sky.

The latest HAPS project to be unveiled is from Great Britain – Stratospheric Platforms and Cambridge Consultants. Recently, the pair revealed the core of its efforts, a special antenna and crewless aircraft, which it has been working on confidentially for the last four years.

How will it work? Instead of talking to a nearby tower to get its signal, your phone talks to a three-square-meter antenna attached to hydrogen-powered aircraft with a 60-meter wingspan, flying at an altitude of 12 miles (20 kilometers). The aircraft, or HAP, is expected to stay aloft for at least a week, all the while providing 4G LTE and 5G network coverage over an area of about 86 miles (140 kilometers).

Phones don't give off a powerful signal, hence the antenna array's size on the aircraft, which has 4,000 radios working together inside it. The processing power is similarly immense, helping to steer and direct the beams toward the ground even when the aircraft is shifting around. The cooling system has to work at high altitudes, minimize drag, and keep the weight manageable. It's an exciting piece of technology in itself.

The aircraft itself, which is made of a composite material, has already been certified for use, so it's deemed safe and ready for flight in civil airspace. There's no pilot, and ground-based operators will only be involved during takeoff and landing. The hydrogen power cell is not only environmentally friendly, as it only produces water vapor and emits very little noise, but it also gives off a lot of power — it has been tested to 50KW in labs already — for a long duration. That's a lot more than the low-power solar power systems used on other HAP vehicles.

HAPS systems are also expected to be cheaper to implement. Building each aircraft reportedly saves 70% over the costs of building and installing a traditional mast. Then there's the space-saving and logistical benefits. According to research quoted by the team, it's estimated that an impractical sum of 400,000 5G masts will be needed to cover the U.K., for example, and each aircraft could replace around 200 of those masts.

What can you expect from the connection? The aircraft should return a smooth Sub-6 5G beamed signal offering speeds of 100Mbits per second and 1m/s latency to devices connected to it, which don't need any special software or hardware modifications. While a fleet of HAPS aircraft could provide enough coverage for an entire country, what's very interesting is that the unique modular design of the antenna enables targeted coverage.

This means a signal from a part of the antenna could be focused on an individual area like a motorway or even a single vehicle driving on it. The team said a fleet of 60 aircraft could cover the U.K. in its entirety, and the idea is for networks to partner with dedicated "airlines" that operate the planes.

Potential problems. This new technology forces networks to rethink how they currently work. Network operators are already installing a 5G network using traditional masts. Convincing them to bypass this and adopt a sky-bound service will take a lot of work. However, the team calls its stratospheric network complementary to a traditional terrestrial network and says the costs involved will be temptingly less than creating a widespread 5G network using only ground-based masts.
​
When will it arrive? When can we expect to see Stratospheric Platforms HAPS system in operation? Deutsche Telekom is the project's initial investor and launch partner, and it has already tested an early version to show the system works. Stratospheric Platforms' aircraft is in preproduction now, with plans for the first prototype flight in 2022, while the antenna exists as a proof of concept and works with 3G, 4G, and 5G. It's anticipated the service will go live in 2024.

Remember when Amazon (quietly) announced its expansion to Sidewalk, back in September? Well, the feature is live for some in a new update for the Amazon Alexa app, and you might want to go turn it off. We covered it in Issue 7-25.

Sidewalk is a feature that extends the network coverage of your devices, particularly Ring surveillance tech (like its cameras, smart lights, and pet trackers) and Echo smart speakers. But it'll also share a small chunk of that internet bandwidth to provide the same services to your neighbors – so your privately-owned devices won't be so private anymore. 

Sidewalk has been slowly rolling out to Echo and Ring owners in the U.S. as of Thanksgiving, which users were made aware of via an email from Amazon. While the feature isn't up and running yet, the email essentially notifies users that it's "coming soon." But it's also the company's discreet way of letting you know the feature has officially been turned on. 

Amazon makes it easy to opt out if you're only just unboxing your shiny, new Sidewalk-compatible device. During the setup process, users are asked if they want to join the network via the Amazon Alexa app. However, if you already own one of the 20 Sidewalk-enabled products, it'll automatically opt-in for you. 
To disable Sidewalk, all you need to do is: 

• Update the Amazon Alexa app or double-check that you're on the latest version
• Open the Amazon Alexa app and tap on the More tab
• Then, tap Settings > Account Settings > Amazon Sidewalk and toggle off the Enabled button
  ​
  

Thankfully, the additional Community Finding feature – which "can help your neighbors find pets and important items connected to Sidewalk by sharing the approximate location of [your] device and other Sidewalk bridges you own" is disabled automatically.

Of course, if you'd like to use Sidewalk on either your Echo smart speaker or Ring security device, you'll be happy to know you're already all set for when Amazon officially launches the new feature.

Microsoft has disrupted a massive hacking operation that it said could have indirectly affected election infrastructure if allowed to continue. 

Last Monday, the company said it took down the servers behind Trickbot, a massive malware network that criminals were using to launch other cyberattacks, including a strain of highly potent ransomware. 

Microsoft said it obtained a federal court order to disable the IP addresses associated with Trickbot's servers and worked with telecom providers worldwide to stamp out the network. According to The Washington Post, the action coincides with an offensive by US Cyber Command to disrupt the cybercriminals, at least temporarily.

Microsoft acknowledged that the attackers are likely to adapt and seek to revive their operations eventually. Microsoft said the company's efforts reflect a "new legal approach" that may help authorities fight the network going forward.

Trickbot allowed hackers to sell what Microsoft said was a service to other hackers – offering them the capability to inject vulnerable computers, routers, and other devices with other malware. 

That includes ransomware, which Microsoft and US officials have warned could pose a risk to websites that display election information or third-party software vendors that provide services to election officials.

"Adversaries can use ransomware to infect a computer system used to maintain voter rolls or report on election-night results, seizing those systems at a prescribed hour optimized to sow chaos and distrust," Microsoft VP of security Tom Burt wrote in a blog post.

Ransomware seizes control of target computers and freezes them until victims pay up – though experts urge those affected by ransomware not to encourage hackers by complying with their demands. The Treasury Department has warned that paying ransoms could violate US sanctions policy.

He added: "We have now cut off key infrastructure so those operating Trickbot will no longer be able to initiate new infections or activate ransomware already dropped into computer systems."

A separate technical report by Microsoft said Trickbot had been used to spread the Ryuk ransomware. Security experts say Ryuk has been attacking 20 organizations per week.

But Trickbot has also been used to spread false and malicious emails containing malware that tried to lure victims in with messaging surrounding Black Lives Matter and Covid-19, Microsoft said.

Microsoft said Trickbot had infected more than 1 million computing devices globally since 2016 and that its operators have acted on behalf of both governments and criminal organizations, but their exact identity remains ambiguous.

Taking down Trickbot follows a series of attacks that became highly publicized in recent weeks: One targeting Tyler Technologies, a software vendor used by numerous local governments, and Universal Health Services, one of the nation's largest hospital companies. A statement on Tyler Technologies' website has said the company does not directly make election software. The software it produces that is used by election officials to display voting information is separate from its internal systems affected by the attack.
​
Ransomware could pose a risk to the election process if systems designed to support voting are brought down, according to Check Point threat analyst Lotem Finkelstein. Still, so far, experts regard it as "mainly a hypothetical threat right now."

Ever since the pandemic began, many knowledge workers have continued their employment responsibilities from their homes. But now, with many employers extending the remote-work timeframe well into 2021, it may be time to consider working from a residence that’s in a far more pleasant location.

If you are a remote worker tired of sitting all day at your principal residence or working in grey cubicles at a remote office, here’s a group of exotic locations that offer you not only a stunning change of scenery but also dependable internet speeds and infrastructure necessary for remote work. From pristine beaches to tropical rainforests and paradise islands, there’s something in this list that is sure to make you want to book your ticket now and even consider these locations for a leased or purchased second home.

Galapagos Islands. West of continental Ecuador lies the isles made famous by Darwin’s studies of the natural world that would result in the Theory of Evolution. A natural paradise filled with stunning vistas, pristine beaches, and some of the most exotic wildlife in the world, the Galapagos Islands are a real paradise on earth. 

Galapagos has a population of only 25,000 people, setting the standard for the word remote. Nevertheless, they offer a reliable infrastructure for remote workers, with most hotels offering free Wi-Fi and most housing areas, including a good connection as well. While Galapagos is by far not the cheapest option on the list, you can expect prices similar or slightly less expensive than living in the continental USA.

Costa Rica. Costa Rica, the country with the most amazing biodiversity on the entire planet, has long been espoused as a real paradise for ex-pats. Not only does the Central American country offer dense tropical rainforests, volcanoes, and tropical climate, but also some of the best beaches in the world – featuring crystal clear water and pristine sand.

Santa Teresa is one of such beaches and is one of the most visited by tourists for many a reason. Not only does Santa Teresa have some of the best surf you will find in the world, but it also features a large town and tightknit community that offers plenty of yoga retreats, delicious food, thriving nightlife, and fantastic weather you could expect.

You will come for the surf and natural beauty, but you will stay for the people – a collection of ex-pats from around the world and locals that live the “Pura Vida” (Pure Life) lifestyle and always boast a smile on their face.

Morocco. Located not be too far off the coast of its northern neighbors in Spain, Morocco might as well be a galaxy apart. This diverse land containing four different mountain ranges, deserts, and Mediterranean beaches has been the setting for many iconic movies throughout the years, including Lawrence of Arabia, The Man Who Knew Too Much, Gladiator, and even Star Wars.

But what truly makes Morocco so special, and attracts millions of tourists each year, is its perfectly preserved culture and traditional architecture. The market town-turned-city of Marrakesh has been a crossroads for culture and trade for close to ten centuries. Featuring gorgeous oriental architecture and thousands of captivating smells and colors, the streets through the bazar hold plenty of secrets within them – from delicious honey drizzled pastries to sensual belly dancers.

A very low cost of living country, Morocco has been evolving technologically at a breakneck pace in the last few years and has plenty of co-working spaces available for digital nomads, as well as surprisingly fast internet connections for rental homes.

Bali, Indonesia. Another location famous for its beaches and surf, the Island of Bali, is often touted as a real heaven on earth. Boasting mind-blowing beaches, volcanoes, mountains, coral reefs, and overall nature, Bali can easily compete with any location on this list and come out ahead on most aspects.

In Ubud, the cultural center of the island and home of the ex-pat community, you will find the spiritual hippies and yogi types. In contrast, in the southern Bukit Peninsula, you will find the perfect location to surf in legendary breaks like Padang Padang, Dreamland, and Uluwatu.

What few people know about Bali, however, is that it has been building a burgeoning startup ecosystem with all kinds of entrepreneurs, initiatives, tech talent, and startups springing up all over the island. To satisfy this demand, Bali has seen a large number of co-working spaces pop up across the island, each one providing more than adequate commodities for digital nomads, who are not only attracted to the island’s legendary beauty but also its low cost of living and housing.

Ho Chi Minh City, Vietnam. Touted as one of the best cities for remote workers around the world, Ho Chi Minh City is a colorful, vibrant, and creative metropolis in the south of Vietnam that has plenty to offer for digital nomads, tourists, and ex-pats alike.

A highly developed city bursting with cafés that offer fantastic coffee and an even better internet connection, the former Saigon is filled with culture, commerce, art, and plenty of beautiful natural and human-made sites to behold.
​
Visit the Ben Thanh Market and its iconic clock tower to buy all sorts of goods ranging from clothes to electronics to groceries for excellent prices, provided you are willing to haggle a little. The food is absolutely delicious and incredibly cheap, with Vietnam having one of the lowest costs of living in this entire list.
For those who prefer to work in office environments, Ho Chi Minh City has plenty to offer, including the fantastic Dreamplex co-working space, which features the fastest and most reliable internet in the city, as well as excellent ergonomic chairs.

The US House of Representatives approved the Moving Forward Act this week, a $1.5 trillion infrastructure bill that puts $100 billion toward bringing high-speed broadband to underserved areas. The ambitious bill also allocates funds toward transportation and clean energy initiatives, like $500 billion for rebuilding highways, bridges and rail, and $70 billion for promoting renewable energy.

The main objective of the broadband portion of the bill is to bring high-speed internet to “unserved and underserved rural, suburban, and urban communities,” as well as adequate support for it, according to a Moving Forward Act fact sheet from the Department of Transportation. It prioritizes remote learning for children by providing digital equipment and outfitting school buses and school libraries with Wi-Fi. The bill also provides broadband payment support for low-income households and the recently unemployed.

The full version of the Moving Forward Act isn’t likely to pass in the Republican-controlled Senate. However, the broadband-related amendments may still have a chance, said Matt Wood, President of Policy and General Counsel at Free Press Action, a media advocacy group. “People in cities and rural areas alike need better broadband at better prices, no matter their party or politics,” Wood said.
​
The bill is just one of many recent efforts by the government to close the “digital divide.” In February 2019, President Donald Trump unveiled the American Broadband Initiative aimed at bringing broadband to rural America. Earlier this year, the Federal Communications Commission committed $20.4 billion to the same end.

The very first contact tracing app powered by Google and Apple's exposure notification APIs has gone live in Switzerland.

As announced on Twitter by EPFL yesterday, 'SwissCovid' is now undertaking a large scale pilot, with hopes that it will pave the way for public availability by mid-June.

As of today, employees at @EPFL, @ETH_en, @vbs_ddps, and some hospitals and cantonal administrations can download the digital proximity tracing application #SwissCovid. This large-scale pilot paves the way for public availability by mid-June. https://t.co/E9hl43g8Ca #COVID19 #DP3T

In an announcement the institute stated:

Several thousand people in Switzerland can now download "SwissCovid," the official application for tracing contacts at risk of transmission of COVID-19 if they wish. "This is the first time that the operating system updates from Google and Apple enable its deployment and testing on such a large scale," says Professor Edouard Bugnion, Vice-President for Information Systems at EPFL. He was at the heart of discussions with Google and Apple to have them adopt the "DP3T" protocol led by the two Swiss Federal Institutes of Technology. Alfredo Sanchez, project manager, notes that "this gives great responsibility to the Swiss testers, as many other countries intend to adopt the same protocol later on."

One important footnote is that while the pilot is ongoing, the Swiss parliament will deliberate revisions to the law on epidemics. MPs must debate and approve the scheme before it is offered to the public, however recent research has suggested that as many as 70% of Swiss residents support the program.

This is the first large-scale testing of an app that uses Apple and Google's exposure notification technology. As per the two companies' stipulations, the operation is also decentralized:
​
SwissCovid operates in a "decentralized" way, which means that the operations that are essential from a privacy point of view are not carried out on a centralized server, but on each phone. The app uses Bluetooth to exchange and record the ephemeral proximity identifiers of other phones in the vicinity. These identifiers are kept on the phone unless a person is tested positive for COVID-19. In that case, their doctor will give them a single-use code that allows them to voluntarily share the ephemeral keys on their own phone that correspond to the days when the person was contagious. These keys are sent to a server managed by the Swiss administration.

Given the level of concern many users have had with Zoom’s security and privacy, the company has been hard at work during the first two weeks of April to bring better control to its video conferencing software. The first changes transformed the safety profile of using its service, albeit with additional overhead for hosts and people joining meetings. On April 8, Zoom’s CEO, Eric Yuan, told NPR, “When it comes to a conflict between usability and privacy and security, privacy and security [are] more important–even at the cost of multiple clicks.”

Here is a synopsis of the recent changes.

Passwords required. All free-tier accounts, free upgraded education accounts, and single-host paid accounts now need a password. It’s generated automatically and may be changed but cannot be removed. This blocks access by those who obtain the meeting ID but not the password, and it prevents access through bots trying to join randomly generated meeting IDs in the reasonable hope of connecting to a password-free session.

Meeting ID hidden. The meeting ID no longer appears in the title bar of Zoom apps to prevent it from appearing in screen captures posted on social media or elsewhere.

Waiting Room enabled. By default, the Waiting Room feature is now enabled for all accounts, even those that previously had the option turned off. The Waiting Room puts participants who attempt to join the meeting into a holding position. The host must admit them. It’s fussy, and if it’s unnecessary in your environment, you can override the default on a per-meeting or per-host basis.

Meeting locks. With a click of the new Security button, hosts can lock a meeting at any point to prevent new participants from being added to the Waiting Room or joining directly. Another click unlocks the meeting.

Name change prevention. Hosts can prevent participants from changing the name that appears when they join or request to join a meeting. Some people—both unwanted visitors and students who thought it was funny—were changing their names to derogatory or abusive forms during meetings.

Domain contacts visibility. Zoom no longer treats every user with the same domain in their email address as belonging to the same organization. Previously, anyone with a given address could view account information or add everyone to their contacts who had the same domain, excluding some significant ISPs and mail hosts, like Gmail and iCloud. That feature is now disabled for free tier and paid single-host accounts, and must be enabled on higher-tier paid accounts.
​
Traffic routed through China. The paths that data travels is a political, regulatory, and business question, not just a technical one. Citizen Lab’s report revealed that Zoom was routing some traffic that didn’t involve any participants in China through servers in that country. Zoom explained that it was an error in load balancing, which seemed plausible given the quick scaling of operations it needed to have. The company said it made permanent changes to prevent data passing through Chinese servers from outside the country. A new feature for paid users starts April 18, and those users will be able to select which of several regions data may pass through. Free users are locked to data centers in the region from which they subscribed. Apart from concerns about China, some people outside the United States don’t trust the National Security Agency or other US intelligence groups.

A company that makes internet-connected thermometers has followed the flu more closely than the C.D.C. can. Now the devices may be turning up cases of COVID-19.

A company that uses internet-connected thermometers to predict the spread of the flu says it is tracking the coronavirus in real-time – something that had been impossible, given the lack of testing for the disease.

Kinsa Healthhas sold or given away more than a million smart thermometers to households in which two million people reside, and thus can record fevers almost as soon as consumers experience them.

For the last few years, Kinsa’s interactive maps have accurately predicted the spread of flu around the United States about two weeks before the Centers for Disease Control and Prevention’s surveillance tool, the weekly FluView tracker.

The thermometer data “acts as an early warning system for illness spreading,” said Inder Singh, the company’s founder. The C.D.C.’s system lags because it relies on weekly reports from hundreds of doctors’ offices and hospital emergency rooms about what symptoms they are seeing in patients.

Company scientists are uniquely positioned to identify unusual clusters of fever because they have years of data for expected flu cases in each ZIP code. A sudden spike that far exceeds estimates for flu for a given date may well indicate the coronavirus has arrived.

Medical experts were enthusiastic about the possibility that smart thermometers could be used to track the virus in the United States. Having millions of data points allows Kinsa to produce daily maps showing which counties are seeing spiking fevers.

The most common symptoms of infection with the coronavirus is a fever – about 90% of patients suffer from it, according to the World Health Organization.

“This is very, very exciting,” said Dr. William Schaffner, a professor of preventive medicine at Vanderbilt University. “This is 21st-century disease surveillance, and we’ve been rooted in the mid-20th century with something very labor-intensive.”

Dr. Peter J. Hotez, dean of the National School of Tropical Medicine at Baylor College of Medicine in Houston, said: “If this tells you where there are new major clusters of fever, it tells you where to swoop in with your test kits.”

Kinsa’s latest map of fever spikes shows areas that are known to have many cases of COVID-19, the illness caused by the coronavirus. But the data also point to spots in Florida, Michigan, Arizona, and eastern Texas, where not as many cases have been reported.

Just last Saturday, Kinsa’s data indicated an unusual rise in fevers in South Florida, even though it was not known to be a COVID-19 epicenter. Within days, testing showed that South Florida had indeed become an epicenter.

Dr. Nirav Shah, a former New York State health commissioner who is an adviser to Kinsa, said real-time fever data “could speed up public health the way Twitter sped up the news cycle.”

Demand for Kinsa’s smart thermometers has skyrocketed since the coronavirus pandemic began, Mr. Singh said, and the company is now selling 10,000 a day, which is creating production problems but also multiplying the amount of data coming in each day.

The thermometers connect to a cellphone app that instantly transmits their readings to the company. Users can also enter other symptoms they feel. The app then gives them general advice on when to seek medical attention.
​
Because influenza usually produces higher, more protracted fevers than common colds do, the company’s software estimates which ZIP codes appear to be hit by flu rather than by other, milder cold viruses.

Apple’s new credit card has a curious security feature that will make it much more challenging to carry out credit card fraud.

The aptly-named Apple Card is a new credit card, built into your iPhone Wallet app, which the company says will help customers live a “healthier” financial lifestyle. The card is designed to replace your traditional credit card and give you perks, such as daily cash. Chief among the benefits is a range of security and privacy features, which Apple says – unlike traditional credit card providers – the company doesn’t know where a customer shopped, what they bought, or how much they paid.

But there’s one feature – a one-time unique dynamic security code – that will make it nearly impossible for anyone to use the credit card to make fraudulent purchases.

That three-digit card verification value – or a CVV – on the back of your credit card is usually your last line of defense if someone steals your credit card number, such as if your card is cloned or skimmed by a dodgy ATM or taken from a website through a phishing attack.

But rotating the security code will increase the difficulty for an attacker to use your card without your permission.

The idea of a dynamic credit card number first came about a few years ago with the Motion Code credit card concept, built by Oberthur Technologies, which included a randomly generating number built into a tiny display on the back of the card. The only downside is if someone steals your physical card.

Since then, other credit card makers – including Mastercard, the issuing payment provider for Apple Card – have worked to integrate biometric solutions instead. By enabling a fingerprint sensor on the card, powered by the card machine into which it is inserted, it was hoped that fraudulent purchases would be impossible. Other credit cards have worked to roll out biometric-powered credit cards. Again – a big letdown was online fraud, which still accounts for a vast proportion of fraud.

Apple Card seems to meld the two things: a virtual credit card with a rotating security code, protected by a biometric, like Touch ID or Face ID in newer devices. Better yet, the company’s debut physical titanium credit card won’t even have a credit card number.
​
Now, if someone wants to commit fraud, they need to steal your phone and your face or fingerprint.
Like other sensitive data – such as health, financial, and biometric data – any banking and credit card data is stored on the device’s security chip, known as the secure enclave.