luisbebop

The same question here. Anyone can develop and 3rd-party app to capture the PIN on the same screen from the payment app.

Afaik you should have PA-DSS to your app running on top of the Android OS that btw is not PCI. Just PA-DSS to your cloud services considering the architecture you are proposing is not enough. PCI-PTS to your hardware is another problem you are going to face in your certification because you are using a touchscreen 'pinpad'.

This device is insecure. It is going to take a long time to get the PCI/EMV certifications. Besides that how do you handle the certification of new applications running side by side with your payment application? Everytime you deploy a new application you should re certificate the entire stack, by the PCI standards. Nice concept, but you have a long road ahead before competing with VeriFone, Ingenico, PAX, Miura shuttle and others.

You are not PA-DSS or PCI certified. Where are the links to your letters of approval?

Awesome work, congratulations!

Yes, it is. I'm a serial entrepreneur who became a Yoga professor last year I can say that the author is totally equivocated in some points. He is judging something that isn't Yoga.

"Yoga removed from its spiritual context is just a kitschy low grade thing that may hurt you while taking your money."

As I yoga professor and a software developer I can say your definition is perfect.

awesome. congratulations guys. nice job! you are defying the status quo about some frameworks with numbers instead of ego talks.

amazing work man! I was thinking in creating something like that but with mruby. Lua is a good option too. It is a perfect fit to use with Angular.js

amazing. simple and efficient. better than json.