5 ms·
I want to agree with you, but I'm not going to use Cydia on my phone for my banking apps. At least the Apple app store makes some effort (liability is the wrong
by lemonspat 6y ago
I want to agree with you, but I'm not going to use Cydia on my phone for my banking apps. At least the Apple app store makes some effort (liability is the wrong word) to make sure that my banking apps aren't fraudulent or scammer apps.
I have no such trust when downloading apps from alternate places
- v0x 6y agoAnd that's great - the App Store serves a hugely useful purpose - but you shouldn't need to rely on an iPhone vulnerability and a jailbreak to opt out.
- zepto 6y agoYou don’t have to. You can get your banking app on Android.
- NotPavlovsDog 6y agoBut why would you have concerns downloading a banking app directly from your bank? You have trusted them with your money, after all... With apple, you can't install and run software even from sources you trust, outside of apple. Apple policy could be described as an insult to the scientific principles that led to computing, let alone user rights to run software on devices they own (somewhat established in courts). "In the famous Apple v. Samsung lawsuit, Apple even claimed ownership of geometric shapes such as rectangles with rounded corners", cited from The crisis of intellectual monopoly capitalism, Ugo Pagano
- zepto 6y agoHow would you know you were getting it directly from your bank?
- kungito 6y agoYou have to do phone activation through in person or via an existing bank app to activate your phone app in Europe
- zepto 6y agoWhat stops a malicious app from spoofing that?
- arthurcolle 6y agoTLS?
- zepto 6y agoHow? A spoofed app would have the client certificate taken from the real app.
- arthurcolle 6y agobut it wouldn't have the private key associated with the certificate
- zepto 6y agoClient cert - not server.
- hhggfdss 6y agoNothing but if your bank delivered the app to you over SSL signed with their certificate then you know it's not malicious. Add in a checksum if you feel extra paranoid. These are old and solved problems. If they were real problems there would be no online banking at all.
- Nullabillity 6y agoBecause presumably you'd be downloading it from your bank's website?
- zepto 6y agoWhat if that were spoofed? How about if there was a supply chain attack on the bank’s software?
- loa_in_ 6y agoIf there was a supply chain attack, Apple wouldn't help you either as they get the app from original developers as usual.
- sellyme 6y agoThen I'm already going to have some pretty major problems whether or not I install an app.
- swiley 6y agoThen get rid of the iPhone and use something like degoogled android with fdroid or debian on a pinephone.