5 ms·

I already use Linux with my bank and when I'm interacting with my government. And unlike on Android, the barrier of entry for me to write apps and set up quick

I already use Linux with my bank and when I'm interacting with my government. And unlike on Android, the barrier of entry for me to write apps and set up quick solutions to problems is much lower. I don't need to run my code on a completely separate environment with no overlap. Emulation is going to be easier. I don't need to install Eclipse or whatever the heck Android devs tolerate now. That's part of the point of using Linux -- not creating an ecosystem from scratch. Virtually all of my computing outside of my phone is already done on Linux devices, and the setup works for day-to-day computing. Support is good enough for me. What makes you think Pinephone going to have worse support than my current Linux desktop? My hope with Pinephone is that a decent influx of Linux phone users will improve the quality of desktop software on Linux as well, since it forces devs to stop ignoring touch screens and to start thinking about responsive design. Ideally, the desktop versions of many apps should scale on interfaces like this without needing to be rewritten. But regardless, I'm still not particularly worried that my bank website is going to stop working.

amelius 6y ago
To take one example: the interaction with your bank goes through a web-browser, I suppose? You probably need a special device for 2FA? In most bank apps, you can simply log in using a PIN-code and do things like check your balance, make small wire transfers, and make payments in stores through NFC. Doing these things in a web-browser on a mobile phone with a separate 2FA device is much more cumbersome. (I use Linux exclusively on the desktop so I know what you are talking about, but it just isn't going to work on a phone in the same way).
- fsflover 6y ago
  > the interaction with your bank goes through a web-browser, I suppose? Can also be done with Android app via Anbox: https://social.librem.one/@dos/105119691527269967 https://social.librem.one/@dos/105119691527269967
  - Mediterraneo10 6y ago
    If could be done for the guy in your linked example, he was lucky and you shouldn’t be giving people false hopes. More and more bank apps are requiring phones that can pass Safety Net, and Anbox won't.
- danShumway 6y ago
  :shrug: I don't have a bank app installed on my phone right now. And there are absolutely going to be Open Source 2FA apps being built for Pinephone, so I'm good there. Currently, I don't use a banking app because I don't trust my bank to have that level of access to my phone with a proprietary app, and because my bank's app isn't particularly good in the first place. So I'm not really losing out by using Pinephone. In fact, I might have more functionality after switching, since Android development is a mess and on a Linux platform I might be tempted to build something quickly for myself that periodically pulls down the CSV data from my bank and does a few things with it. I'm not saying that proprietary devs are going to start mass-building apps for this, I'm just saying that for a segment of the population, this may turn out not to be the problem you think it is. ---- Apps on my phone that I need replacements for: - NewPipe - Podcast app/music app - Maps - AndOTP - Signal (and/or Matrix) - Orgzly - Email - Good browser support - Maybe a few misc utilities, probably something I'm forgetting Do I have confidence that those apps or equivalents will be ported? Honestly, yes, I do. It would not take an insurmountable amount of work to build a Linux ecosystem that was more functional than my current phone setup.
  - linmob 6y ago
    Let me reply to that by listing existing apps listed on http://appl.ist http://appl.ist: - NewPipe > FreeTube, AudioTube - Podcast app/music app > GNOME Podcasts, GPodder/Lollypop, Elisa - Maps > PureMaps, GNOME Maps - AndOTP > Keysmith, GNOME Authenticator, Two-Factor-Keychain, Numberstation - Signal (and/or Matrix) > Axolotl / various, Nheko feels most complete currently - Orgzly > Emacs maybe? - Email > Geary (I still use Evolution though) - Good browser support > Angelfish, desktop Firefox has been adapted nicely, once Chromiums Wayland supports matures it will also be a viable option (it’s very fast, but has annoying issues with text input currently)
    - Mediterraneo10 6y ago
      It should be pointed out, however, that the mapping apps available on the PinePhone are little more than tech demos. Their feature set is vastly smaller than e.g. OSMAnd on Android. For me, even if the PinePhone took over my phone calls, Signal messenging, etc., I would still need to carry around an Android phone for decent maps.
cesarb 6y ago
> I already use Linux with my bank and when I'm interacting with my government. I also use Linux with my bank. All banks I know of in my country require you to install an invasive "security software" (warsaw), even when you're using the web browser; some also require the phone app to be used as a second factor (for instance, one bank generates a dynamically changing QR code after you enter your password; you have to open its phone app and scan that QR code, which the phone app uses to generate a number to be typed below the QR code). For the government, it's easier, you just have to install the ICP-Brasil root certificates (since they haven't been accepted yet by Mozilla).
- danShumway 6y ago
  That's terrifying, and I deeply sympathize, but it seems like a government problem more than an app ecosystem or market problem? It's not just that Linux isn't going to break the app store duopoly in your case, nobody is going to, because your government is effectively reinforcing that behavior. Forcing people to install root certificates on their devices is a problem on a whole 'nother level over just commercial incentives. I just don't see how any technology or market-based solution will solve that problem. What happens when the government starts deciding that its authentication software won't work on rooted devices? What happens when the bank decides they need contact/GPS/camera permissions on your phone for "security"? I mean, that's not an app ecosystem problem at that point, it's just full-fledged required malware from your bank. In the US (for all of the many, many faults with our trash-dump of a banking/federal ecosystem) at most I've only ever been asked to do 2FA using completely open standards, and the worst problem I've run into is that my bank's website won't load over some VPNs. I can even disable analytics on my bank's website and it'll still work. But getting support on a Linux phone OS for what sounds to me at first blush like malware and spyware isn't really the best solution to what you're describing. The problem isn't that the malware isn't available on Linux, it's that you're forced to install malware on any of your computers, including iOS/Android.
  - cesarb 6y ago
    I think you mixed two different things; what requires the authentication software is the banks, not the government. The government isn't forcing anyone to install the ICP-Brasil root certificates; if you don't, the government websites will just show as untrusted in the browser (since they're signed by one of the CAs which chain to the ICP-Brasil root), but other than that they should work the same. Things might be different if you are authenticating your identity to the government with a certificate stored on a smartcard or USB key, since these certificates are also signed by a CA which chains to the ICP-Brasil root; I don't know if adding the ICP-Brasil root to the browser is necessary to make that work. As for the banks, AFAIK the government doesn't mandate how they approach their online banking security; their use of that invasive "security software" is probably mostly path dependence at this point. It was very common to see computers infected with malware designed to steal online banking credentials from the browser, and that "security software" was supposed to block that kind of malware (for instance, by blocking the browser accessibility APIs whenever the user goes to an online banking site). Things are already better than in the past (that "security software" used to be Windows-only, for instance, so Linux users couldn't use online banking). And yeah, all the bank apps I have on my phone require contact/location/camera permissions (the camera permission is unavoidable since they have to be able to read the QR code for PIX payments, and boleto bancário barcodes), and for at least one of these apps, I strongly suspect it's using the location permission for security purposes (the location indicator always lights up whenever I log into that app). It wouldn't surprise me at all if it also rejected rooted devices.

amelius 6y ago

To take one example: the interaction with your bank goes through a web-browser, I suppose? You probably need a special device for 2FA? In most bank apps, you can simply log in using a PIN-code and do things like check your balance, make small wire transfers, and make payments in stores through NFC. Doing these things in a web-browser on a mobile phone with a separate 2FA device is much more cumbersome. (I use Linux exclusively on the desktop so I know what you are talking about, but it just isn't going to work on a phone in the same way).

fsflover 6y ago
> the interaction with your bank goes through a web-browser, I suppose? Can also be done with Android app via Anbox: https://social.librem.one/@dos/105119691527269967 https://social.librem.one/@dos/105119691527269967
- Mediterraneo10 6y ago
  If could be done for the guy in your linked example, he was lucky and you shouldn’t be giving people false hopes. More and more bank apps are requiring phones that can pass Safety Net, and Anbox won't.
danShumway 6y ago
:shrug: I don't have a bank app installed on my phone right now. And there are absolutely going to be Open Source 2FA apps being built for Pinephone, so I'm good there. Currently, I don't use a banking app because I don't trust my bank to have that level of access to my phone with a proprietary app, and because my bank's app isn't particularly good in the first place. So I'm not really losing out by using Pinephone. In fact, I might have more functionality after switching, since Android development is a mess and on a Linux platform I might be tempted to build something quickly for myself that periodically pulls down the CSV data from my bank and does a few things with it. I'm not saying that proprietary devs are going to start mass-building apps for this, I'm just saying that for a segment of the population, this may turn out not to be the problem you think it is. ---- Apps on my phone that I need replacements for: - NewPipe - Podcast app/music app - Maps - AndOTP - Signal (and/or Matrix) - Orgzly - Email - Good browser support - Maybe a few misc utilities, probably something I'm forgetting Do I have confidence that those apps or equivalents will be ported? Honestly, yes, I do. It would not take an insurmountable amount of work to build a Linux ecosystem that was more functional than my current phone setup.
- linmob 6y ago
  Let me reply to that by listing existing apps listed on http://appl.ist http://appl.ist: - NewPipe > FreeTube, AudioTube - Podcast app/music app > GNOME Podcasts, GPodder/Lollypop, Elisa - Maps > PureMaps, GNOME Maps - AndOTP > Keysmith, GNOME Authenticator, Two-Factor-Keychain, Numberstation - Signal (and/or Matrix) > Axolotl / various, Nheko feels most complete currently - Orgzly > Emacs maybe? - Email > Geary (I still use Evolution though) - Good browser support > Angelfish, desktop Firefox has been adapted nicely, once Chromiums Wayland supports matures it will also be a viable option (it’s very fast, but has annoying issues with text input currently)
  - Mediterraneo10 6y ago
    It should be pointed out, however, that the mapping apps available on the PinePhone are little more than tech demos. Their feature set is vastly smaller than e.g. OSMAnd on Android. For me, even if the PinePhone took over my phone calls, Signal messenging, etc., I would still need to carry around an Android phone for decent maps.

cesarb 6y ago

> I already use Linux with my bank and when I'm interacting with my government. I also use Linux with my bank. All banks I know of in my country require you to install an invasive "security software" (warsaw), even when you're using the web browser; some also require the phone app to be used as a second factor (for instance, one bank generates a dynamically changing QR code after you enter your password; you have to open its phone app and scan that QR code, which the phone app uses to generate a number to be typed below the QR code). For the government, it's easier, you just have to install the ICP-Brasil root certificates (since they haven't been accepted yet by Mozilla).

danShumway 6y ago
That's terrifying, and I deeply sympathize, but it seems like a government problem more than an app ecosystem or market problem? It's not just that Linux isn't going to break the app store duopoly in your case, nobody is going to, because your government is effectively reinforcing that behavior. Forcing people to install root certificates on their devices is a problem on a whole 'nother level over just commercial incentives. I just don't see how any technology or market-based solution will solve that problem. What happens when the government starts deciding that its authentication software won't work on rooted devices? What happens when the bank decides they need contact/GPS/camera permissions on your phone for "security"? I mean, that's not an app ecosystem problem at that point, it's just full-fledged required malware from your bank. In the US (for all of the many, many faults with our trash-dump of a banking/federal ecosystem) at most I've only ever been asked to do 2FA using completely open standards, and the worst problem I've run into is that my bank's website won't load over some VPNs. I can even disable analytics on my bank's website and it'll still work. But getting support on a Linux phone OS for what sounds to me at first blush like malware and spyware isn't really the best solution to what you're describing. The problem isn't that the malware isn't available on Linux, it's that you're forced to install malware on any of your computers, including iOS/Android.
- cesarb 6y ago
  I think you mixed two different things; what requires the authentication software is the banks, not the government. The government isn't forcing anyone to install the ICP-Brasil root certificates; if you don't, the government websites will just show as untrusted in the browser (since they're signed by one of the CAs which chain to the ICP-Brasil root), but other than that they should work the same. Things might be different if you are authenticating your identity to the government with a certificate stored on a smartcard or USB key, since these certificates are also signed by a CA which chains to the ICP-Brasil root; I don't know if adding the ICP-Brasil root to the browser is necessary to make that work. As for the banks, AFAIK the government doesn't mandate how they approach their online banking security; their use of that invasive "security software" is probably mostly path dependence at this point. It was very common to see computers infected with malware designed to steal online banking credentials from the browser, and that "security software" was supposed to block that kind of malware (for instance, by blocking the browser accessibility APIs whenever the user goes to an online banking site). Things are already better than in the past (that "security software" used to be Windows-only, for instance, so Linux users couldn't use online banking). And yeah, all the bank apps I have on my phone require contact/location/camera permissions (the camera permission is unavoidable since they have to be able to read the QR code for PIX payments, and boleto bancário barcodes), and for at least one of these apps, I strongly suspect it's using the location permission for security purposes (the location indicator always lights up whenever I log into that app). It wouldn't surprise me at all if it also rejected rooted devices.