4 ms·

An honest yet pointed question: what permissions does your bank's 2FA app request? My guess is, as a bank, they're doing the right thing. However, permissions o

An honest yet pointed question: what permissions does your bank's 2FA app request? My guess is, as a bank, they're doing the right thing. However, permissions overreach is a real issue that even "legitimate" apps are exploiting to vacuum as much user data as possible.

moviuro 5y ago
> My guess is, as a bank, they're doing the right thing Banks can and will do everything wrong. * https://reports.exodus-privacy.eu.org/en/reports/fr.creditagricole.androidapp/latest/ https://reports.exodus-privacy.eu.org/en/reports/fr.creditag... * https://reports.exodus-privacy.eu.org/en/reports/fr.lcl.android.customerarea/latest/ https://reports.exodus-privacy.eu.org/en/reports/fr.lcl.andr... * https://reports.exodus-privacy.eu.org/en/reports/com.caisseepargne.android.mobilebanking/latest/ https://reports.exodus-privacy.eu.org/en/reports/com.caissee... * https://reports.exodus-privacy.eu.org/en/reports/fr.banquepopulaire.cyberplus/latest/ https://reports.exodus-privacy.eu.org/en/reports/fr.banquepo... * https://reports.exodus-privacy.eu.org/en/reports/com.fullsix.android.labanquepostale.accountaccess/latest/ https://reports.exodus-privacy.eu.org/en/reports/com.fullsix...
- austincheney 5y ago
  What solution would you recommend? Strangely, those are all banks I have never heard of. My employer had no search results on that site. I guess they aren't doing everything wrong.
  - dollop43 5y ago
    Just use an open source app. Download all app from Fdroid for android.
  - Saris 5y ago
    Aegis installed via F-Droid is probably the safest option, as it's open source and verified by F-Droid before being listed.
matheusmoreira 5y ago
> My guess is, as a bank, they're doing the right thing. In my country, banks used to mandate use of a "security module". I decided to see what this thing was doing and caught it intercepting every single network connection.

moviuro 5y ago

> My guess is, as a bank, they're doing the right thing Banks can and will do everything wrong. * https://reports.exodus-privacy.eu.org/en/reports/fr.creditagricole.androidapp/latest/ https://reports.exodus-privacy.eu.org/en/reports/fr.creditag... * https://reports.exodus-privacy.eu.org/en/reports/fr.lcl.android.customerarea/latest/ https://reports.exodus-privacy.eu.org/en/reports/fr.lcl.andr... * https://reports.exodus-privacy.eu.org/en/reports/com.caisseepargne.android.mobilebanking/latest/ https://reports.exodus-privacy.eu.org/en/reports/com.caissee... * https://reports.exodus-privacy.eu.org/en/reports/fr.banquepopulaire.cyberplus/latest/ https://reports.exodus-privacy.eu.org/en/reports/fr.banquepo... * https://reports.exodus-privacy.eu.org/en/reports/com.fullsix.android.labanquepostale.accountaccess/latest/ https://reports.exodus-privacy.eu.org/en/reports/com.fullsix...

austincheney 5y ago
What solution would you recommend? Strangely, those are all banks I have never heard of. My employer had no search results on that site. I guess they aren't doing everything wrong.
- dollop43 5y ago
  Just use an open source app. Download all app from Fdroid for android.
- Saris 5y ago
  Aegis installed via F-Droid is probably the safest option, as it's open source and verified by F-Droid before being listed.

matheusmoreira 5y ago

> My guess is, as a bank, they're doing the right thing. In my country, banks used to mandate use of a "security module". I decided to see what this thing was doing and caught it intercepting every single network connection.