3 ms·

So then this is just an end run by Google around their own shitty vetting for their appstore... If the central tenet here is that people will be downloading fak

So then this is just an end run by Google around their own shitty vetting for their appstore... If the central tenet here is that people will be downloading fake apps to try to get people's login information at the bank, it its Google's responsibility to make sure those apps never make it into the app store. Chase also could require an authentication code from any Big3 Auth app or roll their own auth app that should be installed alongside the banking app, which will call down to it upon login.

c0pium 3y ago
> its Google's responsibility to make sure those apps never make it into the app store Good, we agree, they should take this action which helps them keep fraudulent apps out of their App Store. > Chase also could require an authentication code Chase does require that. It doesn’t help here, because you can obviously phish codes just as easily as passwords. The solution here is attestation, anything else is a hack that makes bad behavior much too easy.