3 ms·
That sounds oddly intense for a bank app. I understand them not wanting a rooted phone and a few of the measures but everything sounds quite interesting/heavy.
by user_7832 3y ago
That sounds oddly intense for a bank app. I understand them not wanting a rooted phone and a few of the measures but everything sounds quite interesting/heavy. Would you be okay saying which bank this is or which country you are in?
I still wonder if with something like a root hiding thing like grapheneOS’s software this could be “overcome”.
- patrakov 3y agoMetrobank (for business customers) in the Philippines. Regular customers of the same bank have a different app with less strictness. And yes, root hiding works on a test phone (which has a copy of the app not linked to my bank account), and the TOTP seed can be extracted from memory using Fridump and imported into a different app. But obviously, this won't pass the "manual inspection of the phone" step, because they will likely find the renamed Magisk app.
- user_7832 3y agoThanks, that's very interesting that a business account in the Philippines has so much security. I think if a bank tried that here in Europe (inspecting phones) folks wouldn't like the privacy intrusion. Though, I think apps can be hidden from the launcher (and perhaps also the settings app with some more effort)?