5 ms·

Add to that Island[1] which unlocks work profiles on phoned where the manufacturer didn't. (And is an easy way to hide apps from other apps without rooting. Thi

Add to that Island[1] which unlocks work profiles on phoned where the manufacturer didn't. (And is an easy way to hide apps from other apps without rooting. This is required for some baking apps throwing a tantrum if you use your phone). Also Ambient Music Mod[2] which gets you constant low power background music recognition a la Pixel on non pixels. [1] https://gitlab.com/secure-system/Insular https://gitlab.com/secure-system/Insular [2] https://github.com/KieronQuinn/AmbientMusicMod https://github.com/KieronQuinn/AmbientMusicMod

JadeNB 2y ago
> This is required for some baking apps throwing a tantrum if you use your phone. Is this a common behavior? Do you know why?
- svieira 2y ago
  My suspicion is that these banking apps are running root detection code that look for the presence of certain other apps that signal "rootedness". The stated reason is always "we don't want malware being able to steal your account information". The non-stated reason is often "it makes our threat modeling easier if we can rely on the OS' defenses existing and working so we assumed. As a consequence of that assumption we are not entirely sure that what we are doing is safe from ordinary adversarial behavior on a device without these guardrails. So we don't want to run in such an environment and find out that our concerns were justified".
  - JadeNB 2y ago
    Thank you; that makes sense. The original quote referred to "baking apps," and it honestly didn't occur to me that it was a typo!
- pohuing 2y ago
  It might be. The library my banking app uses is called Promon Shield. It was broken in 2018 as part of this paper: https://obfuscator.re/nomorp-paper-dimva2018.pdf https://obfuscator.re/nomorp-paper-dimva2018.pdf > Promon Shield protects most of the banking apps on the German market. As of April 23, 2018, four out of the top ten financial apps in Germany make use of Promon’s solution. I'm switching banks now to find one that lets me use my non rooted phone in peace. As for why? I'm not sure. My guess is to prevent clueless people running their banking app with malware installed. preventing roots might just be a side-effect.
- deleted 2y ago
  [deleted]

JadeNB 2y ago

> This is required for some baking apps throwing a tantrum if you use your phone. Is this a common behavior? Do you know why?

svieira 2y ago
My suspicion is that these banking apps are running root detection code that look for the presence of certain other apps that signal "rootedness". The stated reason is always "we don't want malware being able to steal your account information". The non-stated reason is often "it makes our threat modeling easier if we can rely on the OS' defenses existing and working so we assumed. As a consequence of that assumption we are not entirely sure that what we are doing is safe from ordinary adversarial behavior on a device without these guardrails. So we don't want to run in such an environment and find out that our concerns were justified".
- JadeNB 2y ago
  Thank you; that makes sense. The original quote referred to "baking apps," and it honestly didn't occur to me that it was a typo!
pohuing 2y ago
It might be. The library my banking app uses is called Promon Shield. It was broken in 2018 as part of this paper: https://obfuscator.re/nomorp-paper-dimva2018.pdf https://obfuscator.re/nomorp-paper-dimva2018.pdf > Promon Shield protects most of the banking apps on the German market. As of April 23, 2018, four out of the top ten financial apps in Germany make use of Promon’s solution. I'm switching banks now to find one that lets me use my non rooted phone in peace. As for why? I'm not sure. My guess is to prevent clueless people running their banking app with malware installed. preventing roots might just be a side-effect.
deleted 2y ago
[deleted]