6 ms·

Problem is this requires turning off protection for unknown origin apks and these days many banking apps etc stop working once you do that. Could be useful for

Problem is this requires turning off protection for unknown origin apks and these days many banking apps etc stop working once you do that. Could be useful for a spare phone for secure but non critical work.

vekatimest 2y ago
I thought that was just for unlocked bootloaders, I've never encountered issues having sideloading enabled.
- kopirgan 2y ago
  Depends on where you are https://www.straitstimes.com/singapore/uob-dbs-introduce-new-security-features-on-banking-apps-to-protect-customers https://www.straitstimes.com/singapore/uob-dbs-introduce-new...
  - deleted 2y ago
    [deleted]
  - Y_Y 2y ago
    Weird. I've experienced the issue with various apps getting upset when another one is displaying over it. I like to have a little YouTube video playing in a popout and some buttons will refuse to press when this is present. I can't imagine this plays well will magnifiers or other assistive tech, but I understand their worry that a malicious developer could contrive to make you click a wrong button by covering the relevant context. As for getting upset about sharing a phone with unapproved apps, I think this is a failure of sandboxing. The app should see as much of the phone as I want it to and no more.
    - kopirgan 2y ago
      Really don't know how it works. There are many reports of people just clicking one link and the entire phone gets taken over, bank accounts drained. These days banks have KYC and should know who finally gets the money. Even across borders except perhaps in North Korea etc. for those countries that don't co-operate entire SWIFT system must be blocked. But for some reason they try other things, blame users but never claw back
      - Y_Y 2y ago
        Sadly this blame-shifting isn't even new. https://www.youtube.com/watch?v=CS9ptA3Ya9E https://www.youtube.com/watch?v=CS9ptA3Ya9E
- fc417fc802 2y ago
  Weirdly enough I've yet to encounter a "major" app that objected to LineageOS, microG, or an unlocked bootloader. I'm sure they exist but it seems at least some of the big players in the US aren't so unreasonable about it. From a security perspective it makes sense. If an app actively abuses such information it would be easy enough to hide it in a future build. The only way around that is an attestation scheme such as SafetyNet.
genewitch 2y ago
Okay, what are all of you doing on these banking apps? I've never used one. My interaction with my bank is nearly nonexistent. Is this like, to send money, zelle, CashApp sort of things you all keep talking about? Can't you just use the browser on your phone to interact with the bank? The browser doesn't know its rooted, does it? You could set a clock by the "but my banking apps" every time Firefox or F-Droid or Sideloading comes up.
- p0w3n3d 2y ago
  We sell them our asses, don't you? But seriously, I have both - other sources AND banking apps on my phone.
- oguz-ismail 2y ago
  > what are all of you doing on these banking apps? I don't carry a wallet, my banking app supports NFC payments.
  - notpushkin 2y ago
    There’s also Google Wallet, née Google Pay, née Google Wallet. It doesn’t like rooted devices either, but seems to be okay with apps installed from third party stores.
    - thaumasiotes 2y ago
      > There’s also Google Wallet, née Google Pay, née Google Wallet. I'm pretty sure you can only be born once. I guess it could be "Google Wallet, né Google Wallet, rené Google Pay".
      - Y_Y 2y ago
        > I'm pretty sure you can only be born once. Speak for yourself! Google's products are eternally trying to escape Samsara through a product cycle of death and (sometimes) rebirth.
- 2y ago
xbmcuser 2y ago
Not true for any banking app I use.
- notpushkin 2y ago
  Same here. (Of course, this could be because we just don’t use banks that try to pull this bullshit.)
nopakos 2y ago
My banking app stopped working when I installed an app with "root" in the name, without actually having a rooted phone. So the 3dparty component doing the "security" check for the banking apps is a little overzealous.
- kopirgan 2y ago
  They could be outsourcing the thing to some external agency so they can cover their behind

vekatimest 2y ago

I thought that was just for unlocked bootloaders, I've never encountered issues having sideloading enabled.

kopirgan 2y ago
Depends on where you are https://www.straitstimes.com/singapore/uob-dbs-introduce-new-security-features-on-banking-apps-to-protect-customers https://www.straitstimes.com/singapore/uob-dbs-introduce-new...
- deleted 2y ago
  [deleted]
- Y_Y 2y ago
  Weird. I've experienced the issue with various apps getting upset when another one is displaying over it. I like to have a little YouTube video playing in a popout and some buttons will refuse to press when this is present. I can't imagine this plays well will magnifiers or other assistive tech, but I understand their worry that a malicious developer could contrive to make you click a wrong button by covering the relevant context. As for getting upset about sharing a phone with unapproved apps, I think this is a failure of sandboxing. The app should see as much of the phone as I want it to and no more.
  - kopirgan 2y ago
    Really don't know how it works. There are many reports of people just clicking one link and the entire phone gets taken over, bank accounts drained. These days banks have KYC and should know who finally gets the money. Even across borders except perhaps in North Korea etc. for those countries that don't co-operate entire SWIFT system must be blocked. But for some reason they try other things, blame users but never claw back
    - Y_Y 2y ago
      Sadly this blame-shifting isn't even new. https://www.youtube.com/watch?v=CS9ptA3Ya9E https://www.youtube.com/watch?v=CS9ptA3Ya9E
fc417fc802 2y ago
Weirdly enough I've yet to encounter a "major" app that objected to LineageOS, microG, or an unlocked bootloader. I'm sure they exist but it seems at least some of the big players in the US aren't so unreasonable about it. From a security perspective it makes sense. If an app actively abuses such information it would be easy enough to hide it in a future build. The only way around that is an attestation scheme such as SafetyNet.

genewitch 2y ago

Okay, what are all of you doing on these banking apps? I've never used one. My interaction with my bank is nearly nonexistent. Is this like, to send money, zelle, CashApp sort of things you all keep talking about? Can't you just use the browser on your phone to interact with the bank? The browser doesn't know its rooted, does it? You could set a clock by the "but my banking apps" every time Firefox or F-Droid or Sideloading comes up.

p0w3n3d 2y ago
We sell them our asses, don't you? But seriously, I have both - other sources AND banking apps on my phone.
oguz-ismail 2y ago
> what are all of you doing on these banking apps? I don't carry a wallet, my banking app supports NFC payments.
- notpushkin 2y ago
  There’s also Google Wallet, née Google Pay, née Google Wallet. It doesn’t like rooted devices either, but seems to be okay with apps installed from third party stores.
  - thaumasiotes 2y ago
    > There’s also Google Wallet, née Google Pay, née Google Wallet. I'm pretty sure you can only be born once. I guess it could be "Google Wallet, né Google Wallet, rené Google Pay".
    - Y_Y 2y ago
      > I'm pretty sure you can only be born once. Speak for yourself! Google's products are eternally trying to escape Samsara through a product cycle of death and (sometimes) rebirth.
2y ago

xbmcuser 2y ago

Not true for any banking app I use.

notpushkin 2y ago
Same here. (Of course, this could be because we just don’t use banks that try to pull this bullshit.)

nopakos 2y ago

My banking app stopped working when I installed an app with "root" in the name, without actually having a rooted phone. So the 3dparty component doing the "security" check for the banking apps is a little overzealous.

kopirgan 2y ago
They could be outsourcing the thing to some external agency so they can cover their behind