3 ms·
What's stopping me from using a browser to log in to my bank? Assuming my bank is one of the ones that requires you to lock down sideloading (they aren't, but i
by tfrancisl 2mo ago
What's stopping me from using a browser to log in to my bank? Assuming my bank is one of the ones that requires you to lock down sideloading (they aren't, but i know many are).
- Alpha3031 2mo agoSome banks are app only and/or build MFA functionality into their apps.
- thesuitonym 2mo agoThat would be a hell naw from me.
- wseqyrku 2mo agoYou know the web is also bits and bytes right? Someone who has a say should fix it so banks can do whatever they need right in the browser.
- Alpha3031 2mo agoI am not a bank so my being aware of things is not going to change much.
- inigyou 2mo agoThe 2FA code you need to get from the phone app to log in on a desktop. It isn't 2005 any more.
- stvltvs 2mo agoHighly location dependent. This is more true in Europe than in America.
- Aachen 2mo agoApparently I live in 2005 then? I do 2FA with the same chip+pin method that I use to pay in the store. Works in any browser
- patall 2mo agoMaybe that is possible in Germany. It is impossible here in Sweden. Or in other words: of course you can have mobile bankid without a smartphone, just use a tablet computer ;)
- fsflover 2mo ago[flagged]
- patall 2mo ago@fsflover: and my mobile phone provider. And my insurance. And my eletricity provider. And my housing associations customer portal. Getting doctors appointments. Mortgage. Union. National retirement savings account. Some of these may have some alternative left, but far too many you will be left out. Well, I can buy a train ticket without it, so I could still leave.
- epihelix 2mo agoDo you mean to say that all these services require strong device integrity to function in Sweden?? In Australia, no local app that I'm aware of (banking, finance, government, medical) requires any form of device integrity - otherwise I couldn't use them. The only exception I've encountered is Google Wallet. I wonder why there would be such a difference in policy between countries, not only in government but across the private sector? This doesn't make any sense to me. If anything, I'd expect Sweden to have a more sensible, left wing attitude than Oz.
- patall 2mo agoThe comment that I was replying to was suggesting (to me) to live in sweden without mobile bankid (centralized 'banking' 2FA app on smartphone). I have here listed services that require said mobile bankid. Mobile bankid works for me and others on graphene os, but would likely not work on an arbitrary linux smartphone.
- jonathanstrange 2mo agoRight, 2FA. My bank wants me to log in to my phone app and then sends an SMS to the same phone to confirm the app transaction. It's super-secure.
- tcfhgj 2mo agomy bank (and others) doesn't require the 2f to be a smartphone
- Yeroc 2mo agoThe websites don't have feature parity with the apps these days. Things like being able to deposit a cheque aren't available among other things.
- lopis 2mo agoSome older banks do have more features in their website than their app. It's usually the ones with the worse, most outdated UIs and almost useless mobile apps. After years of using several mobile-first neo-banks, I switched to a traditional bank and boy, was I not ready for the trip back in time.
- monk_grilla 2mo agoYep. Everyone here is talking about "just use the website" but ANZ Plus, a "neo-bank" which is increasingly popular here in Australia, literally has no web portal. Its app is really nice and native, though. That, along with a decent interest rate, is why I use it.
- encom 2mo ago>deposit a cheque That would be inconvenient if this was 1985.
- saidinesh5 2mo agoThe bank website typically needs the app to enable two factor authentication in a lot of places. For eg. There's no browser based alternative to make UPI payments that i know of.
- dotancohen 2mo agoHow about for clients with no smartphones?
- saidinesh5 2mo agoYou're basically out of luck. This is happening all over the world these days with various government services. It's not just for clients with no smart phones. It's also clients who activate developer mode on their smartphone etc... clients who use VPN. Clients who run AdBlocker. Clients who use Firefox. There needs to be a severe push back against this. Things have gotten so crazy that the homeless here are walking around with QR codes printed out when begging for money. I'm guessing they're a network of people who share the same smartphone/payment method..
- dotancohen 2mo agoI am so grateful for the large religious population in my country who eschew the smartphone. I suppose because of them every back and government service is available to all citizens.
- inigyou 2mo agoThey're 50/50 to either make it work or fire you as a customer - you may as well try.
- terribleperson 2mo agoI had to replace a credit card yesterday. Part of the default flow involves the call center sending a notification to your app. When I told them my android version was too old, it took them twenty minutes to find out they could instead send a text message. That text message sends you to a photo-and-id verification service, but that's another issue. Soon, there won't even be an alternative flow. There are a lot of places where there already isn't.
- georgeecollins 2mo agoAre you sure? This seems like a forum with a lot of early adopters and a lot of late adopters still use browsers, email, text messages. Like, let me guess that your credit cars isn't capitol one. Not that it should be, but that would be more "normie".
- owaislone 2mo agoNothing is stopping you. You're free to use a desktop web app that either doesn't work or is terribly slow or has limited features on a mobile web browser. I'd love it if all apps were PWAs but that is not the case.
- georgeecollins 2mo agoMy broker has a much more fully featured web app then it does on iOS or Android. You can do things in a browser that the phone apps will send you to a browser to do. BofA is just as good of a web app. Maybe people are just used to using their phones?
- georgeecollins 2mo agoLooking down the thread I am also thinking maybe this is a Europe thing? I am usa.
- fsflover 2mo agohttps://news.ycombinator.com/item?id=49363246 https://news.ycombinator.com/item?id=49363246
- limagnolia 2mo agoCan you deposit checks from the webapp? That is the feature most often missing in banking webapps. It isn't something I need often, fortunately.
- justsomehnguy 2mo agoThe bank itself. They want to see where are you, what you do and snoop on anything they can about you. Having a spywa^W sorry, bank app is the best way to do that. Source: my bank which recently 'upgraded' a browser version to a glorified SPA which even renders as a vertical oriented app on a landscape 4K monitor.
- thesuitonym 2mo agoSounds like it's time for a new bank.
- TFNA 2mo agoIn many countries, all major local banks require their phone app as the second factor to log in to the browser version of their online banking. Sometimes functionality is removed from the browser version and made available only in the phone app.
- DANmode 2mo agoName five.
- catlikesshrimp 2mo agoBAC in Central Americal https://www.baccredomatic.com https://www.baccredomatic.com
- DANmode 2mo agoIf you bank with them: have you contacted them? This is a social issue - not a technical one.
- drnick1 2mo ago"Many" is doing a lot of work here. A more accurate statement would be that some banks in some countries require invasive apps, but fortunately it isn't the case everywhere (yet).
- renehsz 2mo agoThis is a huge problem in EU countries! The relevant regulations are Commission Delegated Regulation (EU) 2018/389 and the earlier Directive (EU) 2015/2366. While these laws are deliberately vague when it comes to specific technologies, they do require at least two independent factors from different categories, such as knowledge (password) and possession (phone). That, in and of itself, wouldn't be a problem. The way most banks implement it, however, is by giving you two choices: 1. You use their mobile app (which likely requires device attestation and Google Play Services, so won't work on a plain LineageOS install) 2. You use their CardTAN device, which is extremely inconvenient to always carry around. Sure, we nerds might argue they should just let us use our Yubikeys or regular old TOTP, but pretty much no bank implements that. (Why? Your guess is as good as mine.) Personally, I had to buy a second stock Samsung phone just for banking apps. And yes, there are still alternatives (only very very few though), but no, none of them are convenient, for various unrelated reasons. I wouldn't be surprised if this continues to spread to the US too, under the sneaky disguise of "security".
- gf000 2mo agoWell, it's kinda hard to scan a QR code displayed on your screen when the camera is attached to its back (semi-joking)
- cesarb 2mo ago> What's stopping me from using a browser to log in to my bank? The "security module" they require you to install on your computer. In the past, when browsers had plugins, this was a browser plugin; nowadays, it's an always-on service (running as root) which exposes a local HTTP server which the bank site connects to to validate your computer. For an example from a major bank in this country (the same "security module" is used by several banks in this country), https://seg.bb.com.br/home.html https://seg.bb.com.br/home.html is the diagnostic page for that "security module" (the FAQ page there has links to the installers).