| ▲ | akagusu 14 hours ago |
| Linux phones are useless for common people until they can run government and bank apps. |
|
| ▲ | debo_ 14 hours ago | parent | next [-] |
| In giant font at the top of the linked post: > apparently it needs to be said that I am not suggesting you switch to Linux on your phone today; just that development needs to accelerate. Please don’t be one of the 34 people that replied to tell me Linux is not ready. |
| |
| ▲ | akagusu 14 hours ago | parent | next [-] | | Linux is ready, what is not ready is the ecosystem. | | |
| ▲ | nextos 14 hours ago | parent | next [-] | | SailfishOS is quite polished, and there's an Android emulation API. Lots of common applications, including many banking ones, run without a problem. It's a chicken-egg issue. The last 10% of polish won't be done till a critical mass of users adopt the platform, and vice versa. | | |
| ▲ | IlikeKitties 13 hours ago | parent [-] | | >SailfishOS is quite polished, and there's an Android emulation API. Lots of common applications, including many banking ones, run without a problem. Remote Attestation and the Play Integrity API will soon make that stop. |
| |
| ▲ | jancsika 9 hours ago | parent | prev | next [-] | | Power management and cameras are working and stable on (non-Android) Linux phones? Which ones? | | |
| ▲ | fsflover 2 hours ago | parent [-] | | Librem 5 is my daily driver. The camera is not amazing, but it works fine. The battery can last one day just fine with a non-heavy use. And you can replace the battery on the go. |
| |
| ▲ | olivia-banks 14 hours ago | parent | prev [-] | | Exactly. The kernel more or less doesn't matter, it's "the stuff on top." | | |
| ▲ | akagusu 14 hours ago | parent | next [-] | | Unfortunately tech people don't understand this. Common people don't care about the OS, they care about apps. | | |
| ▲ | shaky-carrousel 8 hours ago | parent | next [-] | | I smell a "no true Scottman" here. Because people always say "common people do what I say" and when someone says "hey, I am common people and I disagree", the same people usually answer "well, then you're not common _enough_". Which is a huge fallacy. | | |
| ▲ | akagusu 3 hours ago | parent [-] | | > Common people don't care about the OS, they care about apps. My statement is based on 25 year as an IT professional where I migrated people and businesses from Windows to Linux, from iOS to Android, from old Unixes to Windows/Linux and the list goes on. Just give to people the apps they need or want and the rest is easily managed. |
| |
| ▲ | jay_kyburz 12 hours ago | parent | prev [-] | | Some tech people don't care what common people want, they just want a cool phone for themselves. |
| |
| ▲ | 14 hours ago | parent | prev [-] | | [deleted] |
|
| |
| ▲ | haspok 9 hours ago | parent | prev [-] | | > Linux is not ready OK, but what steps are being made to make it ready? How do you solve the issue of many apps not accepting rooted Androids (and very rightly so)? I mean, Linux distros even struggle with Secure Boot on a normal PC - which is a far easier problem to solve... | | |
| ▲ | Hackbraten 9 hours ago | parent [-] | | Reverse engineering those government apps and writing native FOSS replacements would be a start. |
|
|
|
| ▲ | zaik 14 hours ago | parent | prev | next [-] |
| I absolutely hate that government and bank apps are only available on the Play Store. You are legally required to have a Google account and accept their ToS to use them. I am aware of Aurora, but some banking apps check their origin and refuse to run if not downloaded from the Play Store. |
| |
| ▲ | _heimdall 14 hours ago | parent | next [-] | | I had to deal with this for government apps specifically related to immigration. I don't mind banks requiring it, I don't have to use that bank. I do mind governments requiring it if my only recourse is having to leave the country entirely. | | |
| ▲ | bakugo 14 hours ago | parent [-] | | > I don't mind banks requiring it, I don't have to use that bank. What if all banks require it? | | |
| ▲ | _heimdall 14 hours ago | parent [-] | | Banks aren't required. Its ridiculously inconvenient today to not have a bank account, but you aren't required to have one. | | |
| ▲ | Freak_NL 6 hours ago | parent | next [-] | | They are required for just about everyone in a lot of countries. In the Netherlands a bank account is actually a right¹, and as far as the tax authority is concerned, required. 1: https://www.belastingdienst.nl/wps/wcm/connect/nl/intermedia... | |
| ▲ | ykonstant 10 hours ago | parent | prev | next [-] | | They are required for salary payments in my country. | |
| ▲ | Dylan16807 13 hours ago | parent | prev | next [-] | | You should still be upset about it. | | |
| ▲ | _heimdall 12 hours ago | parent [-] | | What does being upset about it solve? Companies can choose what product to offer and what customers to serve. I can choose what products I'm willing to spend my money and time on. My problem is when I am compelled to use something despite my opposition to it, such as the immigration app I mentioned being force to use under threat of being kicked out of the country. |
| |
| ▲ | type0 6 hours ago | parent | prev | next [-] | | So so, housing isn't required and no one requires you to buy food either | |
| ▲ | junaru 7 hours ago | parent | prev [-] | | Cash salaries are banned in some European countries. You can't have any income without a bank account. Welcome to the dystopian future, enjoy your stay. |
|
|
| |
| ▲ | j45 11 hours ago | parent | prev [-] | | Do they not have websites to login with? | | |
| ▲ | pndy 9 hours ago | parent | next [-] | | IIRC Payment Services Directive aka PSD2 in EU for banking sector mandated verification of users and transaction and one of such ways is verification through mobile app. When I login to my bank on desktop, after passing thru standard flow of login+password (plus silly "pick the avatar you once selected placed at random on this grid") page shows a modal to approve once, approve and add to trusted devices or log out (which never works on dynamic IP). Then I need to approve in app with secondary PIN aka "mobile password" in my bank terminology. Operations on both desktop and within app require that secondary PIN; transactions up to a specified limit do not but mobile payments done with temporary 6-digit codes need a confirm | |
| ▲ | goda90 11 hours ago | parent | prev [-] | | Some force 2fa with their app only. |
|
|
|
| ▲ | anticorporate 14 hours ago | parent | prev | next [-] |
| I've heard this argument before and yet I've never understood it. What government apps do people run? Why do you need to access your bank account on your phone? Is this some payments model that's just not common in my country where we still use physical credit cards for everything? |
| |
| ▲ | MostlyStable 14 hours ago | parent | next [-] | | My bank doesn't yet require the mobile app (quite), but all interactions are significantly more annoying without the app. My 2FA options all require a phone, either for the insecure method of texting me the code, or else an app-only option (they don't allow generic 2FA apps, but instead require a specific app, that almost definitely won't exist for a linux phone). Even verifying my identity on the phone is better with the app (the app generates a code that they just accept, it can be done without but it's slower and more inconvenient). So no, my everyday interactions don't require the phone app. But any interaction that is novel enough to require direct communication with the bank has been rendered annoying without the phone app. I'm someone for whom I'd probably be willing to deal with all these inconveniences to make my statement about ownership over my hardware and software, but I doubt that very many average consumers would. | |
| ▲ | fian 14 hours ago | parent | prev | next [-] | | I work for a bank. There is a strategic focus on the mobile banking app over the web app. Younger generations are doing everything through their phones. Including applying for home loans. Many banks are moving towards being digital only as contactless payments means people are using cash a lot less to the point that physical bank branches don't make sense anymore. | |
| ▲ | _heimdall 12 hours ago | parent | prev | next [-] | | I had to use government apps as part of their immigration process, the apps were only available in the official app stores. If I remember right they had am all for immigration services, though I know for sure they had a digital ID app that was absolutely required. The major banks in that country also required apps from official app stores, though I don't think I was technically required to have a bank account. I was in the country under a program based on owning my own consulting business. I did have to prove financials to the government as part of that, but maybe there was a way I could have technically done that without a bank account which required a mobile app. | |
| ▲ | Telaneo 13 hours ago | parent | prev | next [-] | | > What government apps do people run? Public transport ticket app, government ID app, drivers licence app. I do believe all of these specific examples run fine on rooted Android without too much hassle (unsure about the second one), so they should be emulatable or whatever on a Linux phone, but that assumes that experience holds up decently well, which I would be surprised if it did for apps like this. > Why do you need to access your bank account on your phone? Because the app is a whole lot better than the web interfaces my previous banks had. Plus the added convenience. I'd prefer that the web interface was just as good as the app, but I'd still use the app even if that existed, just due to the convenience. | | |
| ▲ | monocasa 13 hours ago | parent [-] | | The driver's license apps will start requiring a non-rooted phone if they don't already. | | |
| ▲ | hilbert42 9 hours ago | parent [-] | | So continue to use a physical licence instead. Most are credit card size so they're not inconvenient to carry. At present, governments and banks are freeloaders piggybacking on the popularity of the smartphone. If these entities end up mandating access to their services via this route (or making them nigh on impossible to access by other more traditional means) then users should demand they be issued with phones specifically for the purpose, as owning a phone is not prerequisite or mandated requirement to live in society—although if trends continue it likely will be. Moreover, as phone technology easily lends itself to location tracking any mandatory requirement for phone vehicle licences would soon lead to mandatory location tracking (and easy to implement and impossible to disable with government/bank-issued phones). That's the logical endgame, and it'd be showdown time. The question is does the citizenry have the guts and resilience to resist such authoritarian impositions. Frankly, I'm horrified at how easily users of these essential services have been bought off by online conveniences, they've not only become careless and blasé but by default they've also conceded to the withdrawing—and in many cases—actual withdrawal of traditional services in favour of ones that both governments and banks have more control over—and in the bargain they've chucked privacy to the wind. | | |
|
| |
| ▲ | rjdj377dhabsn 11 hours ago | parent | prev | next [-] | | > Why do you need to access your bank account on your phone? Many banks require you use their app to do anything, e.g., make transfers, approve debit card transactions, register your biometrics to unfreeze your account, etc. And no, choosing a bank without these requirements isn't possible in some countries. | |
| ▲ | spot5010 14 hours ago | parent | prev | next [-] | | I do most of my banking and investments on my phone. I don’t think I’m in the minority here. | |
| ▲ | ronsor 14 hours ago | parent | prev | next [-] | | People in non-US countries apparently have a litany of government and banking apps which are mandatory at all times. | | |
| ▲ | Telaneo 13 hours ago | parent [-] | | They're rarely completely mandatory (Grandma still needs to be able to access her bank too), but the alternative is usually a whole lot more inconvenient (sometimes for bad reasons, sometimes just because that's how life is). | | |
| ▲ | type0 6 hours ago | parent [-] | | > (Grandma still needs to be able to access her bank too) In some countries they are mandated if not by law then by implementation, a relative or a social worker is tasked to get grandma equipped with a "smart device". She can even borrow it for a few months from municipality services until she can afford to buy it |
|
| |
| ▲ | shellfishgene 7 hours ago | parent | prev | next [-] | | This might be an extreme example, but with Saudi Arabia's Absher app you can do almost everything related to government services, IDs and passports, car and driving licenses, visa, all kinds of permits etc. Other countries may have similar apps. | |
| ▲ | GardenLetter27 8 hours ago | parent | prev | next [-] | | Digital ID in Sweden uses BankID - it is used for everything from identifying at government pages, to your bank, to the supermarket, etc. | |
| ▲ | bakugo 14 hours ago | parent | prev | next [-] | | > Why do you need to access your bank account on your phone? My bank requires me to authenticate all online transactions via the phone app. Without it, it's not possible to make online payments. | |
| ▲ | Nursie 14 hours ago | parent | prev [-] | | > What government apps do people run? There are a bunch of them here in Australia, and there were several in the UK. Here there's a secure ID app for government services which is used as 2FA on the web interface, and various apps to access state and national government services directly. There's a tax one that allows you to scan receipts to collect them up for your annual tax return. In the UK I had an NHS app, can't remember what else. They aren't mandatory, you can live without them, but they are often convenient. > Why do you need to access your bank account on your phone? Because it's many people's primary computing device? Why would you not want to access your bank accounts on your phone? And because if you want to log on to some banks websites you need to have a 2FA security code which can either be generated by a dedicated security device, which has become less common now, or by an app on the phone which is then usually biometrically protected. There is sometimes a second code-generation method for higher value transfers. So it is convenient to be able to send payments in the bank app, though less common than using my phone instead of the physical card through apple/google pay (those don't require the bank app to be installed). |
|
|
| ▲ | CuriouslyC 14 hours ago | parent | prev | next [-] |
| Linux can emulate android. Most banks have websites, and the only real blocker for banking apps I've seen is the photo verification due to hardware issues connecting to the emulated android system. |
| |
| ▲ | em-bee 14 hours ago | parent | next [-] | | the app for one of my banks which i need for 2FA won't run on my /e/OS phone. | | |
| ▲ | anthk 9 hours ago | parent [-] | | Get Droidify; there are wrappers and root tools to override these checks. |
| |
| ▲ | bakugo 14 hours ago | parent | prev [-] | | > Linux can emulate android. It can't emulate hardware attestation though, which most bank apps now require, so good luck with that. | | |
| ▲ | CuriouslyC 13 hours ago | parent [-] | | You can do pass through attestation with access to kernelspace. There are a few things that don't pass (play protect/wildvine, but that's by design, not a limitation of linux) | | |
| ▲ | IlikeKitties 13 hours ago | parent [-] | | And do you think that will matter in the near future? Because every app developer will just set their apps to use the highest attestation requirement by default and every normal android phone will pass that test. The few percent of people that use something else can just fuck off. | | |
| ▲ | CuriouslyC 2 hours ago | parent [-] | | I don't think so. Google is poisoning the well with their developer policies and play store controls. The time is ripe for a competitor, and if there's a credible competitor that demonstrates the "good because goog says so" model is broken, that will force fully open attestation. |
|
|
|
|
|
| ▲ | rjdj377dhabsn 11 hours ago | parent | prev | next [-] |
| I think the only viable solution is going to be to have 2 devices: one for government and financial services and one for everything else, where you still have some hope of privacy. |
| |
| ▲ | globular-toast 9 hours ago | parent [-] | | This is what I'm thinking. Android supports multi-user, right? So a cheap Android POS shared with the family that gets left at home most of the time. I also think just not using a phone as much is a viable solution. People are addicted to their phones so it would feel like intercision at first. But freedom is worth it. Never sacrifice freedom for convenience. You actually don't need to look up stuff on Wikipedia at any time while you're outside. Just be outside. Be offline. It's fine. It's better even. I'd be happy just going back to a dumbphone for the phone bit and having a portable GNU/Linux device for travelling. I still have a 15 year old Dell netbook but sadly the battery is shot and it's no good for the wonderful "modern" web. But something like that would be fine. | | |
| ▲ | Hackbraten 8 hours ago | parent [-] | | > I also think just not using a phone as much is a viable solution. Most European banks force you to use your phone for 2FA if you want to pay your bills, no matter if you're sending the transaction from your computer or your phone. | | |
| ▲ | globular-toast 8 hours ago | parent [-] | | Yeah the point of this subthread is having a shitty device just for that crap. I don't need to pay my bills at a moment's notice from anywhere in the world. In fact, I refuse to. |
|
|
|
|
| ▲ | Syntonicles 14 hours ago | parent | prev | next [-] |
| My bank's mobile app no longer supports my 2017 Android phone. I thought it would be a big deal but honestly I forgot about it until you mentioned this, it's been 6-12 months. |
|
| ▲ | christophilus 14 hours ago | parent | prev | next [-] |
| I don't agree. They're useless until they can call, text, and do video / camera reliably. With enough adoption, the rest will come, but they won't ever get adoption without nailing those basics. |
| |
| ▲ | fsflover 2 hours ago | parent | next [-] | | Librem 5 can do all those things fine. Video is somewhat less reliable, but it works. | |
| ▲ | akagusu 14 hours ago | parent | prev [-] | | Adoption will come only and only with essential apps people use every day. | | |
| ▲ | takluyver 7 hours ago | parent [-] | | And those apps get developed only if there are enough users. Catch 22. Microsoft didn't manage to make Windows Phone a viable competitor against Android & iOS, and they're about an order of magnitude bigger than any Linux-focused company. I hope the conditions shift and an open phone OS can take off, but I don't know what would enable it. |
|
|
|
| ▲ | dmbche 14 hours ago | parent | prev | next [-] |
| What's an example of a government app |
| |
| ▲ | jeffparsons 14 hours ago | parent | next [-] | | In Australia: Centrelink, Service Victoria, Medicare, myID (formerly MyGovID), ATO (tax) — for a start. There's no great reason for these to be Android/Apple specific. I'm just offering examples as requested. | | |
| ▲ | dmbche 13 hours ago | parent [-] | | And much appreciated - was not aware of these (other than covid vaccine apps really not seen them so far). Have a good day |
| |
| ▲ | JoaoCostaIFG 14 hours ago | parent | prev | next [-] | | Portuguese government app: https://play.google.com/store/apps/details?id=id.gov.pt Allows you to have a digital copy of your ID and sign in to government sites/services (there are alternative methods). | | |
| ▲ | ttoinou 5 hours ago | parent | next [-] | | I believe you can still connect to Chave Móvel Digital with only your PT phone number, no ? | |
| ▲ | mr90210 14 hours ago | parent | prev [-] | | Oh João vai-te deitar pah. LMAO |
| |
| ▲ | randunel 10 hours ago | parent | prev | next [-] | | ROeID app, which is required by almost all RO government websites to log in. | |
| ▲ | abhinavk 14 hours ago | parent | prev | next [-] | | Identity apps as well as apps to access government and social programs. | |
| ▲ | hopelite 14 hours ago | parent | prev | next [-] | | Not to mention why specifically government apps? Would those not be covered by general compatibility with web standards? Wouldn’t well designed mobile web-apps suffice for that use case? I have several web-app site shortcuts linked on my Home Screen which behave just like the native apps. In most cases I don’t see why that would not be sufficient, including most “government apps” use cases | |
| ▲ | mitthrowaway2 14 hours ago | parent | prev [-] | | The BC Service Card app |
|
|
| ▲ | pabs3 11 hours ago | parent | prev | next [-] |
| Those apps usually require Google's version of Android (or Apple iOS), and block alternative Android builds using attestation: https://grapheneos.org/articles/attestation-compatibility-gu... |
|
| ▲ | hecanjog 14 hours ago | parent | prev | next [-] |
| I've had the same (US) bank for 20 years, it's a small one, they have a nice web interface (and I can deposit checks through it on my laptop) but I've never run into a situation where I needed to have some smartphone app to do my banking. (I also don't have a smartphone.) Is this common with major banks? Do they not have web interfaces anymore? |
| |
| ▲ | akagusu 14 hours ago | parent | next [-] | | Outside US lots of banks use apps to generate a token and authenticate website transactions. | | | |
| ▲ | deathanatos 10 hours ago | parent | prev | next [-] | | At least with my CU, mobile check deposit is the only function I need a mobile phone for; everything else is equally available on the web interface. (I could go to a physical branch, in lieu of mobile, I suppose.) | |
| ▲ | nicholasjarnold 14 hours ago | parent | prev | next [-] | | They do, but some seem to be gradually removing functionality (like check deposit via scan + upload) in favor of using their amazingly convenient (/s) app. | |
| ▲ | Nursie 14 hours ago | parent | prev [-] | | A lot of major banks worldwide have apps, and they usually require un-rooted phones. People here seem to think this is some sort of Orwellian attempt to control them, but the reasons are more mundane and technical - many of them (mine included, from two countries) use security facilities on the phone to secure your accounts. For example, my HSBC UK app has replaced the little calculator thing they used to ship, and uses iOS face recognition to secure the generation of log-on codes which you need in order to use the web interface, as well as for secure access to the banking app directly. With a rooted phone they don't have the guarantees that these aren't being exfiltrated, or the app being subverted in novel ways, so they don't want to support it. You may not consider this a good enough reason, and I have heard it said on HN that 'the banks shouldn't get to control what I do on my computing device!', and that attitude is absolutely fine, but then you'll most likely end up with either less secure banking (meaning more fraud, higher fees etc) or going back to having to have a dedicated security device. > I can deposit checks through it on my laptop American-like banking detected... who uses checks in 2025?!
:) | | |
| ▲ | hecanjog 14 hours ago | parent | next [-] | | > American-like banking detected... who uses checks in 2025?! :) Yeah, fair. :-) I live in a small town, the only check I write is my rent check, which I literally walk across the street to deposit. But I still on rare occasions receive checks as well. | | |
| ▲ | Nursie 14 hours ago | parent [-] | | Ha. Fair enough. That sort of thing is almost exclusively done using bank transfers here in Aus. I did receive one check this year, a refund from a company who had screwed up billing on a medical scan. For some reason they couldn't just refund it to my debit card. It was really annoying to have to get to a bank during opening hours to deposit it, but my bank here doesn't offer mobile check scanning. Some do, my old UK bank did ... oh well. |
| |
| ▲ | derbOac 12 hours ago | parent | prev [-] | | > going back to having to have a dedicated security device. ... and ...? There are ways to implement security without tying it to one of two app stores. Companies might even get creative and figure out hardware standards for secure verification that are portable, open, and give the user control. They figured out sim cards, and are worried about GAI they created taking over the entire world, they could figure this out. | | |
| ▲ | Nursie 11 hours ago | parent [-] | | > ... and ...? Personally I prefer the device convergence rather than having to have another thing to keep track of. Plus the added factor of biometrics over pure hardware 2FA. But you do you, as they say, the point is there are tradeoffs. > There are ways to implement security without tying it to one of two app stores. It's not just about the app store - people want to be able to run these on rooted devices, which is an end run around the security guarantees these apps currently rely on. > Companies might even get creative and figure out hardware standards for secure verification that are portable, open, and give the user control. I wish you the best of luck in this endeavour. I hope that they already aren't relying on client-side security any more than they have to. I'm afraid I'm not familiar enough with the APIs around biometrics to know if there's a useful way a server can use the onboard devices to verify a user's identity without relying on client-side security in one way or another though. It's true on desktop we have stuff like FIDO2 authentication using hardware tokens, which are supported on open systems like firefox on linux. I'm sure it's not insurmountable or unthinkable to do similar on phones. At the least there would need to be a system of remote attestation for the biometric hardware, and a way for it to provide a verifiable response to a remote server. Far from insurmountable, but someone will need to actually do it. Goes against FOSS still though if there are processors in the system which can't be user-controlled, and biometric chips which perform remote attestation (see the recent discussions on how passkeys are fundamentally OSS-hostile). |
|
|
|
|
| ▲ | j-bos 14 hours ago | parent | prev | next [-] |
| Why not just use the browser? |
| |
| ▲ | weikju 12 hours ago | parent | next [-] | | In the case of my bank: I had to enable secure auth to access some features. This works only with the mobile app, even when logging on the web I need the mobile app. Some functions are available only in the app as well. Now I’m stuck with the app because I need those and needed secure auth to access those functions. It’s evil but I has no choice (no choice of other banks either for reasons I won’t go into here, just accept it and don’t tell me to change banks. Other banks are no better anyway. ) | |
| ▲ | izacus 5 hours ago | parent | prev [-] | | I need my banking app for 2FA to login with the browser. No, they don't use or allow TOTP. |
|
|
| ▲ | yosito 13 hours ago | parent | prev | next [-] |
| > until they can run government and bank apps That will never happen. Governments are invested in people depending on surveillance technology. Black mirrors are a tool for controlling the masses. |
|
| ▲ | agnishom 10 hours ago | parent | prev | next [-] |
| yes, we know. Why do you feel the need to highlight the most negative aspect of the adoption? |
|
| ▲ | kortilla 14 hours ago | parent | prev | next [-] |
| Thankfully neither of those are required in the US. |
| |
|
| ▲ | defrost 14 hours ago | parent | prev [-] |
| Curiously the linked discussion begins: apparently it needs to be said that I am not suggesting you switch to Linux on your phone today; just that development needs to accelerate.
Please don’t be one of the 34 people that replied to tell me Linux is not ready.
|