| ▲ | inigyou 3 hours ago |
| All the existing apps are on Android and iOS. Graphene lets you run them. You can't have a bank account on a Linux phone* because they won't let you, but you can on Android including on Graphene. * before replying snarkily that Android is Linux, please take a long walk off a short pier, thanks |
|
| ▲ | yjftsjthsd-h 2 hours ago | parent | next [-] |
| > All the existing apps are on Android and iOS. Graphene lets you run them. We have waydroid for that. > You can't have a bank account on a Linux phone* because they won't let you, but you can on Android including on Graphene. Unless of course it uses those stupid integrity apis to block anything that isn't stock. |
| |
| ▲ | pteraspidomorph 2 hours ago | parent | next [-] | | Graphene passes basic integrity, so most of them work. There is a list here: https://privsec.dev/posts/android/banking-applications-compa... | |
| ▲ | imkac 2 hours ago | parent | prev [-] | | Porting traditional Linux desktop distributions to Android devices is meaningless, all you get is more instability, more unsafe and more trouble. Waydroid is a bad implementation on security and compatibility, just running Android in VM is better. | | |
| ▲ | yjftsjthsd-h an hour ago | parent [-] | | > Waydroid is a bad implementation on security and compatibility, just running Android in VM is better. What security problems does waydroid have that a VM wouldn't? |
|
|
|
| ▲ | tfrancisl 3 hours ago | parent | prev | next [-] |
| What's stopping me from using a browser to log in to my bank? Assuming my bank is one of the ones that requires you to lock down sideloading (they aren't, but i know many are). |
| |
| ▲ | owaislone 2 hours ago | parent | next [-] | | Nothing is stopping you. You're free to use a desktop web app that either doesn't work or is terribly slow or has limited features on a mobile web browser. I'd love it if all apps were PWAs but that is not the case. | | |
| ▲ | georgeecollins 2 hours ago | parent | next [-] | | My broker has a much more fully featured web app then it does on iOS or Android. You can do things in a browser that the phone apps will send you to a browser to do. BofA is just as good of a web app. Maybe people are just used to using their phones? | | |
| ▲ | limagnolia 18 minutes ago | parent | next [-] | | Can you deposit checks from the webapp? That is the feature most often missing in banking webapps. It isn't something I need often, fortunately. | |
| ▲ | georgeecollins 42 minutes ago | parent | prev [-] | | Looking down the thread I am also thinking maybe this is a Europe thing? I am usa. |
| |
| ▲ | thesuitonym an hour ago | parent | prev | next [-] | | That's not terribly compelling. Android and iOS banking apps also don't work, are terribly slow, and have limited features. | |
| ▲ | mikestew an hour ago | parent | prev [-] | | Eh? The bank apps I’ve seen appear to be webviews wrapping their mobile site. Much to my chagrin, I’ll add. |
| |
| ▲ | terribleperson 2 hours ago | parent | prev | next [-] | | I had to replace a credit card yesterday. Part of the default flow involves the call center sending a notification to your app.
When I told them my android version was too old, it took them twenty minutes to find out they could instead send a text message. That text message sends you to a photo-and-id verification service, but that's another issue. Soon, there won't even be an alternative flow. There are a lot of places where there already isn't. | | |
| ▲ | georgeecollins 2 hours ago | parent [-] | | Are you sure? This seems like a forum with a lot of early adopters and a lot of late adopters still use browsers, email, text messages. Like, let me guess that your credit cars isn't capitol one. Not that it should be, but that would be more "normie". |
| |
| ▲ | cesarb 30 minutes ago | parent | prev | next [-] | | > What's stopping me from using a browser to log in to my bank? The "security module" they require you to install on your computer. In the past, when browsers had plugins, this was a browser plugin; nowadays, it's an always-on service (running as root) which exposes a local HTTP server which the bank site connects to to validate your computer. For an example from a major bank in this country (the same "security module" is used by several banks in this country), https://seg.bb.com.br/home.html is the diagnostic page for that "security module" (the FAQ page there has links to the installers). | |
| ▲ | Yeroc 3 hours ago | parent | prev | next [-] | | The websites don't have feature parity with the apps these days. Things like being able to deposit a cheque aren't available among other things. | | |
| ▲ | lopis an hour ago | parent | next [-] | | Some older banks do have more features in their website than their app. It's usually the ones with the worse, most outdated UIs and almost useless mobile apps. After years of using several mobile-first neo-banks, I switched to a traditional bank and boy, was I not ready for the trip back in time. | |
| ▲ | encom 37 minutes ago | parent | prev [-] | | >deposit a cheque That would be inconvenient if this was 1985. |
| |
| ▲ | Alpha3031 3 hours ago | parent | prev | next [-] | | Some banks are app only and/or build MFA functionality into their apps. | | |
| ▲ | thesuitonym an hour ago | parent | next [-] | | That would be a hell naw from me. | |
| ▲ | wseqyrku 35 minutes ago | parent | prev [-] | | You know the web is also bits and bytes right? Someone who has a say should fix it so banks can do whatever they need right in the browser. |
| |
| ▲ | inigyou 3 hours ago | parent | prev | next [-] | | The 2FA code you need to get from the phone app to log in on a desktop. It isn't 2005 any more. | | |
| ▲ | Aachen 2 hours ago | parent | next [-] | | Apparently I live in 2005 then? I do 2FA with the same chip+pin method that I use to pay in the store. Works in any browser | | |
| ▲ | patall 2 hours ago | parent [-] | | Maybe that is possible in Germany. It is impossible here in Sweden. Or in other words: of course you can have mobile bankid without a smartphone, just use a tablet computer ;) | | |
| ▲ | patall 2 hours ago | parent | next [-] | | @fsflover: and my mobile phone provider. And my insurance. And my eletricity provider. And my housing associations customer portal. Getting doctors appointments. Mortgage. Union. National retirement savings account. Some of these may have some alternative left, but far too many you will be left out. Well, I can buy a train ticket without it, so I could still leave. | | |
| ▲ | epihelix 23 minutes ago | parent [-] | | Do you mean to say that all these services require strong device integrity to function in Sweden?? In Australia, no local app that I'm aware of (banking, finance, government, medical) requires any form of device integrity - otherwise I couldn't use them. The only exception I've encountered is Google Wallet. I wonder why there would be such a difference in policy between countries, not only in government but across the private sector? This doesn't make any sense to me. If anything, I'd expect Sweden to have a more sensible, left wing attitude than Oz. |
| |
| ▲ | fsflover 2 hours ago | parent | prev [-] | | Looks like it is possible in Sweden: https://news.ycombinator.com/item?id=47562094 Consider switching your bank to one not forcing you into American megacorps. |
|
| |
| ▲ | stvltvs 2 hours ago | parent | prev | next [-] | | Highly location dependent. This is more true in Europe than in America. | |
| ▲ | tcfhgj 2 hours ago | parent | prev | next [-] | | my bank (and others) doesn't require the 2f to be a smartphone | |
| ▲ | jonathanstrange 2 hours ago | parent | prev [-] | | Right, 2FA. My bank wants me to log in to my phone app and then sends an SMS to the same phone to confirm the app transaction. It's super-secure. |
| |
| ▲ | saidinesh5 3 hours ago | parent | prev | next [-] | | The bank website typically needs the app to enable two factor authentication in a lot of places. For eg. There's no browser based alternative to make UPI payments that i know of. | | | |
| ▲ | gf000 35 minutes ago | parent | prev | next [-] | | Well, it's kinda hard to scan a QR code displayed on your screen when the camera is attached to its back (semi-joking) | |
| ▲ | TFNA an hour ago | parent | prev | next [-] | | In many countries, all major local banks require their phone app as the second factor to log in to the browser version of their online banking. Sometimes functionality is removed from the browser version and made available only in the phone app. | | |
| ▲ | drnick1 an hour ago | parent | next [-] | | "Many" is doing a lot of work here. A more accurate statement would be that some banks in some countries require invasive apps, but fortunately it isn't the case everywhere (yet). | | |
| ▲ | renehsz a few seconds ago | parent [-] | | This is a huge problem in EU countries! The relevant regulations are Commission Delegated Regulation (EU) 2018/389 and the earlier Directive (EU) 2015/2366. While these laws are deliberately vague when it comes to specific technologies, they do require at least two independent factors from different categories, such as knowledge (password) and possession (phone). That, in and of itself, wouldn't be a problem. The way most banks implement it, however, is by giving you two choices: 1. You use their mobile app (which likely requires device attestation and Google Play Services, so won't work on a plain LineageOS install) 2. You use their CardTAN device, which is extremely inconvenient to always carry around. Sure, we nerds might argue they should just let us use our Yubikeys or regular old TOTP, but pretty much no bank implements that. (Why? Your guess is as good as mine.) Personally, I had to buy a second stock Samsung phone just for banking apps. And yes, there are still alternatives (only very very few though), but no, none of them are convenient, for various unrelated reasons. I wouldn't be surprised if this continues to spread to the US too, under the sneaky disguise of "security". |
| |
| ▲ | dotancohen an hour ago | parent | prev | next [-] | | And what do people without a smartphone use? | | |
| ▲ | renehsz 29 minutes ago | parent [-] | | A hardware-based CardTAN device, which is super inconvenient. Or else they can't do any online banking at all. crying in EU :( |
| |
| ▲ | DANmode an hour ago | parent | prev [-] | | Name five. | | |
| |
| ▲ | justsomehnguy 2 hours ago | parent | prev [-] | | The bank itself. They want to see where are you, what you do and snoop on anything they can about you. Having a spywa^W sorry, bank app is the best way to do that. Source: my bank which recently 'upgraded' a browser version to a glorified SPA which even renders as a vertical oriented app on a landscape 4K monitor. | | |
|
|
| ▲ | dethos 8 minutes ago | parent | prev | next [-] |
| > Graphene lets you run them. It seems not all of them, and that things will only get worse if recent news comes true. |
|
| ▲ | t1234s 2 hours ago | parent | prev | next [-] |
| Even Graphine is limited in what apps work properly compared to a normal google phone. You have to give up a lot in order to have privacy these days. A pure linux non-android phone would be great however you wouldn't have access to properly working apps and would not be able to participate in modern society. |
| |
| ▲ | m4xp an hour ago | parent | next [-] | | Not true, if you install play services you can run 99.9% of apps, i can even run all the italian apps from yhe goverment.
You are still using google but its running as user service and you can even revoke most of the permissions including location. | |
| ▲ | unethical_ban an hour ago | parent | prev [-] | | Running their sandboxed Play, I can run everything. The only thing I notice in the US is some banking apps (stupidly, idiotically, moronically) force 2FA on every login instead of trusting biometric entirely like they do on stock OS. |
|
|
| ▲ | sehw an hour ago | parent | prev | next [-] |
| I use my web browser to access my bank and tell banks that require apps to go fuck themselves. |
|
| ▲ | wseqyrku 43 minutes ago | parent | prev | next [-] |
| I can't care less about "apps". Web is already powerful enough to do all sort of stuff on device. That said, I think wasi containers support for a mobile OS would be a game changer. (^ Here's a startup idea if you're looking out for one. I for one throw out all my devices from the balcony to get this) |
| |
| ▲ | trueno 6 minutes ago | parent [-] | | yea i straight up am not downloading apps anymore if i can help it. virtually zero companies put apps out to provide a better experience, they just do it to get telemetry data. which is why all these banking apps are just their website in some wrapper lol |
|
|
| ▲ | megous 2 hours ago | parent | prev | next [-] |
| Banks care very little about actual security. Some force you either to SMS codes, or to their app on a hopelessly broken platform based on shoving many untrusted spying apps onto one device and hoping some SW will be able to keep them apart. Almost none support strong dedicated HW authenticators or second factors. Not even as an option to those who care. Anyway it's always possible to just reverse their web api and use it directly. 2FA that consists of copying some code from SMS is no barrier, especially not on the Linux phone that you fully control. |
|
| ▲ | jambalaya8 2 hours ago | parent | prev | next [-] |
| yeah, people suggesting Android is Linux are as annoying as people saying Digital Unix/Tru64 was OSF/1, or MacOS/OSX is now Darwin or OSF/1 or Gnu Hurd itself. |
|
| ▲ | xnickb 2 hours ago | parent | prev | next [-] |
| Some (European) banks/healthcare apps block GOS and require stock android. Just saying |
| |
| ▲ | protimewaster 2 hours ago | parent | next [-] | | I wonder if practices will change any of there's ever a device that ships with GOS. Right now, many companies are happy to shrug off GOS, because they don't support "modified devices". If any of the Motorola devices have GOS as a pre-installed option, now the companies don't have the excuse that the device is modified. I'm guessing the companies will continue to be difficult, but it'll be amusing to watch, at least. | |
| ▲ | drnick1 an hour ago | parent | prev | next [-] | | What is the point of apps for these things in particular? I understand that some banks require an app for 2FA, but I don't see why anyone would want some invasive healthcare app on their phone. | |
| ▲ | gunalx 2 hours ago | parent | prev [-] | | Yep. Had to change banks because of my old one suddenly dropping grapheme support by adding stupid attestation mechanics. They surely must have gotten feedback from me and others because the next update it worked again. But I and probably others where already a lost customer. |
|
|
| ▲ | throwaway_94383 2 hours ago | parent | prev [-] |
| most banking apps don't run on graphene |
| |
| ▲ | DANmode an hour ago | parent [-] | | Stop parroting this. It’s not true. Diminishingly few apps do not work, and it’s down to them. |
|