News for hackers. Stuff that matters.

A comment on F-Droid version of KDEConnect uninstalled by PlayProtect. Parent comment

Re:F-Droid version of KDEConnect uninstalled by PlayProtect by OfSanguineFire on Saturday October 14, 2023 @12:01PM (#37881555)
Oh, banks are definitely concerned about PCs having root. There are even some banks that have removed their online banking websites entirely (except, perhaps, for corporate clients) and require customers to do everything through the Android app instead.
[ Parent | on HN ]
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by Arnt on Saturday October 14, 2023 @12:25PM (#37881795)
My bank and my wife's bank both require 2FA. On the app, one of the Fs is having physical access to the device (the phone/app, which was vetted by the bank when the app was installed). On web browsers, these two banks don't offer any factor like that.

In end effect, the banks treat a non-rootable device as suitable as a "something you have" factor, but will not treat a rootable device as that.

[ Parent | on HN ]
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by user_7832 on Saturday October 14, 2023 @12:05PM (#37881590)
Huh that's interesting, thanks for mentioning it. I wasn't aware of that.
[ Parent | on HN ]
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by fsflover on Saturday October 14, 2023 @01:31PM (#37882446)
Which is why I was switching banks until I found one not forcing me into the duopoly.
[ Parent | on HN ]
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by OfSanguineFire on Saturday October 14, 2023 @01:39PM (#37882502)
In some countries one no longer has that possibility. Not everywhere has a range of banks to choose from, sometimes mergers have resulted in just a handful of banks for a country, all of which enforce use of an Android app.

Oh, it’s fsflover, the poster with the Librem idée fixe. Haven’t noticed you here in couple of years. Your comment elsewhere here about GrapheneOS not requiring much less effort to daily drive is way off. GrapheneOS runs banking apps and, in countries that legally enforce use of certain apps for ID or payment, those apps, too.

[ Parent | on HN ]
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by fsflover on Saturday October 14, 2023 @02:08PM (#37882747)
Of course, in some countries you have lack of important freedoms, which says a lot about their state of democracy. However if your country gives you a choice, consider using it in order to not lose it.

It's nice to know that I'm somewhat famous. I never suggested that running banking apps on GNU/Linux phones was as easy as on Android forks (however reportedly it is be possible for some banks). I meant other daily tasks of course.

[ Parent | on HN ]
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by Arnt on Sunday October 15, 2023 @04:33PM (#37893162)
The country I live in has strong consumer protection laws. Banks deal with it by judging risks: That which is too risky is what they won't offer.

My bank does not offer Western Union transfers, for example, because there's been too much fraud. And does not accept root-platform devices as 2FA "something you have" factors.

Liberty or consumer protection? Your choice, really.

[ Parent | on HN ]
Re:F-Droid version of KDEConnect uninstalled by PlayProtect by fsflover on Monday October 16, 2023 @04:11PM (#37905796)
Arguably, typical Android is less secure than a Linux phone, since it constantly calls home, runs a ton of untrusted apps and often has a short software support time.
[ Parent | on HN ]