News for hackers. Stuff that matters.
Re:Mobifree – An open-source mobile ecosystem by t0bia_s on Tuesday May 28, 2024 @01:27PM (#40503148)
I'm not using Google play or any other services on android over 6 years now. You don't need banking apps for making transactions.
Re:Mobifree – An open-source mobile ecosystem by janosdebugs on Tuesday May 28, 2024 @01:38PM (#40503284)
I live in an EU country and I, in fact, cannot use online banking without a Google-enabled Android or an iPhone. There is exactly one bank that offers a desktop authenticator, but we had a really bad experience with them when we tried them for a year.
Re:Mobifree – An open-source mobile ecosystem by t0bia_s on Tuesday May 28, 2024 @01:50PM (#40503438)
MicroG could work, but I never used banking app, so I cannot verify it. Adopt paying by other, more secure and private friendly ways.
Re:Mobifree – An open-source mobile ecosystem by janosdebugs on Tuesday May 28, 2024 @02:36PM (#40503972)
What payment method would you recommend for paying mortgages, utility bills, and company expenses?
Re:Mobifree – An open-source mobile ecosystem by rakoo on Tuesday May 28, 2024 @05:10PM (#40505649)
You said you're in the EU right ? SEPA works. The only moment I need to confirm identity with my bank is when I buy frivolities, not for my bills.
Re:Mobifree – An open-source mobile ecosystem by janosdebugs on Tuesday May 28, 2024 @05:18PM (#40505719)
Here's the problem: I can do a SEPA transaction using online banking (with a Google-enabled phone) or by walking to my bank personally.
Re:Mobifree – An open-source mobile ecosystem by rakoo on Tuesday May 28, 2024 @07:34PM (#40506708)
I might be lucky enough to have online banking work with sms and a pre-shared secret. My bank (also in the EU) didn't tell me I could do it automatically, they only mentioned it when I told them I lost my phone (it was true) and that I didn't know when I could buy a new one. Maybe it'll work with yours ?
Re:Mobifree – An open-source mobile ecosystem by janosdebugs on Wednesday May 29, 2024 @01:54AM (#40508901)
No, ever since PSD2 came into effect, banks here refuse to do SMS-based verification and have switched to apps. They also don't support hardware authenticators for consumers. I asked.
Re:Mobifree – An open-source mobile ecosystem by t0bia_s on Wednesday May 29, 2024 @05:58PM (#40517527)
Fortunately we have competition and possibility to switch to banks that are more private and user friendly.
Re:Mobifree – An open-source mobile ecosystem by nh2 on Tuesday May 28, 2024 @07:21PM (#40506642)
I have accounts at 1 Swiss bank, 2 German banks, and 2 UK banks. None of them require an app for any functionality.

You can get a little hardware thing to generate their OTP codes, as an alternative to apps.

Re:Mobifree – An open-source mobile ecosystem by hedora on Wednesday May 29, 2024 @01:24AM (#40508759)
The hardware dongle sounds like it might be TOTP. There are plenty of clients for that for laptops and phones, assuming you can enroll your own secret.
Re:Mobifree – An open-source mobile ecosystem by 1oooqooq on Wednesday May 29, 2024 @09:39AM (#40511882)
likely, but it's a custom time based token from RSA that you definitely will never get the keys out. so the implementation doesn't matter much.
Re:Mobifree – An open-source mobile ecosystem by nh2 on Thursday May 30, 2024 @10:13AM (#40523973)
Unfortunately it's not plain TOTP. Most banks in Europe give you a standalone cheap plastic smart card reader into which you put your bank card.

The website shows you a code. You input it into the reader, followed by your card PIN. The reader outputs a code you put into the website.

This is what it looks like:

https://www.post.ch/-/media/portal-opp/k/bilder/postgeschich...

Re:Mobifree – An open-source mobile ecosystem by whatjadat2 on Wednesday May 29, 2024 @04:15AM (#40509653)
I live in a EU country as well, Netherlands to be exact. Never had an issue with any bank. What are you talking about?
Re:Mobifree – An open-source mobile ecosystem by 1oooqooq on Wednesday May 29, 2024 @09:42AM (#40511916)
Netherlands today is more like the USA. anything it can fight the EU it will. it's the reason it's the new silicon valley with all tax dodging companies moving there.
Re:Mobifree – An open-source mobile ecosystem by 1oooqooq on Wednesday May 29, 2024 @09:37AM (#40511856)
and it's not going to improve. second factor auth in Europe now legally means "second factor auth via means the gov can positively link your Identity".

for anything EU or eu commission, you must either have an app in stock OS smartphone, or receive a sms on a network they can validate sim is attached to a tax id, or nothing else is allowed. totp et al is legally verboten.