News for hackers. Stuff that matters.
Re:Android now allows apps to block sideloading by UniverseHacker on Wednesday September 11, 2024 @08:29PM (#41516524)
All in the name of reliability and security supposedly. For example not being able to use banking apps on a rooted phone… yet I can use them on my perfectly secure regular computer where I have full root/admin access.
Re:Android now allows apps to block sideloading by dmoy on Wednesday September 11, 2024 @09:00PM (#41516656)
> can use them on my perfectly secure regular computer where I have full root/admin access.

yooooooo shhhhhh

Don't give them any ideas :(

Also it's not like insane security ideas around banking access compliance are unprecedented, see e.g. South Korea's insane Internet Explorer deal (transitively caused by US's ITAR on encryption)

https://en.m.wikipedia.org/wiki/Web_compatibility_issues_in_...

Re:Android now allows apps to block sideloading by matheusmoreira on Thursday September 12, 2024 @01:59AM (#41517986)
Brazil once had a similar problem. Banks used to force users to install these obnoxious "security plugins" into their browsers. One day I got fed up with the inexplicable slowdown they were causing and decided to see what they were doing. Turned out they were intercepting every network connection.

There is no limit whatsoever to what a bank feels is justified in doing when it comes to preventing fraud, money laundering or whatever else that impacts their bottom line. They literally believe they are entitled to any and all access.

Re:Android now allows apps to block sideloading by lxgr on Wednesday September 11, 2024 @09:18PM (#41516732)
Can you confirm transactions there, though?

Many banks in the EU require a smartphone for that at this point (or a dedicated authentication device).

But instead of using actually secure technologies like Android’s protected confirmation (which couldn’t care less about running on a rooted phone, as it runs in a trusted HW enclave), they usually just settle for (often very spoofable) “root detection”. It’s quite sad.

Re:Android now allows apps to block sideloading by t0bia_s on Thursday September 12, 2024 @02:30AM (#41518141)
Banking apps are usually huge data collectors (scaning installed apps for example) that invade privacy instead of giving proclaimed security.
Re:Android now allows apps to block sideloading by UniverseHacker on Thursday September 12, 2024 @10:53AM (#41521668)
I can- it is done over text so if you have apple devices, you can confirm on any of the devices. Technically it is routing through the phone though.
Re:Android now allows apps to block sideloading by RajT88 on Thursday September 12, 2024 @09:00AM (#41520402)
In the name of security, my workplace just enabled a policy that forces me to let them monitor my location 24/7 via Microsoft Defender.

Needless to say, I am happy I have a second work phone I keep disconnected from WiFi while not working.

Re:Android now allows apps to block sideloading by NoGravitas on Thursday September 12, 2024 @10:31AM (#41521452)
My bank will let me make deposits from my phone, but not from my computer. A few months ago, the phone app tightened its Play Integrity usage, and will now no longer run on the phone it had previously happily run on.
Re:Android now allows apps to block sideloading by INGSOCIALITE on Thursday September 12, 2024 @11:02PM (#41527722)
just use the web site?