Re:We should have the ability to run any code we want on har...
by fr4nkr on Monday September 01, 2025 @01:21AM
(#45089699)
No, we have convenient online services in spite of the endless security theater that permeates consumer tech. All it's done is gradually increase maintenance burden and technical complexity until useful features are slowly stripped out to create a more "streamlined" experience. The mobile app for my credit union has become so shitty that I'm not even sure if losing access to it is a deal-breaker for rooting my phone - I already prefer to do my online banking and shopping on my laptop.
There is no "just works" technical solution for a problem caused mainly by naivete and gullibility. Governments and the private sector know this, of course; as others have said, the real purpose is to control users, not to protect them.
Re:We should have the ability to run any code we want on har...
by nuker on Monday September 01, 2025 @01:58AM
(#45089854)
> No, we have convenient online services in spite of the endless security theater that permeates consumer tech.
Disagree. No banking app can resist root access owned by attacker.
Re:We should have the ability to run any code we want on har...
by donkeybeer on Monday September 01, 2025 @02:36AM
(#45090073)
Why is the banking server trusting the client? Thats criminally incompetent security. If your website gets hacked because a client had "root" whose fault is it?
Re:We should have the ability to run any code we want on har...
by jamespo on Monday September 01, 2025 @04:55AM
(#45090876)
Because the unknowing user has entered their auth credentials?
Re:We should have the ability to run any code we want on har...
by donkeybeer on Monday September 01, 2025 @05:10AM
(#45090955)
I see the cause of confusion. I was assuming and talking about the case of the legitimate user have a root/non locked down device as being imputed as the "attacker". I don't think he was talking about other people stealing or having acces to your device. And in any case, all bets are off then if you meant that scenario. At least with a browser user can choose not to save passwords and the attacker won't get bank creds, so even in that case a web app would be better.
Re:We should have the ability to run any code we want on har...
by necovek on Monday September 01, 2025 @01:24AM
(#45089714)
They all existed before mobile apps on systems you don't control became prevalent.
This was just useful for them.
Re:We should have the ability to run any code we want on har...
by extraisland on Monday September 01, 2025 @02:15AM
(#45089945)
All of these existed well before mobile phones and so called "enforced security". Almost all these apps are wrappers around web functionality.
Re:We should have the ability to run any code we want on har...
by _Algernon_ on Monday September 01, 2025 @02:54AM
(#45090178)
We've literally had convenient online banking for two decades at this point without any DRM.
Don't rewrite history.
Re:We should have the ability to run any code we want on har...
by beeflet on Monday September 01, 2025 @02:25AM
(#45090006)
Really? They couldn't just use a website?
Re:We should have the ability to run any code we want on har...
by const_cast on Monday September 01, 2025 @11:32AM
(#45093541)
If we have to always appeal to the lowest of the low, the stupidest of the stupidest, then society sucks ass.
What's even the point of me being alive is I can't do anything that isn't completely idiot-proof and made for goo goo ga ga users?
Look, I get it. Think of the children! Think of the granny!
But I'm not a child, I'm an adult. I would like to be treated as such. Otherwise what the fuck are we even doing here? Why can't I just live in daycare forever? Why am I paying bills?
The only reason we have convenient banking, gov and streaming apps today is because of guaranteed and enforced mobile security by big boys Apple and Google. (Google being Ad company is another matter, not relevant here).