News for hackers. Stuff that matters.

A comment on The Vietnam government has banned rooted phones from using any banking app. Parent comment

Re:The Vietnam government has banned rooted phones from usin... by NiloCK on Friday January 09, 2026 @12:23PM (#46556306)
A rooted phone is more capable of modifying the banking app itself and has 'freer reign' over the APIs that the app uses to interact with the bank.

Whereas previously the app displays a 'whitelisted' set of UI options to the user, the rooted user could use employee only methods. Somewhere or other every bank has methods that set balances on accounts.

To be honest a law like this makes security by the extremely modest obscurity of not having an "increase your balance" button on the app UI much more tempting.

[ Parent | on HN ]
Re:The Vietnam government has banned rooted phones from usin... by tvbusy on Friday January 09, 2026 @12:46PM (#46556619)
It's never about security or end user protection. It's to give banks a blanket refusal of responsibility.
[ Parent | on HN ]
Re:The Vietnam government has banned rooted phones from usin... by lucasban on Friday January 09, 2026 @12:35PM (#46556486)
This should be enforced by the backend, why should you ever trust the client to tell you what access you have?
[ Parent | on HN ]
Re:The Vietnam government has banned rooted phones from usin... by treyd on Friday January 09, 2026 @12:43PM (#46556578)
> the rooted user could use employee only methods. Somewhere or other every bank has methods that set balances on accounts.

Exposing these types of APIs in any way outside the bank ever would be gross negligence.

[ Parent | on HN ]