this post was submitted on 22 Jul 2023
2608 points (99.2% liked)
Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ
54746 readers
222 users here now
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Rules • Full Version
1. Posts must be related to the discussion of digital piracy
2. Don't request invites, trade, sell, or self-promote
3. Don't request or link to specific pirated titles, including DMs
4. Don't submit low-quality posts, be entitled, or harass others
Loot, Pillage, & Plunder
📜 c/Piracy Wiki (Community Edition):
💰 Please help cover server costs.
Ko-fi | Liberapay |
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Why do banks require "safety"net on their apps now? The safest roms specifically don't have the security nightmare that is google play services, and banking apps are always the hardest to get working.
It is a symbiotic relationship. Regulators hear about the next wave of compromised online banking, add some law requiring whatever, banks are stuck having to comply and in comes google with "Hey this great webDRM/safetynet/playprotect totally complies with this", which it doesn't really but google has the capabilities to lock up any legal processes about it for years when they bring in the next thing and repeat. Banks in large part know it's bullshit but don't care, they're off the hook (They are the ones doing 2 factor by making the banking app on your phone require a confirmation in your tan app on your phone to make a transaction, they don't give a rats ass about the safety of their systems).
Banks get someone shielding them from regulations for cheap, google gets partners that can help them lock you in their proprietary system, and you get extra work on your rooted phone and can't fully remove play services.
I notice the big American banks' apps don't care, as long as a compatible implementation of Google Play Services is available. Nor does my American bank seem to care that I do my desktop banking in Firefox on Linux. Is this an issue only in specific countries?
I'm afraid I don't know what you're talking about here. I don't have to give any kind of confirmation to make a transaction. What's a “tan app”?
I'm using a SailfishOS (Linux) phone and on SFOS forums it's one of the biggest complaints, they can't use their bank through the Android compatibility layer because it doesn't pass SafetyNet. I'm lucky enough that my bank doesn't do this, but I had to fiddle with low level stuff for Revolut to work - they require you install the app from Play Store or the app doesn't work.
Can you take your business elsewhere, to a company that doesn't require you to compromise your security and privacy?
If I didn't find a solution, I would, though it would be a great pain to migrate all my money spending flows.