We need Linux on phones. Bank apps not needed as long as I can use browser. But do need some things like wireless cards, popular apps like Sonos and Spotify working.
https://puri.sm/products/librem-5/>
Android may soon restrict on-device ADB
171–180 of 535 posts
Re: Android may soon restrict on-device ADB
#172Earlier quoted context omitted.
Poland, all banks I know offer web portal. Linux, Firefox - works perfectly.
Follow up question: how many of those still let you log in and authorize transfers without relying on their mobile app as required second factor?
Good point. They don't. Huh, that's really worrying. My bank started requiring phone for web portal only about a few years ago. They don't allow to use an alternative MFA method. This should be made illegal.
Re: Android may soon restrict on-device ADB
#173Earlier quoted context omitted.
Isn't this because of the kimwolf (and now 6+ other botnets) that are taking advantage of people running residential proxyware unknowingly on the device which permits outbound connections to 127.0.0.1 on tcp/5555 to auth in and exec wgets or drops a loader that grabs the ddos malware APKs and install it?
It seems to require the user to: 1. Enable Developer Mode by going to an obscure settings page and tapping the build number seven times 2. Enable USB ADB debugging in the Developer Options 3. Establish an actual USB ADB session 4. Enable TCP/IP ADB debugging in the Developer Options 5. Unknowingly download a malware app from the official Play Store 6. Blindly click "Yes" on the permission prompt. In other words: this…
[deleted]
Re: Android may soon restrict on-device ADB
#174Re: Android may soon restrict on-device ADB
#175Earlier quoted context omitted.
[flagged]
You keep spamming variations of this comment without explaining how could apps actually bypass security without several steps that the user needs to take in order for it to work . Are you just farming down votes for some weird reason or will you finally get to the technical details instead of one-sentence snarks?
The linked bug explains exactly how. The fact that you angrily slam downvotes when you hear something doesn't like doesn't make it "farming", just like rage and rants and bizarre accusations of conspiracy in this comment thread won't change the underlying issues that this is going to fix.
Re: Android may soon restrict on-device ADB
#176Looking what's this is about - Shizuku
https://github.com/thedjchi/Shizuku/wiki/setup
So it requires
* Enable Developer Options if not already enabled (Generally, this is done by going to Settings > About device and tapping Build number 7 times).
* Enable both USB debugging and Wireless debugging. Tap "Allow" if prompted to allow wireless debugging on the current network.
* Tap Pair device with pairing code.
* Downloadd other apps like ShizuCallRecorder
Or seems to be exactly what this user described.
https://news.ycombinator.com/reply?id=49046291&goto=item%3Fi...
Re: Android may soon restrict on-device ADB
#177Earlier quoted context omitted.
This is solvable by adding big huge warning that ADB is running. Not by removing feature.
That huge warning would also be permanently shown for everyone using Shinzuku apps. I think that UX would neither be desirable nor increase security.
..for the very little number of people who use them?
Arguably it would be highly preferable compared to the option of not being able to use them at all.
Re: Android may soon restrict on-device ADB
#178I am generally in favor of security improvements, but I do not really see much of a benefit here. This attack vector requires both that the user enabled developer settings and that they have remote adb enabled. So, this does not seem to be a realistic attack vector for 99.9% of the users and most of the other 0.1% probably know what they are doing. The other proposed change (to restrict access to certain interfaces o…
The bug literally describes how they're avoiding OS security restictions by going through the debug port. This is a CVE by any definition and you'd be screaming your head off if any other OS would allow this kind of permission bypass (or even if another app did it). But sure, Google evil.
New CVE found in Bank of America app that may cause user to transfer money to hackers if they press certain combination of keys.
Re: Android may soon restrict on-device ADB
#179We need Linux on phones. Bank apps not needed as long as I can use browser. But do need some things like wireless cards, popular apps like Sonos and Spotify working.
Unfortunately many banks in the UK no longer offer a web portal or physical branches. I'd love to see legislation that mandated a functioning web experience for critical services like this (banking, utilities, etc) - otherwise it will continue to further entrench the current duopoly. (I suppose this is also an instance where I should do a better job of voting with my feet and supporting services that do offer this)
Wise in the UK currently is good. You can use it completely without a phone app.
It also has good support for passkeys, TOTP, and SMS OTP, allowing to add multiple of each as it should be. If you do choose the Wise app, it currently warns when you run a custom Android ROM, but let's you use it.
Our company also uses Revolut business, but that requires a phone app to verify online payments with cards. And Revolut recently changed the app so it now requires Google Play Integrity so it doesn't work with LineageOS anymore. So I'm looking to move all new things away from Revolut. I have little patience with companies that want to unbank my company, and decide what hardware or software we use.
Re: Android may soon restrict on-device ADB
#180And I might soon restrict use of Android and iOS in my life. Because of this nonsense, how will I get around the app issue is something I am still trying to figure out but I won't pay money to companies that make my products(I own them after I bought them) worse bit by bit anymore.