Earlier quoted context omitted.
The cherry on top is that their web site invariably still works so the refusal to work via app is an intentional manipulation tactic to harvest more consumer data for sale.
Sadly, their website now appears to require an app in order to sign in. Even before that it would often block me with text along the lines of "We don't know who you are, call our support number."
Tell HN: PayPal blocks GrapheneOS
171–180 of 361 posts
Re: Tell HN: PayPal blocks GrapheneOS
#172Earlier quoted context omitted.
My local banks know how to international transfers but I have to go into a bank office and fill out a paper form. Receiving international transfers they call and ask if I wish to accept it, if I can't answer the phone right then the transfer gets delayed. If the sender does not include my middle name, I have to come into the office and sign an affidavit that this person with this different name is also me. Each time.
Thank you for sharing your experience. I don’t know what your local banks are and what country you’re talking about.
Re: Tell HN: PayPal blocks GrapheneOS
#173Earlier quoted context omitted.
Generally I think the issue is that there's a tension between your security vs Paypal's security (deliberate, motivated bad actors). Maybe an analogy could be about using metal detectors as a layer to reduce bank robberies. A gun in a good guy's hands is a good thing to prevent robberies. Guns in a bad guy's hands are a bad thing to prevent robberies. Paypal knows you have a gun but they don't know if you're a good g…
That's your argument? Mate, you can make explosives out of stuff you can buy in literally any supermarket and no one bats an eyelash. You don't have to legally be adult to buy any of the things you'd need and I say that as someone who only struggled with chemistry in school, that's now low the bar is. What's the solution then? Ban sea salt? If someone is using Graphene, the chances of them getting hacked are astronom…
Re: Tell HN: PayPal blocks GrapheneOS
#174Re: Tell HN: PayPal blocks GrapheneOS
#175Earlier quoted context omitted.
Sadly, their website now appears to require an app in order to sign in. Even before that it would often block me with text along the lines of "We don't know who you are, call our support number."
Desktop mode fixes discrimination against small viewports.
Re: Tell HN: PayPal blocks GrapheneOS
#176Earlier quoted context omitted.
Thought they use Sepa
I wish. The small inconvenience of putting in an IBAN and a matching name instead of just an email address is already enough for many people to default to paypal. Just happened to me again yesterday, the guy preferred to bring cash next time we see each other instead of just receiving my info via text.
Re: Tell HN: PayPal blocks GrapheneOS
#177Earlier quoted context omitted.
Yea, years ago I was in the security space and got to talk to some paypal security folks at a symposium in San Diego. The level of stuff that they have to deal with is so extreme. It's similar to how people don't like sites blocking entire countries or access from Tor, etc. You might be doing it for privacy...but all the people trying to commit fraud are also using those same channels to hide their identity. The bloc…
Yet another weak point. My question stands: A user with an OS from 2019 is "secure" and dozens of unpatched CVEs but a literally-last-night-patch OS is not? That's the "stuff they have to deal with"? I was lucky and did not make the mistake of joining a payment provider in 2020 or 2021 (I can't remember). The reality is that European laws are much harsher when it comes to payments and personal data protection and the…
From what we see above it sounds like the change trips their rootkit detection, which they are probably interpreting as a compromised device.
It sounds like you're expecting them to have a perfect security posture that can correctly identify fraud in call cases and only block the real thing. It's more complicated than that and there's typically some type of scoring system involved with numerous triggers that are higher value indicators of potential fraud. If they think the device is compromised, that's probably a high value indicator.
This is just me speculating.
Re: Tell HN: PayPal blocks GrapheneOS
#178Earlier quoted context omitted.
That's your argument? Mate, you can make explosives out of stuff you can buy in literally any supermarket and no one bats an eyelash. You don't have to legally be adult to buy any of the things you'd need and I say that as someone who only struggled with chemistry in school, that's now low the bar is. What's the solution then? Ban sea salt? If someone is using Graphene, the chances of them getting hacked are astronom…
physical risks, like your example, do not map well to digital risks faced by large international companies.
On a side note, if you want to be extremely specific, the line between the physical and digital threat does not exist anymore. There are two things people need to be afraid of: incompetent friends and competent enemies. Tech giants are already filled to the brim with incompetent friends, which drastically lowers the bar for the competence of their enemies.
Re: Tell HN: PayPal blocks GrapheneOS
#179Why would anyone still use PayPal after so many cases of accounts being banned and funds being frozen for no reason, and all the other terrible stuff they've done?
Re: Tell HN: PayPal blocks GrapheneOS
#180Earlier quoted context omitted.
Yea, years ago I was in the security space and got to talk to some paypal security folks at a symposium in San Diego. The level of stuff that they have to deal with is so extreme. It's similar to how people don't like sites blocking entire countries or access from Tor, etc. You might be doing it for privacy...but all the people trying to commit fraud are also using those same channels to hide their identity. The bloc…
Yet another weak point. My question stands: A user with an OS from 2019 is "secure" and dozens of unpatched CVEs but a literally-last-night-patch OS is not? That's the "stuff they have to deal with"? I was lucky and did not make the mistake of joining a payment provider in 2020 or 2021 (I can't remember). The reality is that European laws are much harsher when it comes to payments and personal data protection and the…
It's not about user security.