Live data from Hacker News

Tell HN: PayPal blocks GrapheneOS

news.ycombinator.com

181–190 of 361 posts

Re: Tell HN: PayPal blocks GrapheneOS

#181
post #8

I see this happen from time to time. Lately, almost all of the apps work fine on GrapheneOS. The best strategy is to keep writing the business once every two or so weeks that you can’t log in to and use the app. Don’t go too technical at first, because most of the time, the moment they hear things like “rooted” or “unofficial,” they just say your phone is the issue. To date, I was able to convince, or at least contri…

Honestly there's a decent chance they don't even know, in most cases, because corporate environments generally try hard to have as few as possible hardware/software setups to maintain. And they're unlikely to proactively test on Graphene unless it's closely related to what they do (and it definitely is not for most apps).

Mistakes happen and ya can't fix what you don't know about. Always report issues.

Also strongly consider just using the website.

Re: Tell HN: PayPal blocks GrapheneOS

#182

Earlier quoted context omitted.

I wish. The small inconvenience of putting in an IBAN and a matching name instead of just an email address is already enough for many people to default to paypal. Just happened to me again yesterday, the guy preferred to bring cash next time we see each other instead of just receiving my info via text.

"The guy" probably let you know in a polite way that you were behaving immaturely. You're not supposed to ask your friends for money to split bills etc. The way grown ups do it is "I pay this time, you pay next time".

This is not how German culture works.

Re: Tell HN: PayPal blocks GrapheneOS

#183

Earlier quoted context omitted.

I wish. The small inconvenience of putting in an IBAN and a matching name instead of just an email address is already enough for many people to default to paypal. Just happened to me again yesterday, the guy preferred to bring cash next time we see each other instead of just receiving my info via text.

"The guy" probably let you know in a polite way that you were behaving immaturely. You're not supposed to ask your friends for money to split bills etc. The way grown ups do it is "I pay this time, you pay next time".

No, he didn't. He offered to cover a case of beer for after our game at the park, but he didn't have a car, so he asked me to bring it and he'll pay for it. Afterwards he came to me (I never brought up the topic of money) and asked for my Paypal details. How am I in the wrong here?

The whole "I pay this time you pay next time" is already covered by "everybody brings a case once in a while", but if the guys without cars just ask someone else to pay for it when it's their turn it won't add up.

If you're going to make assumptions, perhaps start with those that don't paint me in a bad light.

Re: Tell HN: PayPal blocks GrapheneOS

#184

Earlier quoted context omitted.

I wish. The small inconvenience of putting in an IBAN and a matching name instead of just an email address is already enough for many people to default to paypal. Just happened to me again yesterday, the guy preferred to bring cash next time we see each other instead of just receiving my info via text.

"The guy" probably let you know in a polite way that you were behaving immaturely. You're not supposed to ask your friends for money to split bills etc. The way grown ups do it is "I pay this time, you pay next time".

This seems likely to be cultural, possibly even microcultural.

I know many adults who believe that splitting bills is a normal and reasonable thing to do.

Re: Tell HN: PayPal blocks GrapheneOS

#186

It works here. Running in a work profile, no contactless payments. Play Integrity API: Not blocked Hardened memory allocator: Enabled Memory tagging: Enabled Extended virtual address space: Enabled Secure app spawning: Enabled Native code debugging: Allowed WebView JIT: Disabled Dynamic code loading via memory: Allowed Dynamic code loading via storage: Allowed

Doesn't work here. No contactless payments, full Exploit protection compatibility mode.

This is the PayPal version I have installed that works:

Version 8.107.0

com.paypal.android.p2pmobile

Re: Tell HN: PayPal blocks GrapheneOS

#188
post #51

Earlier quoted context omitted.

How does a rooted phone enable bank fraud? This smells like pointless policy checkboxing.

One thing that I'm actually excited about regarding AI is that the pointless policy checkboxes that have never been effective in adding any actual security are even less so effective now that everyone can wield their very own security researcher.

PHB at insurance company will still need them, so any company they insure will need them. Theater continues, the show must go on.

Re: Tell HN: PayPal blocks GrapheneOS

#189
post #88

Earlier quoted context omitted.

Generally I think the issue is that there's a tension between your security vs Paypal's security (deliberate, motivated bad actors). Maybe an analogy could be about using metal detectors as a layer to reduce bank robberies. A gun in a good guy's hands is a good thing to prevent robberies. Guns in a bad guy's hands are a bad thing to prevent robberies. Paypal knows you have a gun but they don't know if you're a good g…

That's your argument? Mate, you can make explosives out of stuff you can buy in literally any supermarket and no one bats an eyelash. You don't have to legally be adult to buy any of the things you'd need and I say that as someone who only struggled with chemistry in school, that's now low the bar is. What's the solution then? Ban sea salt? If someone is using Graphene, the chances of them getting hacked are astronom…

The problem here seems to be that the phone is detected as rooted, not specifically that it's running grapheneOS. But I agree that it's a big problem. That's how you end up in a situation where google has full control from hardware to final apps like on iphones. When devs assume that everybody is using the stock android with google services enabled.

Re: Tell HN: PayPal blocks GrapheneOS

#190

Earlier quoted context omitted.

Wero is not a PayPal alternative. It doesn't even have buyer's protection and every bank must manually implement it which immediately makes it a failure. Some banks also connect it to your phone number so you can't link Wero to two different bank accounts with the same number when you have 2 bank accounts. Very messy.

> Some banks also connect it to your phone number What do you mean "some banks"? I thought the whole value proposition of Wero was instant bank transfers with SEPA but using phone numbers?

Wero is a payment provider technology, a money wallet, and a bank account integration technology under one single marketing name.

On the payment provider technology side, you're right, but the wallet feature uses phone numbers (and I think email addresses) so you can send each other money without sharing your IBAN (which is slightly longer and probably not in your contacts).

Post reply on HN