Tell HN: PayPal blocks GrapheneOS

Post by Aachen » Thu, Aug 27, 2026, 7:10 PM UTC

jeroenhd wrote: post #190

master-lincoln wrote: post #87

Earlier quoted context omitted.

> Some banks also connect it to your phone number What do you mean "some banks"? I thought the whole value proposition of Wero was instant bank transfers with SEPA but using phone numbers?

Wero is a payment provider technology, a money wallet, and a bank account integration technology under one single marketing name. On the payment provider technology side, you're right, but the wallet feature uses phone numbers (and I think email addresses) so you can send each other money without sharing your IBAN (which is slightly longer and probably not in your contacts).

Post by silisili » Thu, Aug 27, 2026, 7:21 PM UTC

microtonal wrote: post #213

bdzr wrote: post #55

I also ran into the eBay application being blocked just recently. Other than that I've had no issues, but I imagine this is going to become more and more common as time goes on.

Most likely, unless the GrapheneOS user base can be grown quickly. We are at a point in time where the number of apps that block GrapheneOS through Play Integrity Strong is fairly small. So it's still possible to grow the user base since the inconvenience is not too large. Once the majority of banks would require passing Play Integrity Strong, far fewer people would switch. So, best to grow the user base fast now and…

Post by DANmode » Thu, Aug 27, 2026, 7:54 PM UTC

dingaling wrote: post #257

DANmode wrote: post #235

Earlier quoted context omitted.

Nobody’s shaming you, reddit refugee. It is a common userspace decision to lock things to userspace. It’s good hygiene. If you want less-secure software, use AOSP or one of its many forks. You’re not defective: you just have different needs and threat model, and you’re harassing and degrading the public image of a project that’s opinionated in a very welcome way by folks in the security community - especially those w…

"It is a common userspace decision to lock things to userspace" Yes, running in userspace for the majority of tasks is good hygiene. Preventing the user from ever escalating beyond that layer on their own devices, however, is restricting their freedom to control their device. When that happens with tractors, cars or other gadgets that's considered anti-user. The same attitude should extend to phones.

Post by water-drummer » Thu, Aug 27, 2026, 8:20 PM UTC

StrLght wrote: post #123

skinfaxi wrote: post #112

Earlier quoted context omitted.

So to use paypal you actually have to reduce the security of the phone?

As with all things about security — it depends on your threat model. It reduces security of the app itself, but doesn't affect security of the phone by much.

Post by nekusar » Thu, Aug 27, 2026, 9:45 PM UTC

DANmode wrote: post #265

dingaling wrote: post #257

Earlier quoted context omitted.

"It is a common userspace decision to lock things to userspace" Yes, running in userspace for the majority of tasks is good hygiene. Preventing the user from ever escalating beyond that layer on their own devices, however, is restricting their freedom to control their device. When that happens with tractors, cars or other gadgets that's considered anti-user. The same attitude should extend to phones.

You can wipe the device and reinstall whatever at any time. You have complete control of the device. You choose to lock certain things when using GrapheneOS. That’s their security model. If you want to argue that, go study it and argue that. If your threat model is different, if your desired security model is different, then: it’s not for you, use one of many other options. Like all software projects, it doesn’t nece…