Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: PayPal blocks GrapheneOS

news.ycombinator.com

Post reply on HN
Print view View original

321–330 of 361 posts

Re: Tell HN: PayPal blocks GrapheneOS

#321

Post by grapheneos »

Flere-Imsaho wrote: post #231
microsoftedging wrote: post #224

Earlier quoted context omitted.

Same experience in the UK, but it was the push that got me to switch from Lloyds to Nationwide if you're looking for another option. They're great, they even have offline 2FA methods as they send you a card reader for things like authing purchases or sign-ins. And the app still works :-)

I use revolut on a stock pixel 9, have been considering Graphene, but im worried about stuff like: https://grapheneos.social/@GrapheneOS/117045625230764434

Revolut still works for the vast majority of our users due to our workarounds for their attempted ban on it. We got in contact with Revolut due to our thread and they appear willing to avoid banning it going forward despite their past moves to do it.

Re: Tell HN: PayPal blocks GrapheneOS

#322

Post by grapheneos »

steveharman wrote: post #187

Isn't this more about PayPal disliking a rooted device rather than Graphene? I used to have all kinds of issues with financial apps when I was rooted, regardless of OS

GrapheneOS isn't rooted. The issue is their flawed anti-tampering code shipped a new bug breaking compatibility with secure spawning. We have a per-app toggle for secure spawning due to seeing this with other banking/financial/government apps and it works for PayPal's app as the original poster discovered.

Re: Tell HN: PayPal blocks GrapheneOS

#323

Post by grapheneos »

Itoldmyselfso wrote: post #158

The best approach to combat this is to cause as much headache as possible: bombard them with 1-star reviews, contact news sites, post this on social media sites snd contact Paypal's support.

It can be worked around with the per-app secure spawning toggle. Ideally people should still complain and get them to fix it.

Re: Tell HN: PayPal blocks GrapheneOS

#324

Post by grapheneos »

onaclov2000 wrote: post #148

Dumb idea, but I wonder if the underlying os can see who is asking questions like do you have root, And if an app has no need to know, it just plays dumb and responds...of course not. It's a bit of a chicken and egg problem, in that if you don't know what apps need to know if you have root, or not, then you can't determine that at the OS level...maybe an option for the user (popup) to tell the program, tell them we a…

GrapheneOS isn't rooted. The issue is their flawed anti-tampering code shipped a new bug breaking compatibility with secure spawning. We have a per-app toggle for secure spawning due to seeing this with other banking/financial/government apps and it works for PayPal's app as the original poster discovered.

If they want to ban arbitrary operating systems, they can use attestation and it can't be fooled the way you're describing. Apps doing this can explicitly verify GrapheneOS and we've convinced some apps to do that. We've also convinced a smaller number to stop doing that at all.

Re: Tell HN: PayPal blocks GrapheneOS

#325

Post by grapheneos »

schnittbrot wrote: post #97

I've been using it in the browser with GOS no problem. Any reason why one would need the app besides a little more convenience?

The app can still be used too but requires the per-app secure spawning toggle with recent app versions. It's due to PayPal shipping buggy anti-tampering code.

Re: Tell HN: PayPal blocks GrapheneOS

#326

Post by grapheneos »

deepc4life wrote: post #271

[flagged]

It doesn't defeat the purpose of GrapheneOS. GrapheneOS does not require people to do all their financial transactions with Monero to heavily benefit from it.

Their app can also still be used on GrapheneOS. It just requires the per-app secure spawning toggle due to a recently added app bug.

Re: Tell HN: PayPal blocks GrapheneOS

#327

Post by grapheneos »

zache6 wrote: post #82

It works for me after enabling exploit protection compatibility mode. Pixel 9a on latest versions of GOS and PayPal.

With the default settings, the latest versions of PayPal only require disabling secure app spawning.

It may also require dynamic code loading via storage, dynamic code loading via memory and native debugging being permitted but those aren't blocked for user installed apps by default. People can opt-in to those being enabled by default for user installed apps similarly to memory tagging, but memory tagging has the biggest positive impact.

Re: Tell HN: PayPal blocks GrapheneOS

#330

Post by grapheneos »

taegee wrote: post #99

Still works fine for me. PayPal and GrapheneOS are both on the current release.

PayPal's app requires disabling the per-app secure spawning toggle for it now due to buggy anti-tampering code. You may have already enabled the per-app compatibility mode which includes that.

You may also not have the update yet. Play Store supports staged rollouts where updates are only available to a set percentage of users.

Post reply on HN