Live data from Hacker News

Tell HN: PayPal blocks GrapheneOS

news.ycombinator.com

101–110 of 361 posts

Re: Tell HN: PayPal blocks GrapheneOS

#101
post #51

Earlier quoted context omitted.

How does a rooted phone enable bank fraud? This smells like pointless policy checkboxing.

If you run a rooted phone and download malware, that malware can gain root and do payments on your behalf. Then PayPal has to deal with you revoking payments etc., they don't want to so they forbid you from using PayPal on a rooted phone.

Malwares can possibly do that even on non rooted phones if a privilege escalation attack is possible. And just yesterday, there was an article here about exactly one of those.

Also I highly doubt that there is any real statistics anywhere about whether this is a real threat or not. I guarantee that nobody did such statistics properly. The only known data is from companies which sell root prevention tools, so totally unreliable. And internally I guarantee, that no banks collect such info.

So no, banks lie about this only because they can sell this to judges as safety feature, when they fuck up, which happens continuously.

Re: Tell HN: PayPal blocks GrapheneOS

#102
post #8

I see this happen from time to time. Lately, almost all of the apps work fine on GrapheneOS. The best strategy is to keep writing the business once every two or so weeks that you can’t log in to and use the app. Don’t go too technical at first, because most of the time, the moment they hear things like “rooted” or “unofficial,” they just say your phone is the issue. To date, I was able to convince, or at least contri…

I had the same experience. Asked in an email why an important government app won't work on GrapheneOS, first without any technical details. Got the response that it's "because security". I sent some technical details and argued that they're denying service to their most security-conscious users. 3 months later the app started to work!

Re: Tell HN: PayPal blocks GrapheneOS

#104
post #31

Has PayPal blocked GrapheneOS, or have they blocked every OS they're unable to verify and done a poor job of implementing their checks? Hanlon's Razor is a useful tool. https://en.wikipedia.org/wiki/Hanlon%27s_razor

Ironically, I had to apply Hanlon’s Razor to the impolite tone of your post

"Ironic" means saying the opposite of what you mean in order to be funny or sarcastic. So that would mean you think I was both polite and not an idiot.

Jokes on you though, I'm neither of those things.

Re: Tell HN: PayPal blocks GrapheneOS

#106
post #31

Has PayPal blocked GrapheneOS, or have they blocked every OS they're unable to verify and done a poor job of implementing their checks? Hanlon's Razor is a useful tool. https://en.wikipedia.org/wiki/Hanlon%27s_razor

You're a banking app. Why do you need to check my phone or my os? The security is not in what phone I use, but in how sane your 2-factor auth is and if even exists.

You're a banking app.

I've been called worse.

Re: Tell HN: PayPal blocks GrapheneOS

#107

Earlier quoted context omitted.

Thought they use Sepa

SEPA uses your IBAN (account number), and one can also enter this account number for payment, implicitly allowing the store to withdraw money from it...

That sounds like the same info on a check, which people hand out freely. I'm probably misunderstanding.

Re: Tell HN: PayPal blocks GrapheneOS

#108
post #43

This is what really makes me question if I want to continue to use GOS, already some UK banks apps (which are app only) don't want to run. I'm considering switching back to stock as I can't be bothered to try to find hacks and workarounds for daily necessities.

I would never use a bank that is app only. Sounds like a horrible experience.

Re: Tell HN: PayPal blocks GrapheneOS

#109
post #55

I also ran into the eBay application being blocked just recently. Other than that I've had no issues, but I imagine this is going to become more and more common as time goes on.

eBay has been enforcing Play Integrity for over a year now. Luckily you don't lose much by using it in a browser.

I also get why they'd be desperate to fight bots. It's a weak excuse for not doing it better, but at least it makes some sense.

Re: Tell HN: PayPal blocks GrapheneOS

#110
post #31

Has PayPal blocked GrapheneOS, or have they blocked every OS they're unable to verify and done a poor job of implementing their checks? Hanlon's Razor is a useful tool. https://en.wikipedia.org/wiki/Hanlon%27s_razor

Hanlon's razor is for people. Organizations do not operate like people and do not deserve the same deference.
Post reply on HN