131–140 of 232 posts
Earlier quoted context omitted.
This is definitely not the case everywhere. Where I live the app is 100% needed because it’s the „second factor“ in the login process.
There has to be a fallback like SMS and/or automated call.
Earlier quoted context omitted.
So I guess next thing we need is someone sueing the fucking banks that do that. Mine luckily doesn't because I explicitly use an old phone with LineageOS, the banking app, and nothing else on it for online banking. It's arguably way more secure than using your main phone with a bazillion other Apps installed and online at all times.
How would that stick? You can just sign into the bank via your web browser in the case of a nonfunctional app. The apps just give you added security assurances beyond using the web. "The app can't function in a low security environment, but complainant is free to use the web client in such event." case dismissed (obviously an oversimplification, but the point stands)
> ASUS makes some of the best Android phones you can buy > ASUS has one of the worst software support commitments in the Android world How can you possibly say both things in the same article?
The type of consumer buying an ASUS device is the type of consumer that thinks the spec sheet tells them how good something is. Eg, faster CPU and more RAM, or higher screen refresh rate or whatever is good regardless of any other variables or the package as a whole. This means they are "some of the best Android phones you can buy", as in, they have some of the best specs per $ you can buy. Not that they are actually…
Earlier quoted context omitted.
This is definitely not the case everywhere. Where I live the app is 100% needed because it’s the „second factor“ in the login process.
There has to be a fallback like SMS and/or automated call.
Fallback should never be the weakest link in a security chain. Especially not in something as high stakes as your banking login.
I can’t remember how I got my first bank token in my phone. Probably by physically showing up in the bank office with my id.
Earlier quoted context omitted.
the only app ive seen balk at bootloader status (to date) is google wallet. Using a phone to pay for stuff is an opsec nightmare youd only entertain so long as becoming an integrated and saleable asset in a data brokers portfolio is a life goal. 'pm uninstall' and move on, the custom rom is still far more valuable from a security perspective than bending the knee to some bespoke ecosystem payment app (especially if y…
I'm in Canada and I can literally just tap the card itself on the reader. Every card has this ability and it can't be skimmed.
Unless you store it in a wallet with a faraday cage, this is a laughable opinion to express.
Earlier quoted context omitted.
This is rubbish. I'm running GrapheneOS and have left my bootloader unlocked, and there's no app that has refused to work. The only caveat is some of them need Google Play services. No, I am not rooted, but my last phone was rooted and there might have been one or two apps out of dozens that wouldn't work with root even with Magisk trying to hide the root status. Using a custom ROM is easily one of the beat choices I…
Do you use a banking app? Last I read depending on the type of check used some apps can still be problematic.
Earlier quoted context omitted.
EMV chip cards still contain your card number and expiry date. Skimmers would need a way to also learn the CVC2 from the back of the card to use it at most (but not all!) online merchants, but that's feasible using a small camera or a waiter/cashier accomplice doing the skimming. With Google Pay and Apple Pay, and similar mobile wallets, that number is never shared during payments (and in fact not even stored on the…
They do, but you can't get the card number from reading the chip. The protocol is a challenge-response one based on a private key stored within the chip. https://en.wikipedia.org/wiki/Chip_Authentication_Program You need to read the entire card number + cvc2 + expiry date with your camera. That's not skimming, that's just taking a photo of the card.
Earlier quoted context omitted.
The type of consumer buying an ASUS device is the type of consumer that thinks the spec sheet tells them how good something is. Eg, faster CPU and more RAM, or higher screen refresh rate or whatever is good regardless of any other variables or the package as a whole. This means they are "some of the best Android phones you can buy", as in, they have some of the best specs per $ you can buy. Not that they are actually…
I disagree - I don't care about most specs, but ASUS Zenfone is still one of the best small phones, especially for the money.
Earlier quoted context omitted.
You mean Microsoft Windows which dropped support for Zen 1 with Win11 not even 5 years after Zen 1 was released? Meanwhile, Linux will still run on a 30+ year old CPU...
They said software support, not hardware support. You can take a win 95 gui app and run it on windows 10 without issue. You can’t do the same on Linux.
Earlier quoted context omitted.
Do you use a banking app? Last I read depending on the type of check used some apps can still be problematic.
So I guess next thing we need is someone sueing the fucking banks that do that. Mine luckily doesn't because I explicitly use an old phone with LineageOS, the banking app, and nothing else on it for online banking. It's arguably way more secure than using your main phone with a bazillion other Apps installed and online at all times.