Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LineageOS 22

lineageos.org

Post reply on HN
Print view View original

141–150 of 166 posts

Re: LineageOS 22

#141

Post by fiso64 »

gjsman-1000 wrote: post #114
lordofgibbons wrote: post #100

Earlier quoted context omitted.

Yeah, running GrapheneOS, this has been a big headache for me. And it's incredibly stupid too. The app won't work natively due to a lack of attestation, so I have to fire up the browser and user the service.... Exactly how is that more anti-abuse than just using an app without attestation? It's security theater and has no basis in reality.

Can you scan a check from your web browser? Maybe I'm wrong, but probably not; frankly, it's a logistical miracle we can do this from our phones and the banks tolerate it, but I can see why they would still want to minimize all risk involved. The second reason though I can think a bank would want attestation is as an anti-piracy measure. With a website, you have HTTPS verifying the identity of the domain. With an app…

>The last thing I want, or the bank wants, is some grandmother downloading the "Wells Fargo Bank Plus with Giant Legible Accessible Text" app she saw in an ad as an APK, installing it, and being a victim of silent fraud for years.

I don't think this happens nowadays. Android will either block by default or give you a million prompts and warnings before it allows you to install an apk from an unknown source. It's far, far easier to install it from google play. I don't think any grandmother would manage to accidentally ignore the first 3 pages of genuine links on google and then push the right buttons that enable sideloading.

Re: LineageOS 22

#142

Post by exe34 »

seszett wrote: post #113
exe34 wrote: post #98

Earlier quoted context omitted.

they work fine if you don't root the install. if you do root, banking apps and Disney plus won't work, everything else is fine.

For some banking apps, you have to root the device on the contrary, to be able to install other apps that will make the banking app run on a custom ROM. It's completely absurd, but it's how it works today.

yeah I just use the browser version instead.

Re: LineageOS 22

#143

Post by toast0 »

gjsman-1000 wrote: post #114
lordofgibbons wrote: post #100

Earlier quoted context omitted.

Yeah, running GrapheneOS, this has been a big headache for me. And it's incredibly stupid too. The app won't work natively due to a lack of attestation, so I have to fire up the browser and user the service.... Exactly how is that more anti-abuse than just using an app without attestation? It's security theater and has no basis in reality.

Can you scan a check from your web browser? Maybe I'm wrong, but probably not; frankly, it's a logistical miracle we can do this from our phones and the banks tolerate it, but I can see why they would still want to minimize all risk involved. The second reason though I can think a bank would want attestation is as an anti-piracy measure. With a website, you have HTTPS verifying the identity of the domain. With an app…

> Can you scan a check from your web browser? Maybe I'm wrong, but probably not; frankly, it's a logistical miracle we can do this from our phones and the banks tolerate it, but I can see why they would still want to minimize all risk involved.

ATMs just scan the checks now too, so why have the middle man? Usually there are limits on customer scanned deposits though, in the range of $5,000-$25,000. I've never heard of a limit on ATM deposits, although I'm sure there is one; I have had atms in WA decline to process warrants from CA state (like a check, but sometimes California has to wait for next fiscal year to clear it).

Re: LineageOS 22

#144

Post by okanat »

sunaookami wrote: post #94
okanat wrote: post #83

Earlier quoted context omitted.

Whatsapp and Signal are fine. Random banking apps suck because their myopic and incompetent policies around custom OSes. Especially here in Germany where banks and even tech company management see internet as a magic, totally untrustworthy new curiosity. Combined with the overall extreme risk-averse society, basically none of the bank apps from big banks work with custom OSes. All require various levels of "hacking".…

Anecdote: I develop an app for a bank at my job in Germany and I was forced to implement root detection because of some annoying pentest. Everyone agreed that it was just security theater + checkbox compliance but it "had to be done"...

I think detecting root and displaying a warning about risk is okay. N26 does it, so does Scalable Capital.

However Sparkassen, Deutsche Bank etc all refuse to work on Lineage OS at all *without any actual root solution installed*. I actually don't want any root access, I can use recovery mode and even write special permission XMLs if certain apps need it.

I just don't want bundled Google Dialer etc in stock ROMs that is feeding more data to Google about me and my loved ones. I keep my and my family's contacts in a private cloud solution. I don't use GMail for private e-mails. Nor Google Calendar. Removing these apps break stock ROMs due to special permission modifications Google did. Lineage OS is my escape but the stupid banks reliably choose stupidest security theather solutions that you were forced to implement.

Re: LineageOS 22

#145

Post by Semaphor »

fiso64 wrote: post #141
gjsman-1000 wrote: post #114

Earlier quoted context omitted.

Can you scan a check from your web browser? Maybe I'm wrong, but probably not; frankly, it's a logistical miracle we can do this from our phones and the banks tolerate it, but I can see why they would still want to minimize all risk involved. The second reason though I can think a bank would want attestation is as an anti-piracy measure. With a website, you have HTTPS verifying the identity of the domain. With an app…

>The last thing I want, or the bank wants, is some grandmother downloading the "Wells Fargo Bank Plus with Giant Legible Accessible Text" app she saw in an ad as an APK, installing it, and being a victim of silent fraud for years. I don't think this happens nowadays. Android will either block by default or give you a million prompts and warnings before it allows you to install an apk from an unknown source. It's far,…

A million prompts? It's exactly one prompt to permanently allow a source.

Re: LineageOS 22

#146

Post by n144q »

zozbot234 wrote: post #101
pimterry wrote: post #99

Love to see the ongoing progress here, but I'm really starting to worry that the growth of attestation on Android will make using custom ROMs like LineageOS impossible in future. Is there any way we can fight this? Feels like there must be some EU/US consumer rights or digital market legislation somewhere that could be used to more directly object to organizations like banks saying "your phone works just fine but we…

Just buy a separate low-cost device and use that only for your banking. It's a total non-issue, there are way more nefarious uses of SafetyNet/the attestation API's.

> It's a total non-issue

Buying a separate device and carrying it all the time just for banking is a big ask for most people, even for geeks who hack their Android phones.

Re: LineageOS 22

#147

Post by red-iron-pine »

gessha wrote: post #32
AdmiralAsshat wrote: post #27

Earlier quoted context omitted.

Good to know, as I still use an S5e as my comic reader. It's not getting security updates anymore, but to be honest it's not like I'm running banking software on it, so I don't care as much about malware risks as, say, my phone. It's still plenty speedy on stock firmware.

What would be the attack vectors for malware on a tablet? I’m genuinely curious how crucial updates are for older devices.

anything internet facing has a ton. you're using it to browse a site that gets ad and you've got a vector -- wouldn't be the first time legitimate sites like NBC (nbc.com) served 3rd party adds with malicious iframes embedded in 'em.

mom takes her out of date tablet to check the news and bam she's rooted.

Re: LineageOS 22

#148

Post by climb_stealth »

chasil wrote: post #10
climb_stealth wrote: post #9

Earlier quoted context omitted.

Out of curiosity, what do you buy? I had Xiaomi last and bought another one recently and they have made it pretty much impossible to unlock the bootloader. Apparently limited number of unlocks at 12am Beijing time. I have tried a few times, read through all the complaints and the community forums, and Xiaomi can very kindly just fuck off. It used to be really good value for money as the hardware is great. But without…

VoLTE is a huge consideration for older devices, and it is best to avoid Samsung. Pixels are the reference. Whatever you buy, verify VoLTE.

Very true, yes. 4G connectivity is the main reason for me to upgrade. My Poco F1 doesn't support the main 4G frequency used in Australia. So connection and bandwidth is pretty crappy since 3G got sunset.

Unfortunately the intersection of phones with headphone plug, SD card slot, decent RAM and hardware, not being huge, and supporting lineageos is pretty much nonexistent nowadays.

Re: LineageOS 22

#149

Post by climb_stealth »

Scene_Cast2 wrote: post #11
climb_stealth wrote: post #9

Earlier quoted context omitted.

Out of curiosity, what do you buy? I had Xiaomi last and bought another one recently and they have made it pretty much impossible to unlock the bootloader. Apparently limited number of unlocks at 12am Beijing time. I have tried a few times, read through all the complaints and the community forums, and Xiaomi can very kindly just fuck off. It used to be really good value for money as the hardware is great. But without…

Oh interesting. I was planning to get a Xiaomi as my next phone; I recently heard that they limited the number of unlocks to one per person per year. I got a OnePlus and a Pixel. Before that it was a ZTE, but they aren't unlock-friendly these days.

I'd say stay away from it! From what I understand it mostly depends on what OS is running on the phone.

Phones on their old Xiaomi OS can be unlocked reliably. You have to register an account, wait 30 days, and use the unlock app on a Windows computer. It's annoying but doable. But, the current Xiaomi HyperOS is where the insanity starts. It's pretty much impossible with arbitrary limits of global unlocks per day. The app constantly telling you to try again the next day and stupid stuff like that.

I've had that phone sitting in a drawer for a month or so now. It's just not worth it. And I'm not going to put anything personal on their shipped OS. When system apps come with popup ads to install dodgy crypto apps I'm not going to trust it.

Re: LineageOS 22

#150

Post by sureglymop »

TwoNineFive wrote: post #39
doublepg23 wrote: post #3

Highly recommend the Samsung S5e Tablet with LineageOS. It’s an amazing tablet for comics and light reading. Hard to beat its high res AMOLED display, incredibly light weight, and decent enough specs (I haven’t personally seen slowdowns when using Lineage on a minimal install). Forgoing gapps gets you crazy standby time. Couple things to note is it doesn’t have a headphone jack (it is legitimately that thin though) a…

The S5e is super old and many devices are likely facing battery age issues. I wish I had known this device was going to see long-term support like it received. I would have bought one at the time. The only modern tablet officially supported is the Pixel Tablet (tangopro). It's good enough but the screen quality isn't as nice as I would like. It should be supported for many years to come due to it's SoC being common t…

I really want to move to an android tablet but love the writing on an ipad pro. Does a pixel tablet support writing/drawing with a pen and palm detection? And more importantly is there any good software support (e.g. apps like goodnotes) for that? A pixel tablet with graphene os overall sounds awesome.
Post reply on HN