Asus refunds Zenfone buyer for failing to provide bootloader unlock tools

Post by Fire-Dragon-DoL » Sat, Apr 06, 2024, 8:15 PM UTC

0xcde4c3db wrote: post #111

Fire-Dragon-DoL wrote: post #83

Earlier quoted context omitted.

What are the downsides with GrapheneOS? I had a few problems with root (Netflix and banking apps) but would love my privacy. My main reason for root is the firewall to block outgoing connections from apps that are not supposed to do it

It's really a downside of the Google app ecosystem and not GrapheneOS per se , but apps requiring higher levels of integrity per Google attestation (Play Integrity/SafetyNet) generally won't work. Intentionally breaking apps on "untrusted" configurations is basically the point of that feature, and GrapheneOS does provide the relevant services, but would need to be specifically enabled by the app developer.

Post by jjmarr » Sat, Apr 06, 2024, 8:17 PM UTC

lxgr wrote: post #137

jjmarr wrote: post #68

Earlier quoted context omitted.

They do, but you can't get the card number from reading the chip. The protocol is a challenge-response one based on a private key stored within the chip. https://en.wikipedia.org/wiki/Chip_Authentication_Program You need to read the entire card number + cvc2 + expiry date with your camera. That's not skimming, that's just taking a photo of the card.

No, you can most certainly get the card number and expiry via the chip and even over contactless, as it’s a vital part of transaction routing/processing. There are Android apps that can do it.

Post by j45 » Sat, Apr 06, 2024, 8:24 PM UTC

adw wrote: post #91

solarkraft wrote: post #85

Earlier quoted context omitted.

How so? I thought a precedent was just any case that has been ruled in a certain way, irrespective of the court it has happened in.

Not all courts have the power to set precedent. Small claims courts in England don’t.

Post by written-beyond » Sat, Apr 06, 2024, 9:32 PM UTC

Cort3z wrote: post #62

Besides the point here, but why is it so diabolically hard to decline cookies on this site?

Post by Too » Sat, Apr 06, 2024, 9:47 PM UTC

The_Colonel wrote: post #175

Too wrote: post #134

Earlier quoted context omitted.

SMS is magnitudes less secure than the Secure Enclave in my phone. Fallback should never be the weakest link in a security chain. Especially not in something as high stakes as your banking login. I can’t remember how I got my first bank token in my phone. Probably by physically showing up in the bank office with my id.

SMS 2FA is not great, but still seems to be more secure than a rooted phone. If your SMS OTP leaks to the attacker, they still need to know the first factor (password, biometrics) to gain access. Meanwhile, if your rooted phone is controlled by an attacker ... that's it, the attacker has everything.