Live data from Hacker News

Tell HN: PayPal blocks GrapheneOS

news.ycombinator.com

191–200 of 361 posts

Re: Tell HN: PayPal blocks GrapheneOS

#192
post #46

Earlier quoted context omitted.

Does this work in the UK?

No. We left the EU, so we don't get such fun.

Wero also isn't implemented EU-wide either, so it's still possible as long as the banks play ball.

UK politics has been quite isolationist, though, so I doubt the banks will see much in interoperating with the rest of Europe.

Re: Tell HN: PayPal blocks GrapheneOS

#193

Earlier quoted context omitted.

Generally I think the issue is that there's a tension between your security vs Paypal's security (deliberate, motivated bad actors). Maybe an analogy could be about using metal detectors as a layer to reduce bank robberies. A gun in a good guy's hands is a good thing to prevent robberies. Guns in a bad guy's hands are a bad thing to prevent robberies. Paypal knows you have a gun but they don't know if you're a good g…

The cherry on top is that their web site invariably still works so the refusal to work via app is an intentional manipulation tactic to harvest more consumer data for sale.

I'm fairly skeptical the website supports NFC payments.

Re: Tell HN: PayPal blocks GrapheneOS

#194

It works here. Running in a work profile, no contactless payments. Play Integrity API: Not blocked Hardened memory allocator: Enabled Memory tagging: Enabled Extended virtual address space: Enabled Secure app spawning: Enabled Native code debugging: Allowed WebView JIT: Disabled Dynamic code loading via memory: Allowed Dynamic code loading via storage: Allowed

This is my setup as well, though with JIT enabled (which is the default). Crashing at launch on:

    version 10.10.0

    com.paypal.android.p2pmobile
    versionCode 1160090162
Seems pretty likely a flawed root detection being rolled out (given the stack trace), my phone is not rooted.

Re: Tell HN: PayPal blocks GrapheneOS

#195
post #17

This is arguably the most irritating thing with just about every largecorp developer: "os that hasn't been updated in 6 years? Sure boss!". Os that is built specifically around security and privacy with daily updates: "No, you can't do that". Annoying - yes. Safe way to make sure I will stop being your customer - also YES!

Might be more a matter of "OS with millions of users" vs. "OS with dozens of users".

Re: Tell HN: PayPal blocks GrapheneOS

#196

Earlier quoted context omitted.

Ironically, I had to apply Hanlon’s Razor to the impolite tone of your post

"Ironic" means saying the opposite of what you mean in order to be funny or sarcastic. So that would mean you think I was both polite and not an idiot. Jokes on you though, I'm neither of those things.

[deleted]

Re: Tell HN: PayPal blocks GrapheneOS

#197
Have you explicitly enabled root access? GrapheneOS does not do so by default, in fact their documents explicitly mention that enabling root access weakens the OS's security posture. Many app protection frameworks detect root access and block by default.

Re: Tell HN: PayPal blocks GrapheneOS

#198

Isn't this more about PayPal disliking a rooted device rather than Graphene? I used to have all kinds of issues with financial apps when I was rooted, regardless of OS

Flawed root detection issues are kinda common to see when running Graphene, tbh I suspect this is just an accident - it very much is not the first time, nor the first for PayPal.

Re: Tell HN: PayPal blocks GrapheneOS

#199
post #84

Earlier quoted context omitted.

Easy to say when you are in a country where you have a lot of options. There's some countries with very bad financial sector where your option is PayPal or Western Union as the local banks don't know how to do international transfers, Remitly doesn't support all countries and Wise also doesn't work. PayPal works, even if they charge fees.

Which countries have local banks that don’t know how to do international transfers?

Oftentimes it's not necessarily that they don't know, but unless two international banks have a direct relationship, they have to use intermediary banks. Even my parent's large bank in Australia, when wiring me a gift towards my home purchase, had to go via an intermediary bank who could then forward-on to my bank.

Re: Tell HN: PayPal blocks GrapheneOS

#200
post #74

Earlier quoted context omitted.

They have blocked rooted phones based on the error provided. Nothing to do with verification. They treat rooted phones to a level they don't with phones without critical security updates. That's the tension. Non-rooted phones aren't necessarily unsafer.

Graphene isn't rooted....

We don't know if the OP has rooted their phone in addition to installing Graphene.
Post reply on HN