Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

HSBC blocks its app due to F-Droid-installed Bitwarden

mastodon.neilzone.co.uk

Post reply on HN
Print view View original

231–240 of 242 posts

Re: HSBC blocks its app due to F-Droid-installed Bitwarden

#231

Post by strobe »

throwaway290 wrote: post #89
embedding-shape wrote: post #20

Earlier quoted context omitted.

> and the EU are being de-banked by local banks because of US pressure allowing them to force any bank that wants to use USD What is this about? I'm a EU citizen, never heard about any EU citizen getting removed from any EU bank because of USD. Nor have I heard anyone being sanctioned by the US in the EU unless they're Russia-related somehow. Is there any link to a story about this?

> unless they're Russia-related somehow this is doing a lot of work. at what point person stops being Russia related in your view?

From what I heard, even if a person is an EU citizen and does not have dual citizenship but was born in some ex-USSR/CIS countries. For example, if they migrated with their parents at the age of 1y, they will always be considered a higher-risk client by EU banks and will always be under some suspicion. So if that true is not possible to stop being related at least fully.

Re: HSBC blocks its app due to F-Droid-installed Bitwarden

#232

Post by danw1979 »

aliher1911 wrote: post #137
danw1979 wrote: post #125

HSBC still operate a perfectly functional website for banking. The more people who continue to use this, the better. It sends a clear signal that customers prefer the open web over restrictive and inconvenient mobile apps. I’m also hanging on to my bank’s physical RSA fob as my 2FA, instead of using their app based version.

At least in UK, you'll need a physical token to do that. And you can't have both app and token. So if you had an app that is now not working, it'll take some time to get a token and restore your bank access.

I have both the app (“digital key”) and a physical RSA token with my bank in the UK.

Re: HSBC blocks its app due to F-Droid-installed Bitwarden

#233

Post by cinntaile »

embedding-shape wrote: post #178
cinntaile wrote: post #133

Earlier quoted context omitted.

It's not just registering. This assumes you had a job contract lined up or sufficient funds to support yourself.

I had neither when I moved, sold my things, tried to survive, ended up sleeping outside for a few days and I found a job after I moved here, not before. But yeah, there is one or two more appointments in reality, one for the social security and one for registering with your local city government, both a lot easier to get than the residence permit which can be a bit of a hassle unless you work with agencies to get it.

You found a job after you moved but before you could register for all kinds of services I presume. Once you have a job, everything becomes "easy".

Re: HSBC blocks its app due to F-Droid-installed Bitwarden

#234

Post by bgbntty2 »

Youden wrote: post #136
denysvitali wrote: post #107

Earlier quoted context omitted.

At least in Switzerland banks can choose to not use Play Integrity, but they generally don't want to. Yuh, which once was owned by both Postfinance and Swissquote, works without Play Integrity. Support for GrapheneOS is confirmed - see https://github.com/PrivSec-dev/banking-apps-compat-report/is... The real issue is that most "legacy" banks have to comply with stupid regulations that force them to come up with these…

I use GrapheneOS in Switzerland and am yet to find a bank or financial app that doesn't work. ZKB, UBS, Cembra, BEKB, SGKB, WIR, N26, Revolut, debiX+, SaxoTrader, Swisscard, various TWINT apps, YAPEAL and Yuh are all installed on my phone right now and all work. Most of them don't use the Play Integrity API at all and the few that do are satisfied with the minimal level that's satisfied by GrapheneOS. The catch is th…

Are all of these apps only available through Google's Play Store repo, or are any of the available as an apk file directly from the bank's site? For some reason most companies only distribute their apps through Google and Apple's repos. People shouldn't have to have an account with and agree to a third party US company's ToS just to download a banking app.

Why are Google Play Services required?

Genuine questions - I'm not from Switzerland and I don't have a Google account.

Re: HSBC blocks its app due to F-Droid-installed Bitwarden

#235

Post by compsciphd »

andrepd wrote: post #221
compsciphd wrote: post #201

Earlier quoted context omitted.

https://www.ohchr.org/en/press-releases/2023/10/gaza-un-expe... This is her statement essentially saying Israel bombed a hospital that we now know as close to a fact as we can, that they did not and that in fact it was a palestinian rocket that fell on the hospital. But lets say we can't know that for a fact. She was still parroting Hamas's line without any ability to validate the statement. This statement amongst ma…

If the best case you can make for your position is a retracted statement from over two years ago, consider that perhaps your position is not as strong as you think. Anyway > On Friday 13 October, Israel ordered hospitals and the population of northern Gaza to evacuate to southern Gaza. Because of insufficient beds in the southern Gaza Strip and no means of transporting patients, such as newborns in incubators or pati…

I'm responding to "being a mouthpiece of Hamas" that you reject. This is one case out of many where she parroted their line completely without any critical thinking. Hence, why I think its a fair statement.

With all that said, I doubt (be happy to be proven wrong) you complained at all when europe and the US "extra-judicially" sanctioned Israelis (I personally don't care that they got sanctioned). Heck, I'd hazard to say that you would welcome "extra-judicial" sanctions on many Israelis. You believe its a "genocide", so if the only available tool to stop the "genocide" is extra-judicial sanctions, would you really say "no, we can't do that!". I don't believe you would.

Or what about all the russian oligarchs that have been sanctioned. did that bother you to say anything? Again, doesn't bother me that they got sanctioned, but if you want to die on the "extra-judicial" hill, I believe you are going to get buried by all the bodies of all the sanctions you ignored that you tacitly supported.

as an aside your "obvious" explanation, was obviously not true in retrospect, so why was it so obvious that one had to make a statement that one in retrospect obviously did not have the information to make. to me its just as obvious that she doesn't care about the truth.

Re: HSBC blocks its app due to F-Droid-installed Bitwarden

#236

Post by idle_zealot »

627467 wrote: post #226
idle_zealot wrote: post #205

Earlier quoted context omitted.

> Everyone goes to the "simplest" target - Google in this case - to blame for the status quo, but Google is in this position because everybody else Eh, I think we ought to dole out our ire in accordance with the damage. All are responsible to varying degrees, but Google is the most powerful, and has the greatest ability to curb bad behavior if they wanted to, so they get and deserve the most blame second only to the…

Dole out the ire, but it won't fix the problem until you realize that everyone's dismissal of ownership and responsibility in exchange for convenience is what creates the googles and apples of the world. Google will argue they are enforcing good behaviour: if you want to rely on their technical guarantees you follow their rules/specs.

> Dole out the ire, but it won't fix the problem until you realize that everyone's dismissal of ownership and responsibility in exchange for convenience is what creates the googles and apples of the world

This is the opposite of true. Blaming normal human behavior for our problems is distraction from effective action. Humans are a near-constant, you have to look to incentive structures to make any changes to the world.

Re: HSBC blocks its app due to F-Droid-installed Bitwarden

#237

Post by TheCleric »

merek wrote: post #155

If you've ever built a website for mobile but never heard of PWAs (Progressive Web Apps), I recommend checking them out. In essence, adding 2 files can make the site installable from a mobile browser and define caching behavior for offline functionality. 1. manifest.json: a JSON file that defines the app's name, icons, theme colors, and how it should launch when installed. 2. Service worker: a JS file that controls t…

Considering Mozilla’s flagship browser (Firefox desktop) doesn’t even support the feature, I don’t exactly take that as a good sign.

Re: HSBC blocks its app due to F-Droid-installed Bitwarden

#238

Post by tim333 »

denysvitali wrote: post #107
sschueller wrote: post #9

That's Google's SafeNet. HSBC picked a level that causes this. Google manages the blacklist of apps. We are rapidly losing our freedoms to the will of these companies. If they decide they don't want to they can even if the law doesn't forbid it. People in Switzerland and the EU are being de-banked by local banks because of US pressure allowing them to force any bank that wants to use USD. The US has started to sancti…

At least in Switzerland banks can choose to not use Play Integrity, but they generally don't want to. Yuh, which once was owned by both Postfinance and Swissquote, works without Play Integrity. Support for GrapheneOS is confirmed - see https://github.com/PrivSec-dev/banking-apps-compat-report/is... The real issue is that most "legacy" banks have to comply with stupid regulations that force them to come up with these…

>"legacy" banks have to comply with stupid regulations

In the UK "banks are required to refund unauthorized payments". Is that a stupid regulation? I quite like it but you can understand why it would make the banks worry about being hacked.

Re: HSBC blocks its app due to F-Droid-installed Bitwarden

#239

Post by denysvitali »

bgbntty2 wrote: post #234
Youden wrote: post #136

Earlier quoted context omitted.

I use GrapheneOS in Switzerland and am yet to find a bank or financial app that doesn't work. ZKB, UBS, Cembra, BEKB, SGKB, WIR, N26, Revolut, debiX+, SaxoTrader, Swisscard, various TWINT apps, YAPEAL and Yuh are all installed on my phone right now and all work. Most of them don't use the Play Integrity API at all and the few that do are satisfied with the minimal level that's satisfied by GrapheneOS. The catch is th…

Are all of these apps only available through Google's Play Store repo, or are any of the available as an apk file directly from the bank's site? For some reason most companies only distribute their apps through Google and Apple's repos. People shouldn't have to have an account with and agree to a third party US company's ToS just to download a banking app. Why are Google Play Services required? Genuine questions - I'…

IIRC none of them is available from an alternative store

Re: HSBC blocks its app due to F-Droid-installed Bitwarden

#240

Post by wopian »

TheCleric wrote: post #237
merek wrote: post #155

If you've ever built a website for mobile but never heard of PWAs (Progressive Web Apps), I recommend checking them out. In essence, adding 2 files can make the site installable from a mobile browser and define caching behavior for offline functionality. 1. manifest.json: a JSON file that defines the app's name, icons, theme colors, and how it should launch when installed. 2. Service worker: a JS file that controls t…

Considering Mozilla’s flagship browser (Firefox desktop) doesn’t even support the feature, I don’t exactly take that as a good sign.

What? Firefox has supported the PWA standards for well over a decade at this point.

One of my old sites installed itself as a persistent PWA that made zero external network requests when relaunched.

Post reply on HN