[dead]
The Vietnam government has banned rooted phones from using any banking app
271–280 of 643 posts
Re: The Vietnam government has banned rooted phones from using any banking app
#272Earlier quoted context omitted.
My job's SSO moved to provider that either required an unrooted phone or a reliable Voice auth. For 2 years the voice authentication worked fine (they call me, I type in a number) on my regular rooted phone. Then one random morning I just stopped getting the phone calls. "Network said no". Complete lock out, nothing I could do except go out and panic-buy an unrooted phone not running Lineage and using a modern Androi…
This does sounds like the situation where the employer should provide you with the phone.
Indeed. Never spend your own money on work related expenses. If your job requires a phone, they need to provide one.
Re: The Vietnam government has banned rooted phones from using any banking app
#273Earlier quoted context omitted.
I don't think card readers can display payment information, can they? And I have no idea why, but no bank offers photoTAN devices in my country. They seem like an interesting concept, even though I imagine the underlying hardware isn't far from that of a phone, in the end.
The card readers have an LCD display that shows the information.
How do they get this information in the first place, though? Do they have a QR code reader?
Re: The Vietnam government has banned rooted phones from using any banking app
#274Earlier quoted context omitted.
A solution could be having a tiny non-rooted Android system as a "coprocessor".
This won't work. The tiny non-rooted system wouldn't get certified by Google and therefore not pass hardware attestation, which most banking apps use.
Well you could take a certified system off-the-shelf and integrate it into a bigger thing.
Re: The Vietnam government has banned rooted phones from using any banking app
#275So, if you cannot cryptographically prove to a remote server that your device is running essentially unmodified, vendor-signed software, you are locked out of the economy? The irrefutable part here is that the security model works. Locking down the bootloader and enforcing TEE signatures does stop malware. But it also kills user agency. We are moving to a model where the user is considered the adversary on their own…
Yeah. Tech companies are coming for our hardware. Next step is OSes with agentic AI turning it from a system with frameworks and libraries with apps seperate from the base system, into a system that only runs AI models that the "owner" of the hardwre has no control over and the lines between the OS and the AI is very blurred.
This totally beats the purpose of owning or using tech. Might as well go off grid and live a non-tech life.
Big tech wants to colonize our hardware completely because data centers alone ain't cutting it.
1$ Trillion has to be paid back to the investors plus interests. They screwed up with AI and we have to pay for it. Or maybe they didn't screw up because big money always gets bailed out by the plebs.
Re: The Vietnam government has banned rooted phones from using any banking app
#276Earlier quoted context omitted.
As I mentioned in another post: By 2026, you'll need two phones. My current setup: 1) An unmodified iPhone SE (2022 model) with OS support until 2032. This runs all my authentication, banking, health, etc. It is in airplane mode 99% of the time unless I need it. 2) The second is a Pixel 9a with Graphene OS for daily use, routing and internet access. This is expensive, but I found it to be the only viable solution to…
the iPhone still does bluetooth transmissions/pings even in airplane mode (the find my device thing) and no way to disable the only way to disable any transmissions is to turn off the device
iPhones will transmit bluetooth beacons even if turned off. Fortunately the battery goes completely flat after a couple of weeks or so and then they no longer do. Unfortunately this is not very healthy for the battery.
Re: The Vietnam government has banned rooted phones from using any banking app
#277Earlier quoted context omitted.
Well, I've built a bunch of mobile banking apps and we did detect if the phone was rooted, was in dev mode, etc. and it is not because we were "stupid, consumer-hostile, and anti-competitive". If someone steals the secrets from a rooted phone and steals customer's money the bank is on the hook, so banks do everything they can to minimize this risk. There is no way to store customer's secrets in a PC browser securely,…
> If someone steals the secrets from a rooted phone and steals customer's money the bank is on the hook, so banks do everything they can to minimize this risk. Now that's just not true now, is it? Sure the lawyers told you that (the ones that get paid to tell you that), but nowhere in EU was a bank actually fined for not root checking a device. They were plenty fined by being utterly incompetent with security practic…
Literally three days ago: https://www.complianceweek.com/regulatory-policy/eu-agrees-r...
"Payment service providers (PSPs) operating in the EU will have to cover customers’ losses from fraud if their fraud protection regimes are inadequate or poorly implemented under new EU rules."
Other places like the UK had such rules already.
Re: The Vietnam government has banned rooted phones from using any banking app
#278Earlier quoted context omitted.
Well, I've built a bunch of mobile banking apps and we did detect if the phone was rooted, was in dev mode, etc. and it is not because we were "stupid, consumer-hostile, and anti-competitive". If someone steals the secrets from a rooted phone and steals customer's money the bank is on the hook, so banks do everything they can to minimize this risk. There is no way to store customer's secrets in a PC browser securely,…
Why don't banks just make desktop computer applications?
PC platforms don't have remote attestation infrastructure working.
Re: The Vietnam government has banned rooted phones from using any banking app
#279Earlier quoted context omitted.
It's the ability to take a picture of a check and deposit it into your account that way, vs having to take the check to an actual branch of a bank. Here in the US, I still get checks frequently enough that it's nice to have.
I'll bet the confusion stems from the rest of the world having essentially forgotten what is a check/cheque almost a generation ago. I only used them twice in my life, last one was in 2012 and I had to get a supervisor at the bank to find the procedure to get a checkbook at the time.
In the US, a lot of small employers still issue paper payroll checks.
Re: The Vietnam government has banned rooted phones from using any banking app
#280India doesn’t have a single “govt ban rooted phones from banking apps” rule, but RBI’s digital payment security controls explicitly allow banks to block mobile apps on rooted/jailbroken devices, and many do. Combine that with device+SIM binding requirements and platform attestation (e.g., Play Integrity), and the practical result is often “no banking/UPI on rooted phones.”