Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Vietnam government has banned rooted phones from using any banking app

xdaforums.com

Post reply on HN
Print view View original

561–570 of 643 posts

Re: The Vietnam government has banned rooted phones from using any banking app

#561

Post by itake »

Zak wrote: post #132
ecshafer wrote: post #119

When I used to work on the Vanguard authentication team, we blocked Vietnam from access because of too much fraud (not my choice). But it was funny because we had Vietnam based clients, so there were a couple HNW clients in the logs that you could see who would log in from Vietnam/Russia/Wherever, get blocked, open their vpn, then log in from England. This was a while back, but even then there was a push for things l…

I'd be really interested to know whether a significant amount of fraud and fraud attempts involve devices with root or non-stock operating systems. This has always struck me as a matter of checkbox compliance rather than a commonly-exploited attack vector, though I'll grant that's partially because few people actually use such devices.

I work at Grab (SEA rideshare and licensed bank, but not licensed in VN).

A significant amount of fraud comes from scammers convincing victims to installed malicious apps. They fake being a customer service provider.

Banks don't want their customer's to lose their money and they don't have the tools to protect them from themselves. For all the privacy reasons, app stores don't even banks enough tools to identify and block this fraud.

Re: The Vietnam government has banned rooted phones from using any banking app

#562

Post by miki123211 »

The point of blocking rooted devices often isn't to protect your account, it's to protect other (often unsophisticated) customers of the organization against automated attacks.

Rooted devices aren't the problem, Python scripts pretending to be rooted devices are. There's just no way to distinguish between the two. The only way to disallow automated Python scripts from logging to your grandma's bank account is to also disallow you from logging into yours if your phone isn't blessed by Google.

Re: The Vietnam government has banned rooted phones from using any banking app

#563

Post by JCattheATM »

craftkiller wrote: post #386
fn-mote wrote: post #348

Earlier quoted context omitted.

The most is ATM access if you want that.

FWIW my US bank works on GrapheneOS and they refund all ATM fees, so you can use any ATM you want. The only issue I've run into with them is they have a Zelle integration which is only available on the phone, and on GrapheneOS it just loads to a blank white screen. But that seems to be Zelle's fault. The bank is Charles Schwab if anyone is looking for a currently-compatible-with-GrapheneOS bank in the US.

Charles Schwab also supports the current administration for anyone that wants to bank morally.

Re: The Vietnam government has banned rooted phones from using any banking app

#564

Post by cwillu »

miki123211 wrote: post #562

The point of blocking rooted devices often isn't to protect your account, it's to protect other (often unsophisticated) customers of the organization against automated attacks. Rooted devices aren't the problem, Python scripts pretending to be rooted devices are. There's just no way to distinguish between the two. The only way to disallow automated Python scripts from logging to your grandma's bank account is to also…

So make a toggle in the account settings that requires a blessed phone or an authenticated visit to the branch to set. There's nothing here that requires _my_ device to be authenticated in order to protect my grandma.

Re: The Vietnam government has banned rooted phones from using any banking app

#565

Post by JCattheATM »

sgc wrote: post #327
gabrielhidasy wrote: post #211

Earlier quoted context omitted.

Tap a bankcard? You can even tape it to the back of your phone

I might be paranoid, but I like that my bankcards are in a metal case (I got it because it's water/dustproof, but I like the bonus) and I like that Wallet only activates the rfid for a second, then I'm no longer broadcasting.

Even if someone cloned your card info, they couldn't use it to do anything.

Re: The Vietnam government has banned rooted phones from using any banking app

#566

Post by JCattheATM »

adrr wrote: post #354
Ritewut wrote: post #299

Earlier quoted context omitted.

What app developers find most valuable is what other apps you use and what competitors apps you have so they can target you more effectively. If you have Peloton or Tonal, they want to know if you have the Strava app on your phone for example.

Only on older versions of Android. Apps are very locked down on what you can get. I would have loved to be able to fingerprint a device when i was at the challenger bank and application list is very good for fingerprinting.. We would fingerprint on the web to detect bots.

> application list is very good for fingerprinting..

So is the personal, private content of my texts, why not go for that while you're at it?

Re: The Vietnam government has banned rooted phones from using any banking app

#567

Post by JCattheATM »

abdullahkhalids wrote: post #91
Arbortheus wrote: post #4

Do those same banks have websites that you can access from a computer with root access? Most likely, yes.

TD Canada is forcing me to use their app. Every time I make an online transaction which to them is too large or fishy in some way, they make me login into the app on my phone to approve the transaction. That's the only way.

Close the account to change banks and let them know why.

Re: The Vietnam government has banned rooted phones from using any banking app

#568

Post by deaux »

thisislife2 wrote: post #372
ploxiln wrote: post #365

Earlier quoted context omitted.

I think, practically, everyone will need at least a cheap-ish android or iphone, perhaps $300 (and a new one every few years ...), to be their locked-down "agent" for using financial or government services. It's not for you, it's for the government/banks, it is their agent for talking to you. Kinda weird, if you think about it. But that seems to be the way it's heading.

Or ... just don't install the apps and use the browser to do your banking.

How are people on HN of all places still this short-sighted to not understand that this will stop being an option? It's incredible to see like 10 individuals commenting this all over threads like these. Think before you comment.

Re: The Vietnam government has banned rooted phones from using any banking app

#569

Post by [deleted] »

Sophira wrote: post #502
xeonmc wrote: post #387

Earlier quoted context omitted.

If buying is not owning, pirating is not stealing. Piracy isn’t merely a virtue, but a moral imperative, an obligation to uphold civic freedom. It is immoral not to pirate. It is everyone’s duty to do their part in normalizing and encouraging piracy.

Pirate... what? A phone? Android? Banking apps? The problem here isn't the money, it's the lack of privacy and control. The best analog I can think of to piracy in this situation would be rooting the phone/installing GrapheneOS. And, yeah, that's definitely something people should do if they want that control, but I really hope people don't put it in the same category as piracy...

[deleted]

Re: The Vietnam government has banned rooted phones from using any banking app

#570

Post by lfliosdjf »

deaux wrote: post #568
thisislife2 wrote: post #372

Earlier quoted context omitted.

Or ... just don't install the apps and use the browser to do your banking.

How are people on HN of all places still this short-sighted to not understand that this will stop being an option? It's incredible to see like 10 individuals commenting this all over threads like these. Think before you comment.

Its already not an option in India with axis bank. Without mobile you can't do digital login.
Post reply on HN