Live data from Hacker News

The Vietnam government has banned rooted phones from using any banking app

xdaforums.com

61–70 of 643 posts

Re: The Vietnam government has banned rooted phones from using any banking app

#61

Do those same banks have websites that you can access from a computer with root access? Most likely, yes.

Maybe a tiny difference though is that a phone is moved all day long, with a lot of people around to mess with or pick it. Your laptop is a bit larger and your desktop .. well is behind your door. But yeah ultimately a bank should not rely on phone OS to have security.

Re: The Vietnam government has banned rooted phones from using any banking app

#62

Do those same banks have websites that you can access from a computer with root access? Most likely, yes.

Eventually though I suspect that web access to banks will be rescinded too, much like HMRC in the UK no longer permits companies to submit their taxes through the websites. In the future, everything will need an 'app'.

That seems to be the way the wind is blowing. Most new 'challengers' I've tried in the US either have no web access at all, or limited access that lets you view balance but not do things like transfers.

Re: The Vietnam government has banned rooted phones from using any banking app

#63
post #22
post #5

I really don't understand this. My line of thinking is that if someone is technical enough to root his phone he understands the risks. Why would they force banking apps to detect and not work on rooted phones? Why would the government care so much?

A phone given for repair by a non-technical person can be rooted without their knowledge. The repair person potentially can install malware. We cannot assume the owners of the rooted phone themselves have rooted the phone.

Practically, verified boot is hard to not have a "this phone has been tampered with" message on boot, the backups generated often have encrypted user data that is usually wiped on boot-loader unlock, you'd also need to unlock the phone or have the user give the pin over and most of the apps that implement root checking SDKs would prevent them from working.

I'm not saying its impossible but it is hard to do at present in a way where if I came and picked up my phone again, I'd not know something happened to it.

Re: The Vietnam government has banned rooted phones from using any banking app

#64
post #25

Do those same banks have websites that you can access from a computer with root access? Most likely, yes.

I assume the bank apps have functionality that their websites lack. Like being able to tap to pay for things, etc. Where a rooted phone might make fraud easier. If not, then this really makes no sense.

Malware is more easily spread onto rooted phone, that's for sure.

From they you can keylog. Highjack input listeners, basically do anything you want.

Re: The Vietnam government has banned rooted phones from using any banking app

#65
post #35

Do those same banks have websites that you can access from a computer with root access? Most likely, yes.

There's a trend of online banks forcing the use of an app. I can't login to one of my banks' website since last year without using a QR code from their app. Of course they slathered the app with tracking, 'security', and analytics SDKs, so rooted devices are rejected. I had no way to log into this bank account after they made that change, which is simply wonderful. Anyways, they're not yet at the point where they've…

Yep, hardware attestation is becomming more common, even with websites.

This is why LineageOS is actually dead in the water, even though they're "in talks with hardware vendors". It doesn't matter when people can't use the apps and services they need.

Re: The Vietnam government has banned rooted phones from using any banking app

#66
post #32

Earlier quoted context omitted.

At the cost of making society even more dependent on Google and Apple.

“Every high civilization decays by forgetting obvious things.”

Quite a contrast from the quote about civilization advancing in proportion to the size and scope of things it can achieve automatically.

Dug it up. Alfred Whitehead:

It is a profoundly erroneous truism, repeated by all copy books and by eminent people when they are making speeches, that we should cultivate the habit of thinking of what we are doing. The precise opposite is the case. Civilization advances by extending the number of important operations which we can perform without thinking about them.

Re: The Vietnam government has banned rooted phones from using any banking app

#68

Earlier quoted context omitted.

Eventually though I suspect that web access to banks will be rescinded too, much like HMRC in the UK no longer permits companies to submit their taxes through the websites. In the future, everything will need an 'app'.

Don't like that. I'm of the "if you're going to do something important, do it on your PC" generation. I do not want a future where I lose my phone and I can no longer access my bank.

Claim you don't have a phone, and they'll find a solution.

Re: The Vietnam government has banned rooted phones from using any banking app

#70
post #5

I really don't understand this. My line of thinking is that if someone is technical enough to root his phone he understands the risks. Why would they force banking apps to detect and not work on rooted phones? Why would the government care so much?

"detect unauthorized interference with the Mobile Banking application"

I wonder if this has become a feasible avenue for scammers to interfere via other apps they could convince someone to install on rooted phones. Or if they are worried about skilled people being able to debug/MITM and find vulnerabilities on the banks.

Though from that statement alone, sounds more of a measure to protect banks than customers.

Post reply on HN