We now come to the oblicatory question: Do banking apps work?

That was also my biggest concern before switching to a degoogled custom rom. At least for me in germany i had no issues with any of my banking apps

I hope this means GrapheneOS is coming to more devices. I'm not sure if it's the right thing for me but at least I'd like to try it out sometime.

You can check if yours work. Mine do, fortunately: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

Not if they don't meet their requirements. Why dies everyone fubs that hard to grasp. They well not compromise

Mine does, but I don't use it since hardware TAN generator.

If your banking app does not work, use your banking website. If your banking doesn't allow you to use their website, switch banks, because that means they don't give a fuck about you, and probably want to make you use their app, because it has trackers in it.

You are not the first one to ask this, and you won't be the last, but I am so damn sick of people asking, will my fucking banking app work? Fuck your fucking banking app. Why are people so willing to compromise their security for a fucking banking app?

Nothing personal against you, by the way.

It's not. This was a partnership. Motorola has to make dedicated hardware to support it. Most OEMs are completely disinterested in anything like that.

The EU has standards for security and banks require you to use a phone, and the banks don't give a fuck about outliers.

Motorola has to make dedicated hardware to support it.

Do they? Or just give gOS information under NDA?

That's BS i'm in the EU and i can use homebanking.
Also most banks here still use SMS verification, so much for security.

Then just get yourself a really fucking cheap secondary phone that you only turn on when you need to verify your banking. And that's it. That way you can still verify your bank shit, but the spyware doesn't get to have always on access to your primary device.

The devices will be available in 2027, according to GrapheneOS

https://grapheneos.social/@GrapheneOS/116092580774968482

Your bank does not need to use the app trackers to spy on you. They already know everything important there is about you.

What the banks are worried about is fraud. Fraud costs them money. But the thing is, the app development cycles are long and complicated, and instead of a pragmatic approach, they just bolt on more and more obscure non deterministic authentication schemes and heuristic checks. That's why the app wants to know things like your location and access to the list of other installed apps, and simple username and password are not enough to let you through anymore.

The device attestation for them is probably just another checkbox to tick on the list of "at least we tried". Regardles of whether it's actually relevant for security. As long as it saves them more money that it costs them, there's no reason to not enable it.

Yes they do. GOS has strict security standards for hardware.

I don't use banking apps, there are few features necessary for an app, and they all havw trackers in them. I make PWAs and all my banks and credit card sites work just fine.

Will these phones (regardless of OS) be supported in various countries lockdown of IMEIs.

My country blocked FairPhone 5 IMEIs, even though it meets requirements, as its not officially sold. Among other popular and official brands.

They basically can limit what phones you have now.

Oh, sure, and Motorola is just gonna bend the knee for a ROM...

No bank gives a fuck about you. You are right but just for perspective, banks here use their app for 2fa with the only other option being sms (which doesn't even work half the time) and which bank you use is pretty much dictated by your employer. Banks aren't even that bad as some countries require an app for gov id which may or may not work on grapheneos.

This is a regulation problem, it's not going away. The most a user can do is keep a second phone with android just for verification. I really wish we could just move to yubikeys at this point.

Brother, this is not speculation. GOS said this months ago.

bruh, most if not all banks in my country require a windows pc (with their rootkit "security software" installed) or a ("unmodified" ofc) android/ios phone sadly. simply using the website cleanly is not an option for many cases, in fact running one inside a secure android rom like graphene is actually one of the best solutions in this case.

I'm just going off of what I've been told by others. I don't live in the UK (yet).

I've never heard of it. What the...

https://forum.fairphone.com/t/fairphone-others-imei-banned-in-australia/129975

They don't know shit about me. They know my parents' address (where I don't live), my favourite ATMs and some of my online purchases. They also know how much I pay for energy and heating.