this post was submitted on 09 Dec 2024
471 points (100.0% liked)

Privacy

795 readers
29 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

cross-posted from: https://slrpnk.net/post/15995282

Real unfortunate news for GrapheneOS users as Revolut has decided to ban the use of 'non-google' approved OSes. This is currently being posted about and updated by GrahpeneOS over at Bluesky for those who want to follow it more closely.

Edit: had to change the title, originally it said Uber too but I cannot find back to the source of ether that's true or not..

top 50 comments
sorted by: hot top controversial new old
[–] HiddenLayer555@lemmy.ml 220 points 1 month ago* (last edited 1 month ago) (1 children)

This makes me want to use GrapheneOS more. If the dataminers don't want you to use it then it must be doing something right.

[–] 0x0@programming.dev 38 points 1 month ago (2 children)

Too bad it only runs on Google's phones...

[–] Realitaetsverlust@lemmy.zip 45 points 1 month ago (4 children)

It's only officially supported on google phones because sadly those are the only ones that are not modified to fuck which makes installing and supporting other OS'es way too much work.

Giving google money once for a device is not a problem from a privacy or security standpoint.

[–] Samsy@lemmy.ml 19 points 1 month ago (7 children)

That's correct, but not the reason grapheneOS chooses only pixel phones. It's the level of hardware security features.

load more comments (7 replies)
load more comments (3 replies)
[–] ryannathans@aussie.zone 10 points 1 month ago (29 children)

Right? Have to pay google for the privilege

load more comments (29 replies)
[–] Charger8232@lemmy.ml 83 points 1 month ago (3 children)

This is very bad news, because this means any app that wants your data could do the same.

[–] mp3@lemmy.ca 89 points 1 month ago (1 children)

On the other hand, it makes it easy to find which apps aren't to be trusted with your data.

[–] themurphy@lemmy.ml 41 points 1 month ago

Also very obvious when an app or website have an US and an EU version. You just know they buttfuck the Americans because no rules.

Even Apple had to make two versions of iOS.

load more comments (2 replies)
[–] AstralPath@lemmy.ca 66 points 1 month ago (1 children)

Fuck both of these companies. Never used McDicks app in the first place. Spyware bullshit.

[–] 3dogsinatrenchcoat@slrpnk.net 29 points 1 month ago (1 children)

The mcdonalds app is a scam to get you to agree to their arbitration clause

[–] AstralPath@lemmy.ca 11 points 1 month ago (1 children)

Care to elaborate? I'm curious.

[–] AstralPath@lemmy.ca 7 points 1 month ago (1 children)

Never mind. I found an article pretty quick. Thanks for the heads up anyway. :)

[–] pineapplelover@lemm.ee 13 points 1 month ago

Funny that news nowadays is citing tik tok and reddit comments

https://www.thedailymeal.com/1431937/mcdonalds-app-terms-waive-rights-trial/

[–] Railcar8095@lemm.ee 55 points 1 month ago (3 children)

Just to be clear, they banned all custom roms, not only graphene.

load more comments (3 replies)
[–] penquin@lemm.ee 38 points 1 month ago (4 children)

Webapps everything you can like I do with Firefox and ublock origin. Fuck these assholes.

[–] stom@lemmy.dbzer0.com 17 points 1 month ago (2 children)

Not for Revolut. App only.

load more comments (2 replies)
load more comments (3 replies)
[–] Anivia@feddit.org 36 points 1 month ago (2 children)

Time to switch away from Auth I guess. Not even using GrapheneOS cause I have a Samsung phone, but this is not acceptable

[–] Sunny@slrpnk.net 20 points 1 month ago (1 children)

Highly highly recommend Ente Auth!

Also featured on Privacy Guides

load more comments (1 replies)
load more comments (1 replies)
[–] Samsy@lemmy.ml 29 points 1 month ago
[–] tisktisk@piefed.social 22 points 1 month ago (1 children)

Is this not a sign of the true intentions on both sides of the dilemma here!?!?
Let us go to the end. We cannot afford to carry on in fear of these bans. Let the lines be neatly placed and the sides chosen wisely. If sustained profits are desired, the walled-gardens must come down.

Vote with your dollar and vote again with your data. Wary, but never afraid is the motto privacy comrades!

load more comments (1 replies)
[–] AnEilifintChorcra@sopuli.xyz 21 points 1 month ago (3 children)

Lol I spent a week going back and forth with Revolut support in august. I could sign into the app but it would always ask me for a "selfie" verification and every time support would say its a super dark selfie.

Eventually I decided to try a stock ROM and it just worked and I realised what was happening so I transferred all of my money out and deleted my account.

Most local banks here are terrible at making apps, some even require a separate device that looks like a calculator to use online banking, so hopefully they wont follow suit anytime soon

[–] kevincox@lemmy.ml 17 points 1 month ago (2 children)

require a separate device that looks like a calculator to use online banking

To be fair this actually provides a very high level of security? At least in my experience with AIB (in Ireland) you needed to enter the amount of the transactions and some other core details (maybe part of the recipient's account number? can't quite recall). Then you entered your PIN. This signed the transaction which provides very strong verification that you (via the PIN) authorize the specific transaction via a trusted device that is very unlikely to be compromised (unless you give someone physical access to it).

It is obviously quite inconvenient. But provides a huge level of security. Unlike this Safety Net crap which is currently quite easy to bypass.

[–] Aceticon@lemmy.dbzer0.com 10 points 1 month ago* (last edited 1 month ago) (9 children)

Those little boxes are just a bit of hardware to let the smartchip on the smartcard do what's called challenge-response authentication (in simple terms: get big long number, encode it with the key inside the smartchip, send encoded number out).

(Note that there are variants of the process were things like the amount of a transfer is added by the user to the input "big long number").

That mechanism is the safest authentication method of all because the authentication key inside the smartchip in the bank card never leaves it and even the user PIN never gets provided to anything but that smartchip.

That means it can't be eavesdropped over the network, nor can it be captured in the user's PC (for example by a keylogger), so even people who execute files received on their e-mails or install any random software from the Internet on their PCs are safe from having their bank account authentication data captured by an attacker.

The far more common ~~two-way-authentication~~ edit: two-channel-authentication, aka two-factor-autentication (log in with a password, then get a number via SMS and enter it on the website to finalize authentication), whilst more secure that just username+password isn't anywhere as safe as the method described above since GSM has security weaknesses and there are ways to redirected SMS messages to other devices.

(Source: amongst other things I worked in Smart Card Issuance software some years ago).

It's funny that the original poster of this thread actually refuses to work with some banks because of them having the best and most secure bank access authentication in the industry, as it's slightly inconvenient. Just another example of how, as it's said in that domain, "users are the weakest link in IT Security".

load more comments (9 replies)
load more comments (1 replies)
load more comments (2 replies)

Banks seem to be hit or miss, happy that mine works. Would rather switch Banks than use a stock Rom, though.

All the Uber stuff works in Browser, both eats and their fake taxi stuff.

Not having a subtle reminder to eat at McDonald's is probably better for you.

Honestly, if your app could be a website, and includes services not on your website, fuck you, I'm gonna go to the competition.

[–] taanegl@lemmy.ml 19 points 1 month ago (2 children)

So, uh, the next version of GrapheneOS will probably come with some Android OS version spoofing tech that solves this - if there isn't something on F-Droid already.

[–] Sunny@slrpnk.net 8 points 1 month ago (2 children)

No it won't. Or at least they said on BlueSky that if there had been a work around for this they would have solved it already.

load more comments (2 replies)
load more comments (1 replies)
[–] shortwavesurfer@lemmy.zip 18 points 1 month ago (2 children)

Use the websites whenever you can. That's what I do at least. Although I had to stop using Lyft entirely, because they stopped supporting rides from their website apparently. And that leaves just Uber. I actually left my bank for a similar reason. It supported my phone just fine, and it worked without Google Play Services, but the website wouldn't let me do everything that the app would, and the app required that I have Aurora Store to download their banking app from the Google Play Store, and I wanted to get away from that, so I switched banks so that I could use the bank website instead. From what I can tell, you run into this kind of stuff a lot with FinTech apps. But if you use older banks, like Discover or Wells Fargo or things like that, they tend to work better. Maybe because they're not up with the newest technology, LOL.

[–] Sunny@slrpnk.net 11 points 1 month ago

Yeah Revolut is also the kinda app that is almost only a mobile app, not much you can do with their website, last i checked.

load more comments (1 replies)
[–] eleitl@lemm.ee 17 points 1 month ago

Apparently, they don't need my business. Acceptable.

[–] Andromxda@lemmy.dbzer0.com 17 points 1 month ago (1 children)

I don't think it's a coincidence that the shittiest companies are those, who enforce Google's broken and monopolistic "Play Integrity" API. Revolut has connections to Russia, McDonalds supports the Israeli genocide in Palestine and Authy has always just been a massive piece of shit, not even allowing users to export their TOTP seeds. These are three companies I would NEVER even consider using anyway.

And "Play Integrity" API actually does NOTHING, absolutely NOTHING for your security as an end user.
You use an outdated, unpatched Android version with multiple severe, publicly known exploits on an insecure device?
Google doesn't give a single fuck.
You use the newest version of Android with all the patches applied on Google's own hardware, with a locked boot loader and a hardened operating system?
That's not allowed by the "Play Integrity" API.
It's only purpose is to serve Google's monopolistic business interests.

load more comments (1 replies)
[–] butsbutts@lemmy.ml 16 points 1 month ago (2 children)
load more comments (2 replies)
[–] uriel238@lemmy.blahaj.zone 15 points 1 month ago

Can Graphene add a feature to run in emulation mode to allow apps to believe it's on an unrestricted OS?

[–] yoshisaur@lemm.ee 14 points 1 month ago (4 children)

man, and i was gonna switch to graphene this christmas. if every app can just ban my OS, i might have to rethink this. i would use the website but they restrict so many things to apps now…

[–] Charger8232@lemmy.ml 71 points 1 month ago* (last edited 1 month ago) (1 children)

Well, switching to GrapheneOS shows that you don't care what those companies do, and that you're willing to fight. It means those companies lose one more customer. The more people that use GrapheneOS, the more companies will be forced to support it.

[–] yoshisaur@lemm.ee 36 points 1 month ago (1 children)

Honestly i didn’t even think of that. i’ll still switch then!

[–] themurphy@lemmy.ml 15 points 1 month ago

Nice choice. You not switching is exactly what these companies wanted.

[–] Sunny@slrpnk.net 8 points 1 month ago (1 children)

TBF, this is the first time I've encountered an app not working - and it was before this. It's just because of Google push towards monopoly via their Play Integrity API that's ruining this.

[–] RobotToaster@mander.xyz 13 points 1 month ago

play "integrity" should be considered malware, any program that deliberately does something the user doesn't want it to should.

load more comments (2 replies)
[–] blind3rdeye@lemm.ee 14 points 1 month ago (1 children)

This sounds like an antitrust legal problem...

load more comments (1 replies)
[–] Churbleyimyam@lemm.ee 14 points 1 month ago (1 children)

If a business makes it too difficult to use them I just use someone else. I'm sure they understand that but are making a killing at the expense of other people.

load more comments (1 replies)
[–] Realitaetsverlust@lemmy.zip 10 points 1 month ago* (last edited 1 month ago) (7 children)

Well that's bad. I've been using revolut for years now.

Does anyone have a suggestion for a new bank that's operating under european law?

load more comments (7 replies)
[–] obbeel@lemmy.eco.br 9 points 1 month ago

Well, Google is known for destroying its opposition.

[–] iturnedintoanewt@lemm.ee 8 points 1 month ago (2 children)

Revolut seems to continue working as of now on my PIxel 7. I'm transferring the money out just in case. Any idea when are they going to stop them from working?

[–] Sunny@slrpnk.net 9 points 1 month ago

Stops working if you log in and out of your account. At least this is what GrapheneOS folks stated on BlueSky.

load more comments (1 replies)
load more comments
view more: next ›