Hacker News

points by yowo 1 day ago | 0 comments

Always install these apps and negatively review them, specifically mention banning of GrapheneOS, there is absolutely no plausible reason for that.

I get banning rooted devices and unlocked bootloader (despite I disagree of them being ground for banning), but GrapheneOS left no possible excuse to anyone.

[–] seki285 1 day ago

Why is banning rooted/unlocked devices even necessary, I assume it's about concern for fraud but shouldn't all transactions happen server side anyway?

[–] yowo 16 hours ago

If you leave your phone whose bootloader is unlocked on a coffee shop table and visit restroom, you can never guarantee it is not compromised when you return.

I still don't think it is a good ground for banning, but understandable.

[–] Sayrus 1 day ago

Some examples would include phones sold preloaded with a malicious ROM.

[–] hWuxH 1 day ago

Still no valid argument because there's always the possibility of a lookalike fake banking app that intercepts your credentials and logs in on another device that passes integrity checks.

[–] __MatrixMan__ 1 day ago

Because if you're not pre-compromised by somebody who will prevent you from behaving badly, they can't be sure you're not behaving badly.

And by behaving badly I mean using a client other than the one they expect to talk with their server.

Imagine if there was just one banking app, and whichever bank it talked to was just a setting, sort of like how pidgin and trillian worked with chat back in the day. That would make the banks feel small. You can't have control over your device because it might hurt their feelings.