YHK - yet another hacker news clone

Dutch 'idealist' bank ASN blocks non-Google Android, including GrapheneOS

27 points microtonal 1 hour ago 17 comments

nikolay 21 minutes ago | parent

Other European banks do it, too - N26 also rejects GrapheneOS.

dns_snek 10 minutes ago | parent

N26 works fine on GrapheneOS for me.... but I see there's a note saying:

> This app has started using Play Integrity to block new signups, existing accounts continue to work fine for now.

https://privsec.dev/posts/android/banking-applications-compa...

q3k 6 minutes ago | parent

Maybe during registration, but not during use.

ElDji 17 minutes ago | parent

I have an refurbished iphone sleeping most of the time in my desk drawer, used only for banking apps.

It also make me feel safer not to have always on me the key to all my accounts.

usrnm 9 minutes ago | parent

Things like iDeal (wero) require you to use a banking app for most online purchases

isoprophlex 17 minutes ago | parent

Dont take the fact that Wero still works for Bunq as an indicator that ASN or any other bank are doing something especially untowards.

Given Bunq's abysmal security track record it probably means they just forgot to enforce some policy that Wero requires on mobile devices - no matter how annoying these "no grapheneOS" policies are in general, of course.

vrganj 12 minutes ago | parent

Yeah for now I use bunq + CurvePay for tap to pay (since Google Pay also doesn't work on Graphene).

Let's see how long they let me keep it.

ACCount39 16 minutes ago | parent

SafetyNet was a mistake in general. But banks specifically are among the most obnoxious shitters when it comes to "you aren't allowed to do things except the way we want it".

Over and over again you have to contend with bullshit like 120MB APKs full of obfuscated code, root detection, custom firmware detection, "non-mainstream device" detection, VPN detection, and even more obscure spyware-flavored functionality.

By now, if a major regulator like EU steps in, cracks the whip, and forces banks to provide access through a common API standard to any third party banking app? I'd welcome the change.

xnickb 9 minutes ago | parent

> By now

Not sure what you mean. This should be the default for most things. Giving corps levers to abuse the users/consumers is going to result in exactly that.

As Dunning said and Marx quoted:

> "With adequate profit, capital is very bold. A certain 10 per cent. will ensure its employment anywhere; 20 per cent. certain will produce eagerness; 50 per cent., positive audacity; 100 per cent. will make it ready to trample on all human laws; 300 per cent., and there is not a crime at which it will scruple, nor a risk it will not run, even to the chance of its owner being hanged."

Lex-2008 8 minutes ago | parent

Sounds like Open banking

kaon_2 11 minutes ago | parent

ASN has been dysfunctional for years. They needed a bailout and ever since have only deteriorated in their operations. To be fair, their risk management has surely improved and their new CEO is great. But their actual operations are superbad. They only do the easy loans and mortgages because anything else they can't do. Still I think as a bank they are doing well, everyone is opening accounts there. Marketing matters more than service I suppose.

Aozora7 10 minutes ago | parent

My bank app works on GrapheneOS but checks play integrity and disables biometrics and lowers limits.

Thankfully I'm not forced to use it since I can log into the bank and authorize transactions with the government digital signature app, which uses hardware attestation and considers GOS fully secure.

Funnily enough, the bank's app crashes on launch with memory tagging enabled which means they have memory bugs.