Post by @danieldk@mastodon.social

@barbarakathmann @EricChrSmit is het op een één of andere manier mogelijk hier meer aandacht/ruchtbaarheid aan te geven?

Idealistische bank ASN gooit gebruikers van niet-big tech smartphones voor de bus door Wero te blokkeren voor klanten met een niet-Google Android telefoon (bijv. @GrapheneOS) https://github.com/PrivSec-dev/banking-apps-compat-report/issues/105

Het heeft verder weinig met veiligheid te maken, want bijv. GrapheneOS is veiliger dan Google Pixel en Samsung (zie bijvoorbeeld gelekte Cellebrite verslagen).

GitHub

ASN Bank · Issue #105 · PrivSec-dev/banking-apps-compat-report

Is there an existing issue for this? I have searched the existing issues App name ASN Bank Link to app https://play.google.com/store/apps/details?id=nl.devolksbank.asn.bankieren App version 2.40.2 ...

0 Boosts

0 Likes

Johan Blok

@bolzano@mastodon.nl 2 days ago

@danieldk @barbarakathmann @EricChrSmit @GrapheneOS Idem voor fairphone met e/os, die vergelijkbare idealen nastreeft.

GrapheneOS

@GrapheneOS@grapheneos.social 2 days ago

@bolzano @danieldk @barbarakathmann @EricChrSmit /e/ and Fairphone aren't similar to GrapheneOS. Those are insecure options without crucial standard privacy/security patches and protections.

/e/ is a huge privacy and security downgrade from the standard Android Open Source Project. The privacy and security model is essentially the honor system. It's easy to bypass.

/e/ definitely doesn't share our values since they say highly private/secure devices mainly benefit criminals and pedophiles.

Johan Blok

@bolzano@mastodon.nl 2 days ago

@GrapheneOS @danieldk @barbarakathmann @EricChrSmit My comparison in values was between fairphone and asn bank rather than graphene and e/os. Battling between alternative oses doesnt help their common interest.

GrapheneOS

@GrapheneOS@grapheneos.social 2 hr. ago

@bolzano @danieldk @barbarakathmann @EricChrSmit Murena and /e/ aren't on the same side as GrapheneOS. They're egregious charlatans and scammers who have fought a long war against legitimate mobile privacy projects. They've heavily pushed authoritarian anti-privacy talking points including repeatedly claiming actual privacy projects are for criminals and pedophiles. /e/ and Murena products aren't legimate privacy products and your support for them helps to undermine mobile privacy as a whole.

1+ more replies

Daniël

@danieldk@mastodon.social 2 hr. ago

@GrapheneOS @bolzano @barbarakathmann @EricChrSmit Regardless, Google Play Integrity is anti-competitive and that is the main point of this thread.

This is hurting Dutch ASN Bank users daily, regardless of which non-Google certified Android they use.

GrapheneOS

@GrapheneOS@grapheneos.social 2 hr. ago

@danieldk @bolzano @barbarakathmann @EricChrSmit /e/ and Murena devices are an example of why banking apps have chosen to ban alternative operating systems. They don't keep the standard security model or security patches intact. They raise the Android security patch level field despite not providing all the patches required by the patch level which is a very low bar due to how little of the overall patches are included in the bulletins. Involving it undermines efforts to get banking apps.

Daniël

@danieldk@mastodon.social 2 hr. ago

@GrapheneOS @bolzano @barbarakathmann @EricChrSmit From communication with ASN so far, I have learned:

* They are required to introduce attestation by Wero.
* They only implemented Play Integrity because it's the standard for Android.

So, we are not even at the point where any non-Google Android is even considered.

It is all a bit mysterious, because other Dutch banks have also started the migration to Wero, but they don't require Play Integrity.

Ronald

@ronald@social.vannacht.eu 18 hr. ago

@bolzano De mensen van GrapheneOS vinden iedereen en alles minderwaardig en maken er een sport van om anderen uit te schelden. Daarnaast loopt hun systeem alleen op een oude Google Pixel of op een Amerikaanse Motorola (als dat al is gelukt), dus daar hebben we sowieso niets aan. Op mijn Fairphone 5 met /e/os loopt alles mbt ASN en Wero c.q. Digid nog prima, maar ik begrijp dus dat dat gaat veranderen?
@GrapheneOS @danieldk @barbarakathmann @EricChrSmit

1+ more replies