this post was submitted on 08 Aug 2024
100 points (98.1% liked)

Privacy

32054 readers
969 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Banking apps seem to be a motif among things that don't play well with privacy ROMs. My bank's website does everything I could want out of it. I think I might be ignorant to something.

  • What about banking apps is especially compelling?
  • How often do banks put must-have features behind an app?
  • And should I be concerned that banks might move away from offering services through browsers?
top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 3 points 3 months ago (1 children)

Website here is awful. Paste is disabled, it’s not optimized for mobile, it’s a PitA to use, & there is literally code to check if the user is running Netscape Navigator 4. The site has a weird encoding that doesn’t allow English punctuation, & to change your email or phone number requires physical documents, ID, & a wait period. The app is poorly coded & doesn’t work if you have root, are running a custom ROM, (& likely if you don’t have Google services)—so I do just use the site. …But if we are being real, I actually always keep cash on me & cash is preferred so while the problem is still relevant, needing the app/site isn’t dire.

What is really missing for my country on the site is QR code scanning for bank-to-bank transfers that a lot of vendors use & to do some bill payment. For instance, while I could set up the electric bill to auto-debit, my internet bill only has QR scan without a physical bank number I could transfer to (& the short list of utilities doesn’t include my net)—so I take a 25-minute bike ride in the heat once a month to pay that bill but I reward myself by getting to swing by the nearby-ish Hong Kong pie bakery to get a treat & a latte to make out-of-the-way trip feel worth it.

When I do have to use the site & since there is no QR code scanning, the workflow is:

  • Login (I have a script to block their paste-blocker to use my password manager)
  • Create a new recipient which requires a unique name, the account number + their banking service provider, phone or email, and 12-digit SMS 2FA code (no TOTP or FIDO2 option); this process is done on a desktop-only site which is hard to work with
  • Confirm that with email
  • Go to transfers, select my from account (despite me only having one account & no default preference option), find that user I created, fill in an amount, do another 12-digit 2FA
  • Then they want to take a picture of my phone after the transfer for whatever reason reason

This process due to bad UX can take up to 10 minutes if they are not ready. So the tl;dr is to carry cash or hope an ATM is nearby.

I had discussed it with a local & he said there has been more push towards cashless brought on by businesses/government wanting to track everything & tourists demanding their privacy-invasive ‘comforts’ like $BIG_TECH_PAY & $CREDIT_CARD options despite most folks being fine with cash. Cryptocurrency is basically never accepted either.

[–] [email protected] 2 points 3 months ago

If the day comes where I don’t have a choice, I will start carrying a second device with nothing but banking & similar nonsense that prevents my freedom to do what I want with the device I own. OP knows the website experience matter since it not only gets ported to platforms outside the mobile monopoly but sandboxes the banks for spying on your device & asking questions that aren’t their business like if I run an unGoogled ROM. Good thing there was a mass of pushback against Google trying to add attestestion to Chromium ore we’d enjoy the same nonsense on the web too where I’m sure Linux would be block by these goobers.

[–] [email protected] 1 points 3 months ago
  • 2FA
  • Some banks I use require I aprove transactions on my phone when I am paying this online
  • One bank I use has tap to pay on the app instead of relying on Google Wallet
[–] [email protected] 3 points 3 months ago

most banks here require 2fa so theres that

and most block even it on custom roms

cant wait for this shit to be cracked already

[–] [email protected] 5 points 3 months ago

My bank only has an app, no website option, but luckily it works just fine on GrapheneOS with no Google Play. I barely use it anyway as I pay cash everywhere possible

[–] [email protected] 8 points 3 months ago

My bank doesn't have a website and it makes me want to kill them.

It's crazy that it's even legal to only have an app

[–] [email protected] 10 points 3 months ago

Apparently US apps suck since our system is a dinosaur.

[–] [email protected] 4 points 3 months ago* (last edited 3 months ago) (1 children)

I'm in the UK. I do not use them. I can login via website, and use text as 2FA. I do not need to use it out of the house but have that option if I want.

I pay via bank debit card.

I would be surprised if they app locked features. It would exclude elderly and probably be illegal.

[–] [email protected] 1 points 3 months ago

In the UK as well. My bank is pushing the phone app, and making it difficult to use the website without a phone. I will probably change my banking provider soon.

[–] [email protected] 2 points 3 months ago

I don't run an OS on my phone or laptop that could run a proprietary banking app in the first place. Can't be inconvenienced if you don't know what convenience feels like in the first place.

[–] [email protected] 1 points 3 months ago

I live in the Netherlands, where there's a QR-code-based payment method called iDeal, which you need a Dutch banking app or little code machine thing to use. With my bank, at least, there are a few things you can do with the website that you can't do with the app, but for day-to-day use the app's fine.

[–] [email protected] 17 points 3 months ago (1 children)

It's a must for me. My phone is my primary day-to-day computer, so I need to be able to so everything from that. Unfortunately that is also why I'm not using graphene OS, because our government 2FA system doesn't work in graphene OS (even with play services installed) so it's impossible to do anything. I can't check anything WRT banking, schools, taxes, daycare, doctors appointments, hospital record or change anything that requires the involvement of city hall, including checking digital mail from the municipality or government. It's basically not possible to function in our society without it.

[–] [email protected] 4 points 3 months ago (2 children)

Out of curiosity, what do older citizens do? Like those in their 80s? Many here do not have a smart phone or mobile.

[–] [email protected] 7 points 3 months ago* (last edited 3 months ago) (1 children)

For banking and other official business, they have to go physically. If their bank has no physical department near them well then it sucks to be them. For digital mail you can apply for exemption and you will get physical letters.

You can order a digital code generator so you don't need the app if you still want 2FA for digital handling. But I don't want to have to carry that with me it would be a significant inconvenience for me.

[–] [email protected] 3 points 3 months ago (1 children)

Wow, that is pretty hostile to the elderly.

[–] [email protected] 3 points 3 months ago* (last edited 3 months ago)

I mean, it's been 15+ years since smartphones hit the market as a regular device, so those people where only in their mid/late 60's when that transition happened. And there are solutions in place for both digital access without smartphone and physical only access. I'm not sure I see how that is hostile to elderly or people that can't/won't use a smartphone or insist on physical access. Obviously physical access is going to be a hassle, that's why it's not the default anymore.

[–] [email protected] 4 points 3 months ago (1 children)
[–] [email protected] 4 points 3 months ago

Wow, that is pretty hostile to the elderly. Imagine those who struggle to get about? Excluding them from society.

[–] [email protected] 4 points 3 months ago

I just use the progressive web app on phone, works fine for my bank

[–] [email protected] 17 points 3 months ago

My bank's app has way less functionality than the web version, but it's used as a second factor to auth some operations, so I have to use both.

[–] [email protected] 7 points 3 months ago

Never used them and I likely never will

[–] [email protected] 2 points 3 months ago

• Convenience, no need to waste time and car fuel going back and forth to the bank all week as i get a lot of cheques and i can just deposit straight after reception from my phone itself

• Mine put new ones in all year round as its not really a bank, kind of the same but it's a "caisse populaire" in my language.

• Not really. If they offer it to mobile, they'll offer it to computers always.

[–] [email protected] 13 points 3 months ago (2 children)

Depends on the country. I'm teaching in Thailand and here you can't do any banking through a browser. You can only use the bank's official app and you don't even have a login/password for it, you have to go to the bank and activate the app in person as a foreigner (I think Thai citizens can do it online but foreigners have to do it in person). Nobody takes actual cards for the payment and you pay everywhere by scanning QR codes which has to be done through the app. If you buy a new phone you have to activate the app again at the bank's office. It's really annoying and the reason I probably can't go with GrapheneOS or any other custom roms because the bank app is absolutely essential.

[–] [email protected] 2 points 3 months ago

Oh yes this QR code bullshit drives me nuts back home too

[–] [email protected] 6 points 3 months ago (1 children)

Is using cash impossible in daily life instead? It is hard to imagine for me that a smartphone may be outright required for daily life...

[–] [email protected] 1 points 3 months ago (1 children)

It's possible, just very inconvenient. You end up getting massive amounts of change that you have to lug around to spend.

[–] [email protected] 2 points 3 months ago

Ah, nice to know. I personally consider this a fair tradeoff for freedom and lack of financial surveillance.

[–] [email protected] 10 points 3 months ago (1 children)

I don't like smartphone and won't use apps for anything important.

[–] [email protected] 1 points 3 months ago (1 children)

Could you elaborate? What kind of phone do you have and do you use a free messaging application like Whatsapp?

[–] [email protected] 1 points 3 months ago

i have an android for work and I just have the work stuff on it. personally I use google voice.

[–] [email protected] 11 points 3 months ago

Mobile check deposit is the only thing I want from my bank's app.

I'm running LineageOS with Magisk and Play Integrity Fix. That works for my bank's app, but I'm annoyed that they make me do it and gave their app a 1-star review on Google Play for it.

[–] [email protected] 3 points 3 months ago* (last edited 3 months ago)

Things you can't do with the website:

  • Login with biometrics. Wants password and 2fa each time. As it should, but it gets tedious, especially when I want to confirm online payments (which need to be confirmed inside the interface after you login).
  • No contactless payments. You can enroll a card into Google Pay but fuck Google, I don't want them seeing what I buy.
  • No notifications, hope the bank is willing to send SMS instead.
  • Bit more tedious to send money to someone because the website can't look up contacts by name, have to look them up separately and copy the phone number over.
[–] [email protected] 9 points 3 months ago

Usually not worth it, the website usually has everything.

I've been surprised by how many banking apps I've seen that don't require safteynet or google services (I thought basically all of them would require it). Some banks websites don't work very well on mobile, so that's some peoples reasoning.

[–] [email protected] 6 points 3 months ago* (last edited 3 months ago)

I don't use them. Web banking works completely fine for me. Back when I did use them, though, I always used them on privacy ROMs/GOS specifically. Went through 4 different banks and all their apps worked fine for me on GrapheneOS. No Google Play services either.

[–] [email protected] 6 points 3 months ago

Depositing checks is about the only useful thing I've seen on my local bank's app, but that only matters if you do business stuff with people who pay with checks.

[–] [email protected] 0 points 3 months ago

NFC payments

Works fine on lineage os

load more comments
view more: next ›