Thread

There's a high chance of devices being sold with GrapheneOS preinstalled in 2027

322 points · 144 comments · Cider9986

movsx · 1790099057 · focus · HN ↗
Might someone know whether banking apps worldwide will work?
1. ciferkey · 1790099716 · focus · HN ↗
  This site tracks the status of what apps work: <a href="https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/" rel="nofollow">https://privsec.dev/posts/android/banking-applications-compa...
  The official GrapheneOS docs contains a developer guide on how to fix banking apps when they are not working. Bank app developers have been surprisingly receptive to making the changes, weirdly enough. You can see in some of the issues tracked on the site where people reached out and the developers eventually made the apps work.
  I've been running GrapheneOS for a while (I have posts on the blog in my bio if you want to see some day-to-day info) and only one bank app gave me trouble. I had to toggle a setting and then everything worked.
  Separate from this is wallet and payment apps which still have not had much traction on GrapheneOS.
  1. Cider9986 · 1790099869 · focus · HN ↗
    > Separate from this is wallet and payment apps which still have not had much traction on GrapheneOS.
    Curve works in Europe and Paypal has a trial thing in Germany for tap to pay IIRC. There's nothing in the US unfortunately, yet.
    mitxela · 1790105975 · focus · HN ↗
    If you want more security and privacy, don't use your phone for payment - use your card.
    Cider9986 · 1790106753 · focus · HN ↗
    I don't know if that's really significant. But yeah technically you give up less information by using the card directly instead. But it's like going from 98% privacy loss to 99%.
    Cash and Monero are private so they're in a different space and are what should be prioritized.
    mitxela · 1790107410 · focus · HN ↗
    It's more difference than you think. Your card isn't logged into Google, Facebook, Signal and so on. It doesn't route through Cloudflare. It doesn't even connect to T-Mobile, Verizon, or Stingray automatically.
    Cider9986 · 1790124234 · focus · HN ↗
    > It doesn't route through Cloudflare. It doesn't even connect to T-Mobile, Verizon, or Stingray automatically.
    I fail to see how that's significant at the banking level. What does Stingray mean in this context??? Signal??? It's just a messaging app. You can use a VPN or Tor.
    Your purchases still go through all these routes on the payment processors side. And you can use Apple pay offline–it's just NFC.
    You realize ever card purchase (when where what how much) is logged and stored for like 5+ years (probably forever). Yeah I'd probably prefer not to add Google to the mix but your carrier only sees DNS logs not the encrypted content.
    If you want any privacy whatsoever in payments use Monero and Cash: <a href="https://eylenburg.github.io/payments.htm" rel="nofollow">https://eylenburg.github.io/payments.htm
    mitxela · 1790160714 · focus · HN ↗
    Only two parties who are legally forbidden from sharing have those logs instead of 10 who aren't

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.