• 0 Posts
  • 296 Comments
Joined vor 3 Jahren
cake
Cake day: 21. Juni 2023

help-circle





  • GrapheneOS, the privacy and security focused aftermarket operating system, has received an experimental build for the Pixel 10 series

    Received? GrapheneOS are the authors of their software, they don’t receive. Curious how they got the binary blobs to get it to function.

    That “article” is terrible, and doesn’t even touch on the crucial issue - the crux, as it were. Android is one thing, hardware support is the magic piece Google is trying to remove to close their borders and kill creativity forever.

    Rooting for Pixel 10 native support over here, but was it an employee leak? Similar hardware driver copypasta with modifications? Did Google just finally share the necessary binaries legitimately?

    This whole thing is so vague.




  • Wow, that’s an interesting one, thanks for that. That would be quite annoying to deal with.

    In that case, since the 2FA is coming from the carrier, if you can disable 2G and 3G on your handset, the air link on LTE and above is AES-based encrypted at least, if the carrier configures it correctly, even though the channel itself often isn’t. Or if very paranoid you can use WiFi calling in airplane mode on a burner so the carrier sends the message over the wifi calling IMS-encapsulated-in-VPN-connection over the Internet.

    The chance of someone being able to intercept that 2FA code in a way that could get into your bank account is pretty much absolutely scant.

    Not trying to change how you do things either, though. Just knowing how terrible some banks can be at writing software, I’d be more apt to trust “weaker” methods versus apps. The future is quite exhausting.


  • They don’t need your permission to gather all sorts of data from most modern smartphones, nor can you really deny some of it. (Some you can, like camera, and microphone, allegedly.) Part of the whole banking<->handset manufacturer agreement also frequently allows “special access” outside of the traditional user-permission security model. For…“security” to “prevent fraud”.







  • This must be a European problem perhaps? I can’t understand why this is the deal breaker for so many.

    Banks have web sites. I don’t know why anyone would ever allow their financial institutions access to their phone’s plethora of sensors and the available telemetry on what they are doing on their mobile device 24/7. That links confirmed ID + “trusted platform” + biometrics + transactions + location + all the metadata every other app hoovers up in one convenient place. The very same people across the pond are worried about having to verify ID to look at porn, but are cool with their bank knowing the position of their accelerometer while they’re taking a dump.


  • Good summary right there. Clean up your own house before you start preaching under the guise of user safety, fools.

    So far the only “cleanup” I’ve seen in the Play Store is removing old apps that haven’t been updated in a while but still run just fine, which means things like a physical Bluetooth air quality sensor I have needs the APK sideloaded now. Totally fighting scammers, Google. Totally.

    Wouldn’t it be great if these tech companies just dropped the verbal diarrhea filter and just spoke plainly?

    “We’re doing this to try and increase revenue by making ourselves a walled garden like Apple, because there isn’t really competition anymore, we’re greedy, and we lost the plot,” is what they should be saying.