Comment by andrepd
20 days ago
This is not enough. Things like banking apps are virtually necessary for many people's daily lives, yet they often require a non-rooted phone with Google Play Services spyware installed at the OS level, or they will simply refuse to open. Never mind the fact that we're so into late capitalist consumerism that it's routine to deprecate support for 2 year old OSes.
This needs law/regulation forcing the duopoly to open up, unfortunately even in the EU we're moving in the opposite direction.
Not just forcing the app store duopoly to open up, forcing banks to open up and prohibiting these kinds of restrictions that are based on "we insist that you trust some large corporation that we also trust".
Exactly. I'm literally penalized because I have control of my own device (which somehow isn't an issue with the much more "insecure", root-wise, browser on a linux desktop)
> which somehow isn't an issue
now. In general it certainly is; web interfaces will be phased out unless web browsers gain client attestation capabilities (at which point it's game over for the open web).
E.g. Revolut never had a web interface and is doing just fine.
1 reply →
And the sentiment that I own the things I've bought and paid for and should be able to do what I want with it. That a company shouldn't be able to come in and take away features, that I purchased with the device, away from me for absolutely any reason.
I can't go to Google HQ and reinstall their locks because I think their locks are insecure, and I certainly can't declare myself the arbiter of who should be allowed to open their locks. I'd be charged and put in jail. But they can do the digital equivalent to my device and that's valid business.
> Things like banking apps are virtually necessary for many people's daily lives
I disagree. I think most people could do just fine without them. Some might need to buy a desktop computer or even visit their bank's website using a browser on their phone, but humanity got along just fine without cell phone banking apps for a very long time. Many of the old options still exist for a lot of common banking activities. Options like calling your bank on the phone, using an ATM, or going to a branch in person. If your bank really doesn't allow you to do anything with your money without a cell phone app I'd say finding a new bank is justified. Better yet, try to find a credit union.
Banking apps are convenient, but it's getting to the point where the inconvenience of being abused by the OS outweighs the convenience of a banking app which is probably collecting (and selling/exploiting) data they couldn't get from a visit to their website anyway.
> or even visit their bank's website using a browser
when desktop browsers are considered less trustworthy to the bank than mobile apps (this is approximately now) they'll invert the functionality and limitations surface so mobile will have more authorizations than desktop browser (this is also happening now).
client attestation is a fundamental transfer of freedom from the client to the server. it's nice in theory (I too want my money safe), but at the very least it needs a third party with different incentives, not the OS, hardware and browser vendor.
Yes, you already need the app to accept flagged transactions (that the bank didn't deny outright) for my Bank, no way to do that in a Browser.
> Banking apps are convenient
The only need I have for banking apps is created by banks themselves, to verify online payments. But it would work just fine with regular text messages. I don't need a banking app at all.
(And maybe verifications aren't needed either, since in the 40+ years I have been using a credit card, never once have I been asked to verify something that I didn't initiate myself.)
In many regions specific apps are needed for reliable identity verification.
Just because you don’t care about banking apps doesn’t mean I don’t. You might churn your own butter, but that doesn’t mean I don’t need to be able to pick it up from the grocery store. Our lives are different from our parents, whose lives are different than theirs. The answer isn’t “just go back 20 years and live like we used to”. The answer is to life in the modern world and still have our basic freedoms.
> routine to deprecate support for 2 year old OSes
> unfortunately even in the EU
("Save the planet".)