← Back to context

Comment by aceazzameen

5 days ago

Most people don't know they're also being taken advantage of. I'm mostly referring to data exfiltration.

Which isn’t legal in Europe and the UK. Get better consumer protection laws.

  • Good thing that companies never do anything illegal, and everyone lives in Europe.

    • It’s good for us Europeans ;)

      Companies tend not to do illegal things. Especially if they’re public or have shareholders that might lose significant value if found out. And it’s borderline impossible to stop people finding out.

      6 replies →

On GrapheneOS you can install your bank app in a different user profile, and run Google Play sandboxed, so this scenario of a bank app doesn't result in anyone having access to your other information.

  • Note that the user profiles aren't the basis of sandboxing. The bank app is still sandboxed, and GPlay as well if you only use a single profile. Profiles have use cases of course, they offer separate app data, user data and VPN configurations. They also have a separate list of apps marked as installed, a list apps can see in a profile. IPC also can't take place cross profile, which is useful to prevent communication between apps based on mutual consent. Also nice is that they offer separate encryption keys and can be put at rest manually. In the past they also had the advantage of having a separate clipboard but this isn't an advantage anymore given that GrapheneOS recently shipped within-profile clipboard control.

    If you dont need any of the above its perfectly fine to run the banking app on your single, main profile.