Comment by Freak_NL

1 day ago

The response from EPI/Wero in that thread is troubling:

https://github.com/PrivSec-dev/banking-apps-compat-report/is...

I really hope this doesn't mean other Dutch banks will follow suit. It's already quite impossible to actually contact someone at the bank who can understand the issue if it's on the technical side. I have no idea how I would even start to broach this topic with ABN Amro.

I thought that one of the goals of Wero was to become less dependent on US technology (Paypal). By requiring you to use either Android or iOS it seems to me as if that is more of a marketing ploy than anything else. As multiple other banks that support Wero however run on non-Google Android I think it is more likely that whoever wrote that message just doesn't know what they are talking about.

Just how it goes, vote with your wallet.

My mortgage was with a bank that had a website but no app and I was happy, and then they merged with another bank and only had an app and no website and I was not at all happy (but the bank they merged with also had their own mortgage product with both app and website and I do not know why they didn't migrate to using that platform). I swiftly moved to a bank that incidentally had a lower interest and both a competent app and website, and I noted to the previous merged bank that the reason I was leaving is that they did not accommodate me. Whether that feedback was heard, I'm unsure.

  • Not an option if all banks follow suit. If this trend continues you would only switch to a bank who hasn't yet locked down their app yet.

    Hopping banks is easy for just savings, but a lot of work and inconvenience for your standard payment accounts, and that's ignoring additional services like mortgages and insurance.

    • Indeed. It also fights symptoms rather than the underlying issue - that Google Play Integrity is an anti-competitive method that Google uses to shut out competition. The fact that Google-certified phones that are months behind on critical security updates (or even have malware in there updates as a recent case) do get a pass, shows that it is not really about security, but about destroying competition in the smartphone ecosystem as early as possible.

      The solution is not voting with your wallet, but either leveraging the DMA or drafting new laws that counter this.

      Either Google should be forced to approve secure alternatives like GrapheneOS or companies should be required to also implement AOSP attestation. Or alternatively, remote attestation should be banned completely, but I can understand the argument that it serves some legitimate uses.

      1 reply →

    • I love how people think "vote with your wallet" is an option on most "vote with your wallet" issues. If people could vote with their wallets they wouldn't have to, would they?

      Vote with your vote for politicians for common sense regulations that favor the consumer at the expense of everything else.

  • This is how it should work, but not how it does. Dutch banks don't pass down increases in interest rates simply because the risk of losing customers is so low [1]. Dutch consumers don't want, can't be bothered, or have such loyalty to their bank of choice, that even a criminally-low rate won't convince them to switch bank

    [1]: https://www.acm.nl/en/publications/acm-savings-rates-lag-beh...

    • Dutch consumers don't want, can't be bothered, or have such loyalty to their bank of choice, that even a criminally-low rate won't convince them to switch bank

      It is also just very hard in practice. A lot of people have their mortgages, savings that are locked for years, etc. at a bank. Also, switching a bank also impacts other family members if you have shared accounts, etc.

      In this particular case it's also not fully clear yet whether Wero is starting to enforce this. If that happens to be the case, it's only a matter of time before other banks also start requiring Play Integrity for Wero transactions.

      2 replies →

    • Reminds me of the tweet i saw: "My bank, who passed all 14 interest rate increases on to my mortgage, and none of them on to my savings account interest, is currently sending me tips on how to spot financial scammers"

  • > vote with your wallet

    That's not good enough, you also need to convince regular people to do the same. Your vote alone will not achieve anything.

  • It was heard and will be taken into work around 2030 once we stop embargoing MCP as a dangerous technology

The good news is: no need to stick to expensive and crappy Dutch banks. Plenty of foreign options.

I've completed my transfer this year. I am waiting a few more months to close my Dutch bank account (with the parent company of ASN). Good riddance.

  • If Wero becomes the pan-european solution for online payments it is slated to become, then no European bank will be exempt from this. Given that as a European your government covers up to €100,000 placed at any European bank in case that bank goes tits-up, you are likely to end with a European bank in any case.

    • > If Wero becomes the pan-european solution for online payments

      It most likely won't, because people want the security that cards offer when they order online. Wero could be good or even great for other things, but not for making online purchases from another country.

      4 replies →

> is troubling

No, it is not troubling, it is realistic for a service with high expectations and reliability expected, on tight schedules/resources