Hi all,
Do you think is it safe to use a bank app in eOS?
I mean, they are built to work in Google Android, supported by Google developers, security,experience and so on; by using other OS there “might be bugs” that hackers could use to get thru our data… we are not talking about wassup, telegram, gps… it´s a bank app where we store our money.
It´s just one of the concerns i have to use them in the recently eOS phone I´ve bought, and maybe somebody can help me to clarify this question. I am not an expert or IT guy.
It doesn’t matter if /e/, LineageOS, or Stock Android.
With or without Google Service. googled or de-geoogled.
To use banking Apps are never safe.
The only exception I accept is a 2FA app from the bank. But not the bank app itself for access to the account.
There are two ways of discussion:
Do I want to be tracked by google, facebook, twitter, amaton, etc…do I? Do I want these corporations to know my data, my behavior, my whereabouts, etc…?
No, then I have to de-goggle my smartphone and PC
How important is security and data integrity to me. Access to my accounts, etc…
Then I must not host password safes in the cloud. Not use a banking app…
Both points must be considered separately and implemented individually or together.
In this case i didnt mean or wanted to ask if they/Google will “track us”, but what concerns me is if a “malicious” hackers could “easily” access to our bank apps as we have them installed in a not “offitial” OS, without lets say, the Google security for example.
which one? If it’s an FP3, these are delivered bootloader locked and file based encrypted by default.
You’ll have some physical security against consequences of device theft. If the banking provider lets you run the App in /e/, than you’re no less safe from physical attacks than stockrom users. For runtime vulnerabilities you need regular /e/OS and firmware updates.
You can also assess your risk exposure from the other side: some banks allow for transaction limits needing a 2fa confirmation, sending a notification per transaction and having a daily total amount transaction limit. Any 2fa should then be a dedicated transaction-number-generator.
Device control via web interface + dedicated 2fa gives you the option to remove a lost/stolen device from account access, something your Bank can also do for you via phone call in case you part ways with an enrolled device.
physical security: for unlocked bootloaders (majority of /e/ users), a 4 digit userdata encryption PIN lends a bit of a time window to unroll the device from the banking account in case of theft. The other theoretical risk is somebody altering system files with you being unaware of it… are you a probable target of such an attack? I’m not.
It’s a tradeoff for what you get in utility running banking apps on a handheld. I think peer to peer payments are nice, the split-your-bill-type. Anything of a higher amount should require dedicated 2fa confirmation. At least know the steps required how to unroll a device from your bank account. Do not use the phone as 2fa itself, then - in my opinion (!) - also unlocked phones can be used for “small” payment purposes.
Yes. I think they are as safe in /e/OS as in any other Android system - Google’s or a custom ROM. For me, that is safe enough to use without worrying.
Some people - see earlier comments for example - seem to think that using any banking app risks giving other people unauthorised access to their bank accounts. I have not come across any credible evidence to suggest that is the case.
I have been using internet banking - via web browsers and phone apps - for several years, and I will continue to do so. Others will choose not to do so, and that is their choice. I do not think you should be put off using banking apps, or any other apps, unless someone can show you clear evidence of a specific risk which can be realistically exploited. Nothing you do in life is risk free, but we all make judgements - based on our own experience, and the evidence of others whom we choose to trust - of what constitutes an acceptable level of risk.
Hi, I started being interested in Google free phone. However my main concern indeed is a banking app. What are the technical differences between downloading the banking app from Google Store vs Aurora? So far I was deeply refusing to use such apps however I was kind of forced by my bank to change it, as I would like to receive notifications about payments on my account.
Technically there is no difference. Aurora Store gets apps from Google, but it gets them anonymously (unless you login to Aurora with your Google account). I have installed two UK banking apps from Aurora Store, with no problems at all
I have been observing banking apps of the banks in my area, and I wonder how come only 1 bank has app with privacy 8/10 in /e/ app store and has only 1 tracker The rest is having like 3-4 trackers and 5-6/10 points of privacy. Do you think that this could be a good reason to change a bank, as it’s account offer is quite good to be honest
Is anoyone having the similar experience?
And has anyone know who decides about the trackers put inside the app?
The rest is having like 3-4 trackers and 5-6/10 points of privacy. Do you think that this could be a good reason to change a bank, as it’s account offer is quite good to be honest 