Unlocking bootloader/flashing isn’t so easy for most people. I root every device I get, but for normal users this process isn’t easy. Also some manufacturers aren’t so friendly towards people unlocking bootloaders. I remember Sony lowering camera quality when you unlocked/installed Cyanogenmod back in Z2 times, or more recently Asus preventing you from unlocking completely.
Oh right, I completely forgot about the separate device that you have to plug into your computer and then also plug your card into the deviceand then enter your pin. It’s almost as convenient as having the phone app!
Well that sarcasm definitely backfired mate. The device I have is a QR Code scanner that works like a phone, with the important distinction that I can do with my actual phone what I damn well please.
You are talking about the id card reader, not independent 2FA devices that generate codes. Also, in some countries you can get a SIM card with special certificates that can be used for identification and document signing, they work on virtually any modern phone. I think that feature uses the SMS protocol underneath, but I couldn’t find the confirmation.
Didn’t work for me on a Samsung S6 or S10. Maybe I will try again some day but for now it’s not worth the risk of never being able to go back, thanks to the Samsung physical one-time fuse.
Yeah you needed to install a program specifically to trick the banking app in to thinking it’s running on an unrooted device, because it otherwise won’t launch (because it’s rooted).
I’ve used magisk before, and its a major PITA to use. Every time you update your phone you need to redo the whole process of setting up magisk again, which requires connecting it to your PC to and running commands in the terminal. Huge fucking PITA.
Yeah tell that to my LineageOS installation.I had to disable magisk to update, otherwise it failed, and then I had to re-add a magisk generated file with the flashing tool for magisk to work again.
Which is only available for a limited set of devices, does not have root, locks the bootloader again and is probably professional enough to get banks to approve their signing key.
For those reasons it is nor a viable solution for everyone.
Fair point, I just wanted to mention that there are unofficial, de-googled OSs that do work with banking apps so that newbies don’t get the wrong impression
Yeah, the bootloader really seems like a challenge. ADB fortunately is extremely easy, especially if you use a tool like App Manager from F-Droid to correspond package names to specific applications.
Just adb shell when your phone is in developer mode and you hook up to your computer via USB, then pm uninstall --user0 packagename.
Unlocking bootloader/flashing isn’t so easy for most people. I root every device I get, but for normal users this process isn’t easy. Also some manufacturers aren’t so friendly towards people unlocking bootloaders. I remember Sony lowering camera quality when you unlocked/installed Cyanogenmod back in Z2 times, or more recently Asus preventing you from unlocking completely.
Eupean banking apps refuse to launch on unlocked phones. And you need said banking apps as mandatory 2fa to log into your online banking system.
So in EU you gotta choose between banking and rooting.
Don’t throw in all of europe into one pot. The banks in my country still sell separate PIN machines for 2FA, which work great.
Oh right, I completely forgot about the separate device that you have to plug into your computer and then also plug your card into the deviceand then enter your pin. It’s almost as convenient as having the phone app!
Well that sarcasm definitely backfired mate. The device I have is a QR Code scanner that works like a phone, with the important distinction that I can do with my actual phone what I damn well please.
You are talking about the id card reader, not independent 2FA devices that generate codes. Also, in some countries you can get a SIM card with special certificates that can be used for identification and document signing, they work on virtually any modern phone. I think that feature uses the SMS protocol underneath, but I couldn’t find the confirmation.
Denylist in magisk works for me in eu
Didn’t work for me on a Samsung S6 or S10. Maybe I will try again some day but for now it’s not worth the risk of never being able to go back, thanks to the Samsung physical one-time fuse.
My next phone should be a Pixel with Graphene…
S10 LineageOS user here: Works with Lygisk and the Play Integrity Fix module.
So Samsung doesn’t let users go back to stock & relock? That truly sucks!
Try Kitsune Magisk. I had problems with regular Magisk but this one works really well so far.
Depends on the bank. Mine (BoursoBank) works on a rooted Lineage phone. I only had to add it to Magisk’s exclusion list.
Yeah you needed to install a program specifically to trick the banking app in to thinking it’s running on an unrooted device, because it otherwise won’t launch (because it’s rooted).
I’ve used magisk before, and its a major PITA to use. Every time you update your phone you need to redo the whole process of setting up magisk again, which requires connecting it to your PC to and running commands in the terminal. Huge fucking PITA.
The apps of the three big European banks I have banked with were able to detect magisk and refused even when on the whitelist.
No you don’t. You simply need to run the Magisk app after an update but before rebooting.
Yeah tell that to my LineageOS installation.I had to disable magisk to update, otherwise it failed, and then I had to re-add a magisk generated file with the flashing tool for magisk to work again.
The apps my bank uses run perfectly well on graphene
Which is only available for a limited set of devices, does not have root, locks the bootloader again and is probably professional enough to get banks to approve their signing key. For those reasons it is nor a viable solution for everyone.
Fair point, I just wanted to mention that there are unofficial, de-googled OSs that do work with banking apps so that newbies don’t get the wrong impression
❤️
Add HMD Nokia to the blocking unlocks completely camp
Yeah, the bootloader really seems like a challenge. ADB fortunately is extremely easy, especially if you use a tool like
App Managerfrom F-Droid to correspond package names to specific applications.Just
adb shellwhen your phone is in developer mode and you hook up to your computer via USB, thenpm uninstall --user 0 packagename.