Privacy

37907 readers

1083 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

Revolut, McDonald's, and Authy have banned the use of GrapheneOS. (grapheneos.org)

submitted 5 months ago* (last edited 5 months ago) by Sunny@slrpnk.net to c/privacy@lemmy.ml

73 comments fedilink hide all child comments

cross-posted from: https://slrpnk.net/post/15995282

Real unfortunate news for GrapheneOS users as Revolut has decided to ban the use of 'non-google' approved OSes. This is currently being posted about and updated by GrahpeneOS over at Bluesky for those who want to follow it more closely.

Edit: had to change the title, originally it said Uber too but I cannot find back to the source of ether that's true or not..

you are viewing a single comment's thread
view the rest of the comments

[–] zako@lemmy.world 0 points 5 months ago (3 children)

the problem here is not the banks or apps, the problem is Google Play Integrity API, which is supposed to enforce to run apps in secured phones and it is used to ban secured ROMs such as GrapheneOS and it allows to run apps on outdated phones without security patches.

[–] kevincox@lemmy.ml 1 points 5 months ago (1 children)

which is supposed to enforce to run apps in secured phones

The point of the Google Play Integrity API is to ensure that the user is not in control of their phone, but that one of a small number of megacorps are in control.

Can the user pull their data out of apps? Not acceptable. Can the user access the app file itself? Not acceptable. Can the user modify apps? Not acceptable.

Basically it ensures that the user has no control over their own computing.

[–] umami_wasbi@lemmy.ml 1 points 5 months ago* (last edited 5 months ago)

It's simply the "secure" isn't meant for users but the cooperations. Make it "secure" to their business.

[–] ryannathans@aussie.zone 0 points 5 months ago (1 children)

So that's why it works on lineage? They seem to get around this somehow

[–] zako@lemmy.world 0 points 5 months ago (1 children)

It runs in Lineage? Lineage is certified by Google Play Integrity API (I doubt it)? or Lineage tricks Google Play Integrity API?

[–] ryannathans@aussie.zone 0 points 5 months ago (1 children)

Yes. These apps work and bank apps work fine. Netflix works too.

[–] zako@lemmy.world 1 points 5 months ago

There are only problems with a bunch of applications that recently decided to use Play Integrity API not with every banking app nor Netflix.

This is the list: https://grapheneos.org/articles/attestation-compatibility-guide#apps-banning-grapheneos

In fact those applications should not work with Lineage unless Play Integrity API is patched/cracked someway in Lineage.

[–] jagged_circle@feddit.nl 0 points 5 months ago* (last edited 5 months ago) (1 children)

Oh, the banks and regulators are to blame. Especially in Europe.

Find me a PSD2 bank bank that doesn't require a phone number

[–] zako@lemmy.world 0 points 5 months ago

In this case, thanks to regulation, it seems GrapheneOS team is talking with European Commission about this problem with Play Integrity API https://fosstodon.org/@GrapheneOS@grapheneos.social/113623767380032309 and the only hope is a movement of the regulator against this policy of Google.