>You simply are not in full control of the OS.
A great thing for 99% of the users.
A great thing for 99% of the users.
The vast majority of users simply do not benefit from being exposed to such complexity, it certainly shouldn’t be the default.
Think safety locks on pill bottles or cabinets.
Most banks in Germany allow HBCI, so you get an external chip reader, any HBCI-compliant software – be it StarMoney, or GnuCash/KMyMoney with the HBCI plugin – configure your account, and authorize API accesses via the card and PIN on an external keypad (which shows what you’re authorizing on its own display).
This is the average way a consumer does online banking, and it’s much more secure than on iOS.
lol. At least on iOS they can trust what they see.
On desktop they can't, https://securityintelligence.com/tatanga-attack-exposes-chip...
All of your security theater falls apart when the device is infected with malware that can make the bank site say anything.
On iOS your banks app/site will never ever lie to you, if it does it'll almost certainly be the banks fault and not the users.
While German banks support that almost universally, hardly anybody uses it.
[0]: https://shop.reiner-sct.com/chipkartenleser-fuer-die-sicherh...
And the chip reader is required for the new Personalausweis anyway.
To me it looks like nobody actually uses the Personalausweis online. Just recently, companies have switched off their support (e.g. HUK or DKB). And the majority of the readers around are just RFID readers without any dedicated keys or display (which obviously is not a secure way) which can't be used for HBCI.
Sure, but my point is mostly that generally restricting user freedom results in much less of such getting installed.
The ability to control your machine is always good for users in the long run, though you're right it's important to make stupid changes very difficult for less sophisticated users.
Perhaps your bank should control your money so that you don't spend it unwisely? Users are stupid, after all.
One of my father's laptops runs Xubuntu. It's totally fine too. He doesn't even know what root permissions are and he never needs them. But still, sometimes he has to install something and I have to help. The point is, I never get asked to help with W10 neither from friends or family, which is actually amazing.