Hacker News Reader

Comment by dazbradbury | Hacker News Reader

That is annoying. And from the market comments it seems jailbroken iphones are the same.

However, my assumption is that it's a security measure. They are presumably trying to stop malicious applications sending payments without user notification, and I guess that makes sense.

As a bank, they may be being overly precautious, but is there a fallback of a web app?

View on HN

It's a security measure against the wrong crowd. If someone is going to use root for malicious purposes, they'll just take apart the app and remove the check for root. Blocking casual root users is doing nothing for your security.

I think the measure is in place FOR casual root users. No doubt there will be ways to remove the check for root, but then you've installed a non-standard application, and Barclays are presumably no longer liable for losses.

If you were a casual root user, installed this app, and there was some back-door only accessible via rooted phones, it would be the bank's problem.

Whether this is a reasonable security measure or not, I imagine it was their line of thinking.

Android relies on different apps running as different users for security. Rooted devices bypass this and destroy any notion of inter-app privacy, which basically nullifies the entire security architecture.

Casual root users are at enormous risk of malware, like running XP without a firewall levels of risk.

If your device is rooted you're more likely to have routes for malware to get onto the device. When money is being moved out of your bank account, malware is the last thing you want on the device

Security thru obscurity. hmm risky. I wonder how long it will take for someone to break it and Barclays to pull the app. N.b. it allowed me to install but quit straight away with a warning message.

As a bank, they may be being overly precautious

When I give all my money to someone for safekeeping, I would much prefer they err on the side of caution.

Reply on news.ycombinator.com