Comment by downut | Hacker News Reader

Comment by downut | Hacker News Reader

Parent Full thread

> I solve that, by not doing banking with my phone.

Even though some scum corps like Chase make it a PITA to manage my account from a desktop through firefox, that's the only way I'm going to interact with them.

"Download the app!"

Hard no!

In fact these are the only apps I think that appear regularly on my phone, but only when I'm traveling: AirBnB, Uber/Lyft, and whatever airline I'm currently flying on next. I think if I'm crossing borders I've installed whatever gov spyware makes TSA/Global Entry easier. They're already groping me hard, why not.

LA Fitness gets to stay because it's dumb and silent. I don't see anything else not security related. On mobile I talk to the outside world with K-9, firefox, signal, whatsapp, sms. I'm happy.

I don't use Chase in the US, but I had issues with firefox and some financial websites.

My fix was to create an entirely new profile, with no customization, no cookies restrictions, no add-ons, and use it only for financial sites.

I then exit my current FF, and switch to it, and back again.

All my issues vanished after doing that.

You could also create a different user in Linux, and isolate that way.

Hope it helps.

> I then exit my current FF, and switch to it, and back again.

FWIW, you can also run multiple profiles simultaneously. They are independent processes, sharing no resources or permissions.

This is my model for difficult sites. If I'm really concerned, I use FF network config to allow access only to the domains I think are proper.

Although in the case of banking, I prefer to use the official mobile apps. Some are actually pretty good. Others are awful. But I trust the iOS app sandbox and I trust my banks.

I also block traffic at the network level, so if the bank app attempted something egregious (e.g. tracking via the basket of Internet deplorables), it would fail.

I use Chase on my phone and desktop (Brave, not FF) and have noticed zero issues doing anything on the desktop.

Reply on news.ycombinator.com