Hacker News Reader

Comment by canistel | Hacker News Reader

I want to, but I cannot.

Most of the banking or payment applications baulk at getting a whiff of Lineage. You are then forced to play a cat and mouse game which is quite stressful. It is sad that ROM customisation (and rooting) is stigmatised in the Android world.

View on HN

Yeah it's a cat and mouse. I don't know about newer devices with HW attestation, but on older devices Magisk+Zygisk fixes many things but some apps still detect root. Then you add special widgets to block those, with the risk of breaking something. Funnily, all my bank apps, netflix/prime/disney streaming, everything works. Except recently my local supermarket loyalty app detected my root and refuses to work for "my security", have not dug into that yet, don't know if I have the motivation to... I just started using the physical card again at the store.

I haven't found any apps that aren't fooled by Magisk+Zygisk, and I've got hundreds installed, including dozens of banking and finance apps. The thing that really screws me up are ad blockers. The app doesn't work, and I assume it's detecting the unlocked phone, but then realize my ad blocker is preventing certain network calls.

True, but of course Magisk is not part of LineageOS and is yet another part of the system you need to take care of (for instance, you usually need to remember to uninstall/re-install it before/after every OTA update).

Yeah the OTA update bit is not great. I wish they'd package a version with Magisk bundled.

Anyway I use Microg and don't have any google services on my phone so it's worth it.

Change banks! It's a very easy thing to do to get a new bank account and move your funds over.

Or use the web version instead of the app.

Around here using an app for two factor is widely a default. Even the government requires it for their services. It's a practical requirement, just like how a back account itself is.

What app? A standard app like Google Authenticator?

If so you can get a Yubikey and use Yubikey authenticator on a LineageOS device and it will work fine with all of those services. It follows the same standard as Google Authenticator and is a drop-in replacement.

No. BankID in Sweden. Other countries have similar. You need it for everything.

MitID in Denmark, and many across Europe for government and/or banking.

I will install LineageOS once I need apps that my old phone no longer supports. I ordered the MitID backup key generator in case their app doesn't work, but I'd prefer not to need to carry it.

You inspired me to be slightly less lazy. In case anyone finds this, it seems like you can get BankID to work[1], at least according to comments from three years ago. Who knows if that still works or is sustainable though.

1. https://www.reddit.com/r/sweden/comments/ocd6v0/bankid_med_l...

Each their own individual apps. I only wish they standardized on TOTP or U2F.

The "funny" thing is that the underlying algorithm is often still TOTP. What the banks do not like is the standard QR-code based mechanism of key distribution and the possibility to export the key.

This! Your bank should never get a say in what you run on your phone or even if you have a phone. Do not take any such bullshit.

Reply on news.ycombinator.com