Hacker News Reader

Comment by choeger | Hacker News Reader

What about device attestation? Will you be able to run banking apps and Netflix et. al.?

For me the biggest concern is that while you may be able to use and run your own device, you will be locked out of most propietary services. Much like how more and more websites simply don't work with Firefox anymore.

View on HN

All Swedish banking apps I've tried works great. Including BankID, swish, Sparbanken, Nordea, LF, Revolut and more.

I've had less issues than with CalyxOS for example, where more apps broke.

I only use Firefox. It has been years since I ran into a chrome only website. Though recently I ran into an edge only websit on my corporate network, not even sure how that happens.

This might be one of those things were if there is big enough user base, companies will start to take it seriously.

Nearly all non-banking apps work with very few exceptions. A large majority of banking apps work. A growing number of banking apps were adding checks for Google certification but now a growing number of those are explicitly allowing GrapheneOS via the Android hardware-based attestation system it supports which can be used to verify the hardware, OS and app with an alternate OS or non-Google-certified hardware if it adds the hardware support for it.

Here's a community maintained list of apps and whether or not they work:

https://privsec.dev/posts/android/banking-applications-compa...

This is linked to from the Banking Apps section on GrapheneOS docs: https://grapheneos.org/usage#banking-apps

Sample size of 1: my UK banking apps all work fine.

Netflix and almost all banking apps work fine.

https://grapheneos.org/articles/attestation-compatibility-gu...

https://privsec.dev/posts/android/banking-applications-compa...

Well i do use banking and netflix on graphene os on my pixel 8a and everything works perfectly

> For me the biggest concern is that while you may be able to use and run your own device, you will be locked out of most propietary services.

Although this is not the case, moving away from proprietary services (and self-hosting your own) is an important goal in itself. See for instance the recent controversy regarding Discord's age verification.

Reply on news.ycombinator.com