Hacker News Reader

Comment by CrimsonRain | Hacker News Reader

I want to take a screen shot of the transaction I just did. Can't because some ahole decided for me that it's too sensitive information and blacks out the whole screen. this API is stupid without control in settings of the os

View on HN

Yeah, I used to have this issue a lot. If I use my personal card for a business expense, I used to like to keep a screenshot of the transaction on the card as well as the invoice. As it's an app-only challenger bank, this is the only way short of exporting transactions as a PDF and that includes other transactions for the day. For a long time I used to use another phone to take a photo of my phone screen. Eventually, I just stopped bothering taking that photo because of the extra hassle, but it never stopped annoying me that I couldn't keep the records I wanted easily.

Yeah, I would rather see a warning in that case that the screenshot could contain sensitive information, with options to take a redacted screenshot or a normal one.

Lots of people here exposing their single sign on approve code because a scammer ask them to send them a screenshot.

I mean... "please read me the code you get via text" or "this really Bank of America, please type your OTP" seems to work well enough. We really don't need OS-level controls for stuff on the screen. People can just tell you what's on the screen.

So that means this change will result in a noticeable decline in such scams, right?

Right??

Potentially worse than nothing, it allows for someone to claim they have a fix even if the fix does nothing to stop someone from becoming a victim, thus allowing for even stronger victim blaming.

the solution to that is letting those people get scammed.

you don't have a share button tha generates a PDF and shares it with whomever?

Often, you don't, because the same developers of the bank app decided it's an unnecessary power user feature that doesn't fit in the MVP or something.

Or, even if they add it, there's no way to save the file, only to "share" it, which 99% of the times isn't what I want, and I'm frankly tired of routing through the mail app as a workaround. At this point, at least on Android side, there exist apps whose sole purpose is to be a share target and dump the information to file (and being apps on an app store, chances are top 10 are just thinly veiled malware).

really? I'm not suprised by shitty developers developing shitty apps but i'm still baffled. Surely the bank would be getting tons of angry emails from customers if it happened in europe

Would they care?

They probably support proper export for business accounts. Business customers have leverage. Regular people? They're an annoying but necessary nuisance.

Here's an open source solution on F-Droid, presumably malware-free:

https://f-droid.org/packages/com.mateusrodcosta.apps.share2s...

https://github.com/MateusRodCosta/SaveLocally

Yeah I wondered why anyone would ever install such a simple utility app from the app store. It's something that needs to be developed once and then only receive minimal maintenance which means the usual individual maintainer scratching his itch and sharing the result model works well but it also processes intentionally sensitive data meaning developers might be tempted to monetize that in some way. The curated open source distribution model of F-Droid is the perfect solution to this.

Reply on news.ycombinator.com