Back

HSBC blocks its app due to F-Droid-installed Bitwarden

43 points1 hourmastodon.neilzone.co.uk
sschueller54 minutes ago

That's Google's SafeNet. HSBC picked a level that causes this. Google manages the blacklist of apps.

We are rapidly losing our freedoms to the will of these companies. If they decide they don't want to they can even if the law doesn't forbid it.

People in Switzerland and the EU are being de-banked by local banks because of US pressure allowing them to force any bank that wants to use USD. The US has started to sanction people for free speech resulting in de-banking.

Swiss law requires one bank (Postfinance) to offer banking irregardless but if you are sanctioned you can't use the wire system, no other currencies, no credit cards and you cant use Twint either so it's in effect useless.

yellow_lead56 minutes ago

I thought Google removed the API that let you see other apps on the device. Maybe there's another API I'm not aware of though

grahamedgecombe52 minutes ago

You can still request permission to use it for apps distributed via Google Play for a limited set of use cases:

https://support.google.com/googleplay/android-developer/answ...

which is then subject to Google reviewing and approving it.

I assume HSBC are using the "antivirus" use case.

lol76848 minutes ago

Plenty of UK banks that don't require this, and whose apps will also work on a rooted device. Monzo will display a warning that sets out the fact there's an increased risk, and then lets you be an adult and choose to continue to use the app if that's what you want to do.

The best part is that the Current Account Switching Service makes it very easy to make the jump from a legacy bank like HSBC.

noobermin50 minutes ago

My wife has tried to use a flip phone just for nostalgia's sake and she has a newer phone that supports android 14 (technically android go 14) and thus should work with most basic apps. However, one of her banking apps refuses to work claiming an app is screensharing (the POSB bank app thankfully identifies it as the "android system" app.) likely what is occuring I think is the second screen is drawn using some sort of thing that is reported as screen sharing, that POSB thinks could be malware.

Of course, asking POSB for help has lead to nothing being done. By and large the biggest threat to people finance wise in singapore isn't malware but are scams (what is called "pig butchering" in America is rampant here) whilst malware is always a threat sometimes I feel like just refusing to function is problem due to overzealous viligiance to a low probability threat.

hasperdi56 minutes ago

It will not work either if you have developer mode enabled.

These things HSBC app does, I think it's overreaching

ValentineC53 minutes ago

> It will not work either if you have developer mode enabled.

Many other banking apps in Singapore have this ridiculous restriction too, including Citibank.

The third-party "security framework" most of them use to pass audits is ridiculous.

charcircuit48 minutes ago

It's worth trying to work around this by creating a work profile to isolate the apps.

hkt50 minutes ago

Ditch apps on your phone and pick banking that gives good, robust online banking. I was cut off by Starling for something similar and had to choose between a factory reset of my phone and my bank. I explained that my phone had free software on it, some of which I'd written, and it made no difference.

Apps are a tool of control and surveillance and it is time we stopped tying ourselves to them. Dumb phones or degoogled operating systems (like e/OS/) are probably the answer here.

throwaway8152354 minutes ago

I use a separate phone for non-F-droid apps.

zb357 minutes ago

We can't let banking apps invade our property.. things like banking apps need so much control in order to be secure that they need to exist on dedicated devices.

notpushkin56 minutes ago

> things like banking apps need so much control in order to be secure

They don’t. It’s a security theatre.

itsthecourier1 hour ago

probably because bitwarden has a permission to overlay other apps and HSBC thinks it's malware stealing your access to your bank

graemep54 minutes ago

The HSBC app will not work with apps with overlay permission OR with apps installed from outside the Play Store.

I have stopped using the HSBC app and asked for a security device (which they will send you if asked) instead and use the web site instead.

zb359 minutes ago

But the user needs to be able to override this faulty check, albeit my solution is to never let any app decide what I can have on my device by not installing the app.

EDIT: there's also Android Protected Confirmation that works in the TrustZone so apps can't display over that. It was made exactly for apps like banking apps, so they should use it.

arccy1 hour ago

I think from HSBC's risk management perspective, it's fairly reasonable

makeitdouble53 minutes ago

A bank refusing you access because of your accessibility settings (app overlay is one) is not reasonable.