• picnic@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    Now this is shitty. Our company allows only authentication with the app, and I was really happy to give up the shitty phone they offered and just carry one.

    I saw the news earlier this or last week, but as my grapheneos is not rooted, didnt think much of it.

  • Reygle@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    Oh no

    Anyway

    Microslop authenticator might not work for my zero Microslop accounts, lack of Microslop sloperating system, OR their piece of shit cloud platform that I refuse to touch?

    WHAT WILL I DO

  • GreenKnight23@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    I mean…okay?

    I have a work phone for this exact reason.

    work phone stays on my desk. I have removed the microphones. I turn it on at the start of every day, and turn it off at the end of every day.

    good luck with that plan Microslop. looks like Microslop is trending too!

    1000003153

  • mrnobody@reddthat.com
    link
    fedilink
    English
    arrow-up
    0
    ·
    12 days ago

    Unless on Motorola devices (soon).

    I hope it’s like FairPhone where you get to choose android or Murena/e/

    • VeganCheesecake@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      0
      ·
      12 days ago

      We wouldn’t want any Graphene OS device to fulfill the requirements necessary to be certified. That would make it useless.

      ‘Rooted’ doesn’t mean rooted, it means the Google API it checks against says no. And is unlikely to say yes on any device that isn’t ‘official Android’, with Google Apps having System access.

      • Auli@lemmy.ca
        link
        fedilink
        English
        arrow-up
        0
        ·
        12 days ago

        Googles been getting in trouble for requiring Google apps to he certified. So maybe they allow grapheneos through to say see we don’t knowing it well be very niche.

      • mrnobody@reddthat.com
        link
        fedilink
        English
        arrow-up
        0
        ·
        12 days ago

        Like my other comment said to someone else, so much for Android “OPEN SOURCE” Project, huh? Only OK if its stuffed with Google shit to make money from?

    • hummingbird@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      12 days ago

      Make no mistake. If Google does not certify GrapheneOS on Motorola, these devices will be flagged as modified by Googles API just like on any other device.

      • mrnobody@reddthat.com
        link
        fedilink
        English
        arrow-up
        0
        ·
        12 days ago

        So much for Android OPEN SOURCE Project, huh?

        Only “open source” if Google gets to profit from it?

  • absquatulate@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    12 days ago

    This is what I fear will happen to GOS on Motos. Google decides to mark them as rooted so buh-bye banking apps and others that require a “secure” os.

      • absquatulate@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        12 days ago

        It doesn’t matter if they are or not. Google can deem them modified or not secure devices and they can do fuck all about it.

        • e8d79@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          0
          ·
          12 days ago

          The difference being that Motorola is a well established device manufacturer and not just a community project with minimal funding. Google using play integrity to exclude a competitor could be very easily seen as an abuse of market power and they already have problems with antitrust laws.

    • quick_snail@feddit.nl
      link
      fedilink
      English
      arrow-up
      0
      ·
      12 days ago

      Always has been.

      Banking on a phone is insecure, and this is one reason. Never use banking on mobile.

      • Auli@lemmy.ca
        link
        fedilink
        English
        arrow-up
        0
        ·
        12 days ago

        Don’t see how banking on phone is anybless secure then a computer.

        • skuzz@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          0
          ·
          11 days ago

          You’re letting the bank know everything about you. What apps you have installed, how you use your phone, where you go, you’re just letting them have access to your entire life for mild convenience. Just use the web site and make an icon on the home screen to get to it.

          • Jako302@feddit.org
            link
            fedilink
            English
            arrow-up
            0
            ·
            11 days ago

            Each banking app usually has a separate password you have to set and every transaction requires some form of authorisation.

            You could make an argument about security concerns in regards to biometric scanners in phones, but short passwords are a universal thing for people that dont care.

    • skuzz@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 days ago

      Another banking app thread, fun! Don’t use phones for banking. One just trades privacy for perceived convenience. For “safety” you give your bank:

      • Unnecessary lower-level system access than normal apps, for SAFETY!
      • Your location as often as they can harvest it
      • What apps you have installed
      • Any metadata they can exfiltrate through trackers in the app that can be mated with metadata from other app trackers
      • Any personal information they can gather from your phone

      Furthermore, if you use tap-to-pay, which some banks require their app be installed to use, you’re then giving every transaction you do, with or without tap-to-pay, to the operating system provider and any third parties along the way. Use your credit card at a store and the phone’s at home? That transaction still gets scooped up.

      Finally, you have this object you always carry with you, that has access to all your financial information, that a bad guy just has to punch you in the face to get you to log into your bank and delete all your money. Bravo! With a card, it can be shut off afterwards, and the bank can mark any transactions happening afterwards as fraudulent. With a phone app, they can Zelle themselves your money and the forward it to some cryptocurrency and good luck. Then clean out your RobinHood, your DraftKings, your CoinBase, your 401k, and anything else they find along the way.

      Use the bank webapp if one is desperate.

      Banking. On. Phones. Is. Stupid.

  • arcine@jlai.lu
    link
    fedilink
    English
    arrow-up
    0
    ·
    11 days ago

    That doesn’t make sense to me, afaiu :

    GrapheneOS is NOT rooted by default, and they explicit recommend NOT to do it, because it invalidates a huge part of their privacy guarantees.

    • Honytawk@feddit.nl
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 days ago

      Yeah, and Microsoft policy is just about rooted phones.

      There isn’t any reason to mention GrapheneOS, unless it is to generate unwarranted outrage.

      Which seems to be working on a lot of folk on here.

      • AndrewZabar@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        11 days ago

        Well it could just be part of the collective corporate alliance that will always do anything they can to make any kind of freedom cost more for everyone. GrapheneOS is taking your freedom and not feeding on the corporate-issued fodder, and well, they don’t like that. So this is just one more small difficulty added to that choice.

        This kind of thing is only the beginning. It won’t be long before absolutely nothing will work on any freedom-oriented OS, software, hardware etc.

        Some fires need to start, and soon.

    • cmhe@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 days ago

      privacy guarantees

      security guarantees, not privacy guarantees.

      With root you can actually control what kind of things each app does and stores, and check what data it transmits to remote servers. But it also breaks/weakens the android security model, where apps can do, store or transmit stuff protected from the eyes of the user of the phone.

  • dorumon@lemmy.cafe
    link
    fedilink
    English
    arrow-up
    0
    ·
    12 days ago

    Honestly thank you for posting this. Lest I would’ve lost my Google and Microslop account.

    • eleitl@lemmy.zip
      link
      fedilink
      English
      arrow-up
      0
      ·
      12 days ago

      Use your work phone.

      I don’t need a Microsoft account and if Google insists, I will kill my account with them as well.

  • shaggyb@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    12 days ago

    That’s fine.

    Any job that wants you to use certain software can provide a device it’ll run on for you.

    • CerebralHawks@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      0
      ·
      12 days ago

      Amen to that. Even if your computers will run it, provide the device. I’m not installing shit on my home computers.

      My job has suggested it to me. I say “you know how all these computers run Windows?” They nod. “Mine doesn’t. It’s a Mac.” That usually shuts them up. Never mind that most of what we run will, in fact, run on a Mac, and there’s very little a shitty Wintel box mass produced for the enterprise can do that my Mac can’t do. I mean, I can run Deus Ex natively on the work computer, if I wanna catch hell for it. (But it would be fucking hilarious, especially if I’m at the part where JC Denton hands in his “resignation.”)

    • fleem@piefed.zeromedia.vip
      link
      fedilink
      English
      arrow-up
      0
      ·
      12 days ago

      and it goes in an old microwave in the laundry room when not in use. right? this isn’t crazy in this day and age is it?

      IS IT???

      • shaggyb@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        12 days ago

        Trunk of the car is fine if you just head straight home. That’s out of mic range. And your employer is going to know your home address anyway so location access is whatever.

        Bring it inside when you go on a road trip.

    • VitoRobles@lemmy.today
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 days ago

      Yep! You want me to use your microslop on your hardware at your company, fine.

      A company that has you use your personal device is an awful company and huge red flags in terms of privacy.