schweizer GrapheneOS claims that the user has control which app can exchange data with others

Can you reference this claim? I know it's been mentioned that they would like to implement app communication scopes but I'm sure we're a ways out from that.

There are a number of reasons why it's not in GrapheneOS' best interest to simply "spoof" checks like this. Including, but not limited to it giving a bad image of GrapheneOS to the uninformed which will make app compatibility even more difficult.

      GrouchyGrape Here they write "apps within the same profile can communicate with each other with mutual consent". This is not true. But that's offtopic here.

          schweizer but that is true, that's the issue being discussed in this thread. Apps are communicating with each other with mutual consent, exactly as intended.

          I'm suspecting there's a language barrier going on? Forgive me if I'm incorrect in thinking this.

              fyi, i also installed GrapheneOS a few weeks ago and wanted to install UBS Twint. Didn't work (the App was flashing strangely and touch didn't really work). I'm now using Twint Prepaid without any issues. You can charge it up through your bank (until 200 CHF will be immediately be topped up, the rest is after the transfer is complete). So if that is an alternative for you.. Limits are just not as high as in the native Twintapp of your Bank. But i can live with it.

              FYI, I manage to install and make Twint works in the Private Space, where I enabled GSF and logued with a fake google account for Play Store.

              19 days later

              I got a reply from Migros Bank. They do not develop Twint themselves and forwarded the complaint to that company.

              GrouchyGrape
              Well, being a non native English speaker the term "mutual consent" is not what I would use to describe things that happen against my will. I am convinced that apps can at least detect the presence of other apps since I had a case where a banking app refused to work because an other app was detected.

              And I ask myself what is the "intention" of forcing an ID that is tied to a passport being transmitted to Google. This is usually a KYC thing. But as a Twint customer you are already identified against your bank. So there is no good reason to additionally send identity to Google unless they get some kickbacks from them. Or another crummy deal. Or incompetence.

                  schweizer gotcha, that makes more sense. If you understand the phrase "mutual respect", you understand that it means there are two parties that respect each other with no other parties involved. "Mutual consent" in this setting is very similar. The two parties are simply two apps that are mutually consenting to communicate with each other with no other party (being you) involved. It's not mutual consent between you and the two apps, just the apps by themselves.

                  There are plenty of legitimate reasons for this that I'm totally cool with. However, there are obviously times that I'd like this restricted. Thankfully, the GOS team is working on implementing app communication scopes to mitigate this.

                    • Mmrn

                      • Post #22

                      For information Twint still works for me for BCV.
                      I had a friend that has Migros Bank and a month ago he wrote to me saying that it wasn't working for him anymore. Seems to be a Twint Migros specific thing.

                        mrn CS version is also still working after update to 2.19.29.0 (play services installed but not signed in, using the app on a secondary profile).

                        • mrn replied to this.

                            mrn good to know! I have it installed because of push services for this and other finance apps.

                            • mrn likes this.
                              2 months later

                              The newest version of MB Twint works without a google account again. Problem solved.

                              I have not tested if Playstore is required at all because I need it for other apps.