Are ALL banking apps on their way out of function in GOS with Integrity Api

brookie229

Looks like my Canadian banking apps can no longer be downloaded from Google Play Store as they are no longer available due to an unrecognizable OS. Was wondering whether others are seeing this over time in other countries. It appears that sometime in 2024 most, if not all banking apps will use the Play Integrity api thus negating the use of these apps. Is this a deal breaker for anyone when this occurs?

[deleted]

brookie229 Developers need to actively enforce Google certified OS via this API, just like they could with SafetyNet Attestation API. Play Integrity API still contains the basic integrity level which permits using any OS.

[deleted]

brookie229 Is this a deal breaker for anyone when this occurs?

Personally, I haven't encountered one limited to Google certified OS yet, but I'm not really an average smartphone user either. In in case, I can't imagine this being a deal breaker for me if we're talking personal devices here. That said, I could construct plausible circumstances which would compel someone to switch away.

matchboxbananasynergy

I don't expect to be the case. Play Integrity API is the replacement of SafetyNet, it's not a new concept, just a new implementation that obsoletes the previous one. Apps have always had the option to restrict their app's usage to the Stock OS.

Even if an app wants to utilize that, there is a way for them to whitelist GrapheneOS, and we provide steps on how they can do that here:

https://grapheneos.org/articles/attestation-compatibility-guide

brookie229

[deleted]

Sure, I realize that it is replacing SafetyNet and that devs "could" accommodate GrapheneOS. I just cannot fathom how or why a large corporation such as TD or RBC would even listen to a tiny fraction of users. Perhaps ( and hopefully ) I am wrong about this. I've also noticed several other apps in my not installed list on Playstore saying "Not available for device" including Microsoft Office Mobile. I'll probably have to go back to stock Pixel but the last year or so was nice.

[deleted]

brookie229 Sure, I realize that it is replacing SafetyNet and that devs "could" accommodate GrapheneOS. I just cannot fathom how or why a large corporation such as TD or RBC would even listen to a tiny fraction of users.

They don't need to accommodate GrapheneOS, they just need not to enforce Google certified OS, which is pretty rare as far as I could tell, but plausibly could become an issue for some. Or they could do both as @matchboxbananasynergy said.

brookie229

[deleted]

I may be a pessimist but I can see this becoming more and more prevalent with practically all apps. Time will tell.

lambd

I am using the BoursoBank (french bank) app installed from Aurora Store without the Google Play services installed in my Google Pixel 8 on GrapheneOS (shiba)
At least in my case I have no real issue for the moment.

[deleted]

If a banking app forces Google Certified OSes, I would shame them publically on Twitter for encouraging monopoly of Google and write emails to them about why forcing certain Operating systems vetted by an for-profit company is not a good idea at all.

newbie24689

ISTM we'll be better off NOT using an app; use Vanadium:

Vanadium is well-written, frequently audited, and hardened. Who knows about some app; they certainly will not be as robust as GOS-Vanadium.
Using a few, excellent applications is better security-wise than using many.
Using Vanadium means one fewer app to congest the phone.

brookie229

newbie24689

That is what I am doing at present however it's not ideal for my banking app as the font comes out so tiny it is very difficult to use comfortably. Pinch and zoom is not ideal especially for my eyes. I'm not sure which is more secure, the app or the web but I am of the opinion that apps (especially bank apps) are more secure than any web site.

The other problem with web vs app is that there are fewer features available. Biggest disadvantage, of course, being that you cannot deposit a cheque using photo with Vanadium.