Elektrine lite

← Feed

@gandalf_der_12te@discuss.tchncs.de

Post #1508877

2026-03-17 11:56 UTC

i'm just guessing here but i think that the critical requirements to be able to run banking apps securely on your smartphone are: * lockable/unlockable bootloader * quality control of the operating system to make sure it doesn't contain malware/spyware * internet connection & open-protocol banking network the first two parts are general smartphone/laptop security and operating system integrity, which can only be done through hardware/general software developers. Like i think we need reliable hardware manufacturers but also institutions that check that open source software doesn't contain malware. Like when you run `apt install some-package` who says that some-package doesn't contain malware? The third one is the only part that is actually specific to banking. That's a whole separate topic and has barely anything to do with the first two steps.

Replies (4)

  • @grue@lemmy.world 2026-03-17 14:43

    > Like when you run apt install some-package who says that some-package doesn’t contain malware? The Debian (or Ubuntu) package maintainer says that. Having an application package available in a distro's official repository is an endorsement of the safety of that package. This is something people need to appreciate before they go adding PPAs and flatpaks and whatnot willy-nilly.

    Open ##1508952

  • @MonkderVierte@lemmy.zip 2026-03-17 12:47

    I can shop omline on a fucking toaster.

    Open ##1508953

  • @rumba@lemmy.zip 2026-03-17 16:13

    > lockable/unlockable bootloader > quality control of the operating system to make sure it doesn’t contain malware/spyware #1 without #2 is unsafe. #2 doesn't exist in android because of apps and vulnerabilities Apple at least makes a good run at it. Part of androids locking shit down is to try to make their own run at it. I honestly think we're all just going about it wrong. Make a new physical sim that is unclonable, undumpable, ultimately secure. Have it key sign financial transactions require a pin and have a physical button. If you don't touch the button and have the pin, it won't process a transaction.

    Open ##1508954

  • @WhyJiffie@sh.itjust.works 2026-03-17 20:49

    > quality control of the operating system to make sure it doesn't contain malware/spyware if uou l9ok around, you should see that is not a requirement

    Open ##1508955