• viking@infosec.pub
    link
    fedilink
    English
    arrow-up
    37
    ·
    1 year ago

    Same for DBS bank, also in Singapore. Their app, which is mandatory to generate login & transaction approval OTPs, doesn’t even work on a stock OnePlus phone since it detects part of the OS as “modified”.

    Since I have to use that bank for my company, I had to buy a separate phone that’s now sitting in my drawer 24/7 for that purpose alone.

    • HidingCat@kbin.social
      link
      fedilink
      arrow-up
      9
      ·
      1 year ago

      WTF, I remember the UOB banking app not liking my phone being rooted and what not, but Magisk would work sometimes. But a stock phone not working is especially fucked up. Did you find out what was triggering the response?

      • viking@infosec.pub
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 year ago

        I’ve escalated this all the way to their app developers and in the end they told me something about permissions to draw over other apps being enabled in the default launcher, which they consider to be “malicious”. So my options were to install a third party launcher and forcefully uninstall the default OnePlus launcher (via adb, since any other method would require root), or use a different phone altogether.

        Now I’m using Nova Launcher anyway, but it had glitches every here and there where it would default back to the standard launcher, so uninstalling that was a risk I didn’t want to take.

    • totallynotfbi@lemm.ee
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      Yeah, it’s the same for iOS when you sideload any app. You can always get an SMS OTP to login though

      • viking@infosec.pub
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 year ago

        For sideloaded apps I can understand the rationale at least, but a stock phone really shouldn’t have any issues with a genuinely downloaded app from google play.