Now the bank's app knows what other apps you have and demands that you delete them πŸ˜‚. But it's the system we deserve; we've allowed it. image

Replies (67)

BTCBaggins's avatar
BTCBaggins 5 days ago
Please sir may I have another spyware on my slave tether? image fuck that. image
kic's avatar kic
No issue on my device with regards HSBC UK accounts. I have F-Droid installed most of the apps on this device, including Bitwarden, and received no alert on opening the app.
View quoted note →
I wouldn't lose a single second thinking whether to change fucking bank. This is outrageous at the very least.
bz's avatar
bz 5 days ago
What a shame. Time for a move?
This is fucking nonsense. I had to talk to chase to unblock my account which was blocked as I sent money to my wife on Zelle. They asked if I was expecting anything in return. I said THANKYOU would’ve been nice. πŸ˜‚
It's not because it's Bitwarden, it's because an app has been installed from a source other than the Play Store, and thus hasn't been audited by Google and installed with the verification of Play Protect. HSBC doesn't want apps that aren't Play Protect-certified installed on the device. Android is merely showing the user a list of all such apps, so that they know what to uninstall if they wish to comply with HSBC's mandate. The HSBC app doesn't know what the offending apps are, merely that at least one offending apps is installed. Install Bitwarden directly from the Play Store rather than another source, and the HSBC app won't complain. Yes, it's still utterly stupid, especially when you consider the fact that the same banks are willing to let customers access and manage their accounts in any web browser, which is much less secure. No, the UK banks won't budge on this, they've been doing it for over 10 years in various forms, it's a continuous cat-and-mouse game. The extra (nominal) security guarantee afforded by Play Protect is not a requirement for EU PSD2 SCA authenticator app compliance, but I wouldn't be surprised if someone in HSBC's liability/cybersecurity department advised them to implement this for some misguided reason. That said, I'm running Android 14 on a non-rooted device with several apps installed from sources other than the Play Store (including Bitwarden from F-Droid), and all of my UK banking apps (of which I have 12, as I have accounts with almost every bank that operates in the UK, though HSBC is notably not one of them) function just fine. Suffice it to say that if First Direct (an online-only subsidiary of HSBC UK that is routinely ranked as the top bank nationally for customer service) implements this and refuses to revert, I'm closing my accounts with them.
In a way I kinda welcome this. I don't like being told, "You have to do that through our app." This gives me the perfect excuse.
HSBC Bank had a commercial whith the slogan "Your DNA will be your fingerprint" ! Why are u supprting those dark occult agenda vampires ? I would never ! It's called: I N T E G R I T Y πŸ’―
frphank's avatar
frphank 4 days ago
What do the Sims have to do with this?
"We see you've downloaded a password manager. Given our policy to only allow 5 alphanumeric character passwords that we store unsalted on an AS400, this is in breach of our digital systems usage policy."
0x000000's avatar
0x000000 4 days ago
"Apps within the same profile can communicate with mutual consent and it's no different for sandboxed Google Play." #GrapheneOS #FuckApps #FuckBanks #FuckEverybody
cupid's avatar
cupid 2 days ago
The banks are going crazy; perhaps one day they'll go so far as to ask us to delete the balance in our bank accounts.
Android still allows apps to detect what other apps are installed? That's as much an OS problem as an app problem, assuming you didn't have to consent to some kind of device management profile first. It's not unreasonable that an app developer would flag a sideloaded version of a password manager. It likely points to problems far more often than it points to people enacting extra-strong security controls or doing legitimate local builds. But it's not reasonable if the OS enables this capability by default.
↑