I just got a message on my app forcing me to agree to let the app look at when I scroll and scan what apps I have on my phone, in the name of "preventing hackers" which kinda sucks. Any banks that actually respect your privacy in Australia? or does anyone have tips to make banking more private?
Yes I know graphene-os has sandboxing, no I'm not buying a new phone.
20 Comments
Tenderizer78@lemmy.ml · 12 pts · 262d
I use Commonwealth Bank. It works fine on GrapheneOS, no popups.
You could always just use the browser version of the banking app.
Bank Australia is the bank you should probably use, regardless of the app situation, since it's not for-profit (I haven't switched because I'm waiting for Visa and Mastercard to differentiate themselves on censorship (not that I actually care about the issue)).
dracs@programming.dev · 7 pts · 262d
I'm using Bank Australia with GrapheneOS and it works well. Does the Comm Banks builtin tap and pay work on GrapheneOS at all? Assuming they still have their own version, I haven't been with them in a while.
Tenderizer78@lemmy.ml · 2 pts · 262d
Wouldn't know. I don't use tap and pay. I just use my card.
ryannathans@aussie.zone · 2 pts · 262d
Yes, works on mine. At least it did when I used it a couple months ago. I prefer to use cash.
Macquarie is also good on graphene but no tap to pay
pineapple@lemmy.ml · 1 pts · 261d
This is what I'm looking for! thanks. I also like the idea of not supporting big bank so I like the idea of this.
theskyisfalling@lemmy.dbzer0.com · 5 pts · 262d
Not Australia here but I use Native Alpha to create a webapp version of things that I dont want the invasive apps of but that have good browser options, like my bank.
pineapple@lemmy.ml · 2 pts · 261d
That seams pretty cool, thanks.
olorin99@kbin.earth · 3 pts · 262d
What bank asks for those permissions? Just so I know to avoid them.
pineapple@lemmy.ml · 2 pts · 261d
Commonwealth bank
olorin99@kbin.earth · 1 pts · 256d
Uh oh thats who I'm with. I'm using GrapheneOS so should be fine. Maybe I'll transfer the app to a separate profile just in case. Thanks for heads up.
rcbrk@lemmy.ml · 2 pts · 261d
I prefer browser(web)-based banking apps which work well on a phone UI without the info-access creep.
UBank (NAB subsidary) and Wise (not a bank) both support passkeys for login in the browser. Most other banks here seem to have regressed from hardware tokens to SMS codes or proprietary apps for their MFA.
Passkeys are only as secure as your passkeys -- I use Bitwarden with master password re-prompt checked for bank credentials, but I should probably switch to a hardware based passkey (at least for unlocking Bitwarden itself).
The phone apps are sometimes required to do some things (like managing passkeys for UBank, verifying ID in Wise). They work on LineageOS without the google stuff, but might be worth installing only temporarily in a separate profile or phone.
Retail payments -- just use a physical card if you're not using cash.
Unlearned9545@lemmy.world · 2 pts · 261d
I have ANZ here in NZ and can use them in AU as well. The only permission I allow them is notifications.
mickus@sh.itjust.works · 1 pts · 261d
For westpac I just login on a browser on my phone, so no app downloaded
mickus@sh.itjust.works · 1 pts · 261d
Probably a security issue tho, since you only need the phone password to get in, since the browser saves the password. So thats a risk, so maybe don't do what I do lmao
hanrahan@slrpnk.net · 2 pts · 261d
That only happens if you let it, I chose "never" and use biwarden to back fill user/password
CameronDev@programming.dev · 1 pts · 262d
ING works fine with no permissions.Mountaineer@aussie.zone · 5 pts · 262d
Actually, if you hit those 3 dots on the top right and select "All Permissions", you'll see there's a whole host of things it demands that you can't opt out of.
CameronDev@programming.dev · 5 pts · 262d
I stand corrected, thanks.
Mountaineer@aussie.zone · 3 pts · 262d
As you can see, I too have made a "least bad" choice for pragmatic reasons.
I take no pride in correcting you.
LavaPlanet@sh.itjust.works · 1 pts · 261d
I'm using boq and up, for ethical reasons, but I haven't looked into their privacy or compatibility.