I'm looking for people working at a bank in Europe who are interested in #EthicalTech and who would be interested to help us ensure that banking apps function well on European operating systems.

[face@hostux.social]

@rikviergever @yurukov Can you help out?

[bundyo@bundyo.com]

@rikviergever

What about Sailfish OS, which is the most used European mobile OS not based on Android.

[rikviergever@mastodon.social]

@bundyo Correct they have the same challenges as us with regards to banking apps! We collaborate with them in addressing this challenge

[rikviergever@mastodon.social]

Would love to be in touch about this @yurukov if you can help!

[chasalin@mastodon.chasalin.nl]

@rikviergever a quick scan with PCAPDroid shows that the new #Triodos app only connects to ecb.europa.eu and api.triodos.com

So far so good.

I run Android 16 with all google services, including play services disabled and blocked.

[tammo@defcon.social]

@rikviergever

I recently installed 3 Dutch banking apps on my Fairphone with /e/OS. Triodos and ASN work without encountering problems until so far.

Rabo app was strange: installing seemed to work, but after closing the app all my credentials were gone. I tried another time, same result. Would be great when Rabo fixxes this.

[rikviergever@mastodon.social]

@tammo yes indeed, we have a lot of apps working with /e/OS today, but we would like to make it 100% ! Therefore my request for contacts at banks.

[olivenolje@mastodon.social]

@rikviergever There is this maintained list of banking apps compatible with @GrapheneOS (security-oriented Android fork) (cf. https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/).

Some devs behind the Norwegian BankID (essential ID confirmation app in Norway) are approving of GrapheneOS (cf. https://github.com/PrivSec-dev/banking-apps-compat-report/issues/255#issuecomment-2975599573)

[voorstad@mastodon.nl]

@tammo @rikviergever

I discovered that installing the Rabo app via Aurora solves the issue.

[remaster@mastodon.social]

@rikviergever I don’t have any contacts at banks, but I started thinking, could this be solved through accessibility requirements?
In Finland you would contact this authority in that case.
https://saavutettavuusvaatimukset.fi/en

[wiredfire@mstdn.social]

@rikviergever I'm not at liberty to get involved but often it's a RASP library maintained by a 3rd party that gives the grief. They're used in the best intent, security *really* matters for a banking app (not only for customer impacts but regulatory consequences) so I get why it's in place. But it really makes it functionally challenging for a key service for many not to be reliable on alternative OSs. Would love to see an open, secure enough, option AND a route for encourage backs onto it.

[tillmanreuter@ecoevo.social]

@rikviergever @glsbank

[mira@outerheaven.club]

@rikviergever@mastodon.social I wish I could work on something like that

[olibrendel@scicomm.xyz]

@rikviergever I don't know anybody personally, but I would contact the german GLS bank, which is an socially and ecologically ethical bank. So they might be interrested also to be it digitally.
And present on Mastodon
@glsbank

[buherator@infosec.place]

@rikviergever I know it's a weird thing to ask, but you should create a LinkedIn post about this, as most relevant people are over there. I'd be happy to share too to my many bank IT peers (if the damn thing allows me to log in...).

[speaktrap@mastodon.com.pl]

@rikviergever BNP Paribas Polska worked well for me on both LineageOS/microG and SailfishOS/AlienDalvik/microG! Altough last time I tried was a few years ago

[hrifeu@waag.social]

@rikviergever @finhstamsterdam might be

[tr4sh@mastodon.social]

@rikviergever totally agree! Good initiative, although I don't know how I personally can contitrubute, I am curious to hear if you were also considering Contactless/NFC payments in the equation. Most banks stopped their own implementation and went full on Google(/Apple) Pay.
Quite har(/currently impossible) to find a non-big-tech & European alternative.
Just found out that Curve uses an Identity provider that was purchased by an US based company.

[lavergnetho@fediscience.org]

@rikviergever @tammo Banks app are important, but direct payment apps like #Vipps / MobilePay in #Norway could hopefully also be part of this effort.

[v_d_richards@literatur.social]

@rikviergever

If this issue would be solved with at least a few banks, that would be a gane changer and those would be very interesting to switch too!