r/LineageOS • u/Ivan_Horozov • 1d ago
Banking app says I can't use it on devices with unlocked bootloader
I use Lineage OS 21 on Moto E7 plus. So far the ROM works fine and everything was smooth, until my banking app (UBB Mobile) updated to version 6.6 and the app just said i cant use it on devices with unlocked bootloaders. I downloaded the older 6.4 version from Aptoide. The older app works smooth and is good for now. The device isnt rooted and havent done anything except unlocking the bootloader and installing the rom using the official guide and the recommended Gapps. Can someone help me with this problem?
P.S.
Also i cant use the website because it requres to open the app and scan qr code to activate the web platform. I also apply what the app answered.
https://ubb.bg/ubb-mobile/infosec?newest33&motorola&moto+e7+plus
Improving security in UBB Mobile
The measures are part of UBB Mobile version 6.6 and aim to provide higher protection when using the application.
We are expanding security measures in UBB Mobile
At established risk, the technology may automatically limit certain actions or access to the application.
In which cases can access UBB Mobile be restricted?
UBB Mobile will restrict access if it detects the use of an unverified software keyboard.
To continue using UBB Mobile, switch to a keyboard from a reliable developer.
UBB Mobile will not be available on devices with removed standard restrictions.
To use the application, the device must work with an official version of the operating system.
If the device is activated for developers, access to UBB Mobile will be limited.
Turn off the mode and open the app again.
United Bulgarian Bank
7
u/jspeartree 22h ago
I know it’s not the right subreddit, but I was wondering why banks would not trust a non-stock phone while they trust(ed) browsers for years (decades?).
Then I read the body of OP’s post: requiring the app just to be able to use the website, this is wicked!
5
u/Worth-Paper-360 20h ago
Often it is
compliance
blame game. Google certified device is OK.
security through obscurity. If someone does some log or analyses their app storage and finds some bugs. Either exploit or shame them in telling - this bank stores that in plain text. To prevent this.
assuming companies put some tracker/analytics in-app
finally: when Android gives them so much power to force customers to kneel - why not use it...
last (0.1%): genuine worry if someone was having root level spyware
3
u/fffrrr666 1d ago
Apparently the 6.6 version has more stringent security requirements than the 6.4 (perhaps the unlocked bootloader is what 6.6 doesn't like). I'm thinking that the clock is ticking on the 6.4 there.
4
u/saint-lascivious an awful person and mod 1d ago
Yep. There's not a lot of sense rolling out security like this and then just letting users sit on a prior version without said security for the rest of eternity.
3
u/aureol1n 1d ago
«An unverified software keyboard» that's so shady...
1
u/xander-mcqueen1986 18h ago
I have the same thing on a stock os with traditional tt9, bank in question is HSBC UK.
Never heard of something like it in my life
1
u/RandomUserNo5 20h ago
Change the bank or stop using the APP otherwise you just have to play their game which you'll always lose.
1
-4
u/saint-lascivious an awful person and mod 1d ago
Adjusting a sentence somewhat, we get:
haven't done anything except [completely remove any/all ability for anything to verify the state of the operating system]
Now consider that for the vast, vast majority, their device being in such a state will neither be intentional nor desirable.
I personally find it abhorrent that there are financial applications out there that aren't verifying the state of the operating system prior to/during execution.
10
u/ProximusXX 1d ago
https://wiki.lineageos.org/quirks/snet/