Well use Lieage os, Calyx os or e/os if you want saidly a mater of rom verifction form google
It is not that easy.
I lile FOSS appd and therefore have F-Droid and a bunch of apps come this way.
But I also have a banking app… which as far as I know does not work on Custom ROMs.
Fortunately Google has announced that ‘sideloading’ will somehow stay possible. Let’s see what this somehow will be.
@bjoern23 Why don’t you use the website? That’s what I do for my banks, even though they work on custom ROMs.
A website (with the correct web browser) is a lot more limited than an app when it comes to spying on me. I also don’t want to be locked in to a non-free platform like Android. ![]()
Can you scan a QR code or use NFC to pay using a bank website ?
@Alain_Guillet I have no idea. Everything is digital here in Sweden. I receive my bills directly to my bank, which means that I only have to click a button to accept it. And invoices are sent to my e-mail account, which means that I can just copy and paste a single value when creating the payment myself.
If I pay for anything in a physical store, I just use my physical bank card. I would never use something like Google Pay (if that’s the name for it).
This is an historical thing. My bank used to have an app that was useable offline and their website was ‘ not good’. Now their app is just a wrapper for a new website, so this might be an option.
But we are trained to use apps even when they are just wrappers for a website. Thus, even if you can convince me, it will be hard to convince the many different Fairphone users.
The spying part is btw no issue for me, because I trust my bank. One of the reasons I chose it in the first place.
@bjoern23 I trust my bank as well. To some degree. I trust them to respect our laws in terms of privacy and all that. However. I don’t trust the included trackers from Google. We’re probably going a bit OT now, but I try to avoid anything proprietary when I can. It’s a matter of principle for me here. ![]()
In the country I live, there are many stores where can you can pay with a QR code or by cash… A bank card is not always a solution.
Does Bank-ID and Swish work on a custom ROM?
@Miko I’ve been using BankID and Swish for years without GApps on custom ROMs. It works perfectly fine. ![]()
There’s only one caveat, if you choose to skip GApps: BankID will bug you with a message telling you that it doesn’t work without Google Play Services. However. You can just close the pop-up message and continue using the app.
The only thing that will not work without GApps is notifications. A lot of apps uses Google for delivering notifications. Swish is one of those apps. However. This is really not an issue for me because I mostly rely on F-Droid for my applications. I have maybe 5 apps from Google Play Store, and I really don’t care if they can show notifications or not. ![]()
Thank you! Good to know.
It’s bad enough that such important services require you to send your data to one of the two data-collecting giants in the USA.
Hälsningar, Michael
Even if you install from F-Droid, if an App gets Push-Notifications, then those are running through Google servers.
What? Do you even know what F-Droid is? It’s an app store that only provides free and open source software. Google Play Services is as proprietary as it gets. ![]()
Being on F-Droid doesn’t mean an App can’t have unwanted things in it from a subjective user perspective.
That’s why F-Droid is transparent about so-called Anti-Features in Apps … Anti-Features | F-Droid - Free and Open Source Android App Repository
They document features like “Non-Free Dependencies” or “Non-Free Network Services” which in theory could cover the use of Android push notifications via Google Firebase.
I don’t know whether an App or F-Droid go this far in practice currently, though, but abstracting away from Google push notifications in particular it’s not such an alien concept.
Okay, bad example, since most Google APIs are not Anti-Features, they are strictly forbidden within F-Droid, but as @AnotherElk said, there are still some pills you might smallow.
From F-Droid:
Almost all of the Google libraries, like Play Services, Google Admob, and GCM, are proprietary and cannot be included in the main F-Droid repository.
I just leave it at here.
A few days ago, there was a news article about Google keeping some options to have sideloading available. I’m not quite sure, but it seems there will be massive security gates to answer and pass for sideoloading.
https://www.heise.de/news/Google-Unverifizierte-Apps-bald-per-Sideloading-fuer-erfahrene-Nutzer-11076803.html
Sorry, just a german article from an IT news portal.
When I had read that article my impression was that they probably do something like enabling dev mode, i.e. tapping some random setting 10 times to open a dialog that contains a big red exclamation mark and when users confirm that, a second “Are you really sure? Don’t let anyone else talk you into clicking ‘yes’ here!” will appear. Or maybe having to type the MAC adress manually into some text field. Or some other value that depends on something an attacker cannot know because it’s device specific and long enough, a random user is prone to mistype when hurried by someone on the phone/in chat. ![]()
That’s also my impression. For me, this would be OK. I keep the freedom to install what I want, and Google gets rid of the image that the normal Android user can get scammed easily.