Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

 How will android developer mode breach bank app?

views
     
PJng
post Mar 3 2025, 01:52 PM

10k Club
********
All Stars
12,039 posts

Joined: Oct 2017


QUOTE(shinichi88 @ Mar 3 2025, 11:55 AM)
Techincally speaking, the developer for bank don't want to risk anything.
Having the app install from Official store (Play Store/ Huawei Store/ Samsung Store), is the only best bet they can trust for security.

Usually those app that content malicious intent / trojan will get flag and not able to publish in official store. Unless it is so new, that is able to goes under radar.. "happen before".

Having developer mode is not an issue, as I'm using it to change some settings on the phone. e.g: Animation / Transition Speed.

USB Debugging Mode is the real backdoor.

In order to use USB Debugging Mode, developer mode need to be turn ON.
So to say, the developer for banking app just playing it safe below limit.

*Some banking app did flag some app installed from Samsung Store / Huawei Store..  the developer need to do better filtering, or there's no API to check that*
*
Yes, all my phone turn on developer jist adjust all animation to 0.5,and DPI a bit higher, why app too aggresive with developer turn on
Iirc last time digi app also like that, cannot openif developer turn on

USB debugging will always off
tertiary
post Mar 3 2025, 05:01 PM

On my way
****
Junior Member
664 posts

Joined: Nov 2016
MyPB objects to Samsung Notes Addons on my Galaxy. Don't remember installing it, but I don't use Notes so I uninstalled it.
JON97
post Mar 3 2025, 06:11 PM

Casual
***
Junior Member
341 posts

Joined: Nov 2016
Haha.. Wait till you try UOB App...
You have to use their own build in keyboard.. Always need to tekan slow slow let everyone see your PW if not, 3 times wrong, very troublesome.

Also, for Samsung even if you have dev mode on but Auto blocker is turned on or your phone is locked you are still unable to access the debugging.

I just don't like these apps looking at what other apps I have.
JON97
post Mar 3 2025, 06:21 PM

Casual
***
Junior Member
341 posts

Joined: Nov 2016
QUOTE(petpenyubobo @ Mar 3 2025, 11:42 AM)
They do that because they want to force install their malicious apps in your phone and don't want you to remove them on purpose.Some of these telemetry apps even steals your surfing habits, data which you use daily and many of your personal inputs reporting them back to the manufacturers servers claimed for improvement purposes.

It actually work both ways.

Those ad blocker apps actually do you good but the content ad-tracking companies such as Google and Meta don't like you blocking their ads for loss of revenues. So they include those apps as illegal/security risks tools in their security patches.

Knowledgeable users of course know what they're doing, those ad-blocking/telemetry apps are not security risk apps but are revenue loss to Google/Meta.

But why do you think these corporations include them as illegal risky security apps under their security patches?
*
You got a point with ad blocker.. But even banking app would want your data.. if not why does a simple banking app need access to my microphone, and location and to scan nearby devices?

Tng is another example.. Requesting too much data to a point might as well just take all of it.
GOPI56
post Mar 3 2025, 06:28 PM

Regular
******
Senior Member
1,494 posts

Joined: Dec 2012
If developers mode is active on your phone,

Hackers can easily sideload malware apk into your device using adb commands.
Treepex
post Mar 4 2025, 11:18 AM

-
Group Icon
Elite
1,704 posts

Joined: Jan 2003
From: Klang
last week after update my RHB app, it cannot launch...

after ask around in reddit, found out it was my 3rd party keyboard. need to disable it only can launch the app. at first thought it was the usb debug enabled.

SUSpetpenyubobo
post Mar 4 2025, 01:22 PM

Regular
******
Senior Member
1,030 posts

Joined: Jan 2022

QUOTE(JON97 @ Mar 3 2025, 06:21 PM)
You got a point with ad blocker.. But even banking app would want your data.. if not why does a simple banking app need access to my microphone, and location and to scan nearby devices?

Tng is another example.. Requesting too much data to a point might as well just take all of it.
*
Ad-blockers actually operate in a very simple concept.

It updates with the latest list of blacklisted domain addresses and force redirect them to a void IP that loads nothing.Preventing your privacy from being leaked back to the hacker's data collection servers.

These domain addresses are supposed to be malicious because hackers and data thefts usually forwards your stolen data back to their own base when they collect them from your device/PC.

The strange thing is why when we enable ad-blockers, the banking apps also seize to load and force close?

Don't you think there's devil in the details?

Malicious domain links that are believed to be data retrieval servers when blocked also prevents your banking apps from loading? icon_idea.gif
awol
post Mar 4 2025, 01:26 PM

Enthusiast
*****
Junior Member
910 posts

Joined: Jun 2007
From: Selangor
QUOTE(PJng @ Mar 3 2025, 01:52 PM)
Yes, all my phone turn on developer jist adjust all animation to 0.5,and DPI a bit higher, why app too aggresive with developer turn on
Iirc last time digi app also like that, cannot openif developer turn on

USB debugging will always off
*
after change dpi, turn off dev mode, the dpi change still remain.

to answer TS question.
with dev mode and usb debugging, people can remote to your phone without you notice it (virtual display, like a 2nd monitor).
aq_admiral2020
post Mar 4 2025, 01:27 PM

Getting Started
**
Junior Member
72 posts

Joined: Aug 2020


Some telco app also need to turn off dev mode.
PJng
post Mar 4 2025, 01:46 PM

10k Club
********
All Stars
12,039 posts

Joined: Oct 2017


QUOTE(awol @ Mar 4 2025, 01:26 PM)
after change dpi, turn off dev mode, the dpi change still remain.

to answer TS question.
with dev mode and usb debugging, people can remote to your phone without you notice it (virtual display, like a 2nd monitor).
*
But it turn off animation to 1.0
Chrix
post Mar 4 2025, 02:16 PM

Regular
******
Senior Member
1,185 posts

Joined: Nov 2006
its to cover their rear end, incase of any issues that customer were to blame the app.

plain & simple.
awol
post Mar 4 2025, 02:16 PM

Enthusiast
*****
Junior Member
910 posts

Joined: Jun 2007
From: Selangor
QUOTE(PJng @ Mar 4 2025, 01:46 PM)
But it turn off animation to 1.0
*
about animation, did not change it, so i dont know.
now i only on dev mode for screen mirror or virtual display during office hour.
by end of day, will disable dev mode.
yeeck
post Mar 4 2025, 02:20 PM

Look at all my stars!!
*******
Senior Member
3,573 posts

Joined: Apr 2006


QUOTE(kelvinng92 @ Mar 3 2025, 01:13 PM)
I think your reply already out of the topic and not relevant, suggest you to reread what he said again.

1. Public bank apps flagged one of his installed apps as red flag (which most likely mean from unknown source or not from Google Play Store)
2. The apps actually pre-installed or downloaded through the OS update from Oppo (can be Oppo Camera/Gallery apps or whatever, I not sure as I not using Oppo), but Public bank app only check for apps that installed/downloaded from Play Store which disqualified these apps.
3. I didn't use public bank so I assume the user blocked from using the public bank app.
*
Yes you understood what I wrote. Public bank app didn't block me from using the app yet even though they have flagged those apps installed together as part of OS security patches by the phone manufacturer like Oppo/Pocco/etc....but who knows in the future they might do so?
PJng
post Mar 4 2025, 02:26 PM

10k Club
********
All Stars
12,039 posts

Joined: Oct 2017


QUOTE(awol @ Mar 4 2025, 02:16 PM)
about animation, did not change it, so i dont know.
now i only on dev mode for screen mirror or virtual display during office hour.
by end of day, will disable dev mode.
*
No idea why android default animation 1.0, and if set all 0.5 phone more smooth
awol
post Mar 4 2025, 02:29 PM

Enthusiast
*****
Junior Member
910 posts

Joined: Jun 2007
From: Selangor
QUOTE(PJng @ Mar 4 2025, 02:26 PM)
No idea why android default animation 1.0, and if set all 0.5 phone more smooth
*
default is 1.0. 0.5 is "dev mode" for testing the smoothness of their app/animation.
now didnt bother with animation. phone/tablet is fast enough.
kelvinng92
post Mar 4 2025, 02:40 PM

New Member
*
Newbie
30 posts

Joined: Oct 2011
QUOTE(yeeck @ Mar 4 2025, 02:20 PM)
Yes you understood what I wrote. Public bank app didn't block me from using the app yet even though they have flagged those apps installed together as part of OS security patches by the phone manufacturer like Oppo/Pocco/etc....but who knows in the future they might do so?
*
Since they didn't block then I guess should be no worry much for now, if they doing this they gonna get backfired as this few brand typically are cheap range phone, there are quite a number of people who use them. Generally will only block usb debugging, as this setting doesn't affect regular user.
kelvinng92
post Mar 4 2025, 03:08 PM

New Member
*
Newbie
30 posts

Joined: Oct 2011
QUOTE(petpenyubobo @ Mar 4 2025, 01:22 PM)
Ad-blockers actually operate in a very simple concept.

It updates with the latest list of blacklisted domain addresses and force redirect them to a void IP that loads nothing.Preventing your privacy from being leaked back to the hacker's data collection servers.

These domain addresses are supposed to be malicious because hackers and data thefts usually forwards your stolen data back to their own base when they collect them from your device/PC.

The strange thing is why when we enable ad-blockers, the banking apps also seize to load and force close?

Don't you think there's devil in the details?

Malicious domain links that are believed to be data retrieval servers when blocked also prevents your banking apps from loading? icon_idea.gif
*
Just some correction, the blacklisted domains not necessarily are all malicious (depend on which list are using), some list include blocking analytics tools domain like Google Analytics as well, companies use those for data collection and analysis.
Not sure which functionality you looking at, but one of the example that get functionality break I knew is those universal link/deep linking third party services like adjust, branch, appsflyer, etc which usually came with analytics data collection. Their functionality (especially deferred deep link) will get affected as the universal ink (something like a shorten link) need to process through their server to get proper navigation linking in the apps. Companies use them for the universal link + analytics + push notification campaign + more as solution instead of implement their own from scratch.
SUSpetpenyubobo
post Mar 4 2025, 03:17 PM

Regular
******
Senior Member
1,030 posts

Joined: Jan 2022

QUOTE(kelvinng92 @ Mar 4 2025, 03:08 PM)
Just some correction, the blacklisted domains not necessarily are all malicious (depend on which list are using), some list include blocking analytics tools domain like Google Analytics as well, companies use those for data collection and analysis.
Not sure which functionality you looking at, but one of the example that get functionality break I knew is those universal link/deep linking third party services like adjust, branch, appsflyer, etc which usually came with analytics data collection. Their functionality (especially deferred deep link) will get affected as the universal ink (something like a shorten link) need to process through their server to get proper navigation linking in the apps. Companies use them for the universal link + analytics + push notification campaign + more as solution instead of implement their own from scratch.
*
It's like saying Google Analytics are saints and cyber criminals cannot abuse their solutions for unethical purposes?
Also call centre scammers have been imposing as Microsoft tech support experts for so many years os well known thing.

It's all grey area. They have their own interests which might not be the same as the public due to revenues reasons.

To block them is actually a good way to avoid unwanted issues. Why can't the bank use their own trusted domains for the sole purpose of their services?
That way they can reduce phishing better.

Or they actually have secret collaboration with these ad companies that they are not revealing to their customers?
kelvinng92
post Mar 4 2025, 03:59 PM

New Member
*
Newbie
30 posts

Joined: Oct 2011
QUOTE(petpenyubobo @ Mar 4 2025, 03:17 PM)
It's like saying Google Analytics are saints and cyber criminals cannot abuse their solutions for unethical purposes?
Also call centre scammers have been imposing as Microsoft tech support experts for so many years os well known thing.

It's all grey area. They have their own interests which might not be the same as the public due to revenues reasons.

To block them is actually a good way to avoid unwanted issues. Why can't the bank use their own trusted domains for the sole purpose of their services?
That way they can reduce phishing better.

Or they actually have secret collaboration with these ad companies that they are not revealing to their customers?
*
I never said Google Analytics are saints sweat.gif . Companies usually use those third party services to save the development cost and time, especially when those marketing/business team demand for something to roll out fast. Build from scratch takes a lot of cost, people and time, when there are many complete, featured-rich and ready solution out there.

What data to be submitted to those third party service server also decided by developer, usually not bodoh to feed sensitive data into it and their security team should also review it.

Of course you can block them, and it is the developer responsibility to at least keep the main functionality to work properly.

Information or data leaked can be also from insider/staff though, but this will depend how they manage their security sop within the company.
SUSpetpenyubobo
post Mar 4 2025, 06:06 PM

Regular
******
Senior Member
1,030 posts

Joined: Jan 2022

QUOTE(kelvinng92 @ Mar 4 2025, 03:59 PM)
I never said Google Analytics are saints  sweat.gif . Companies usually use those third party services to save the development cost and time, especially when those marketing/business team demand for something to roll out fast. Build from scratch takes a lot of cost, people and time, when there are many complete, featured-rich and ready solution out there.

What data to be submitted to those third party service server also decided by developer, usually not bodoh to feed sensitive data into it and their security team should also review it.

Of course you can block them, and it is the developer responsibility to at least keep the main functionality to work properly.

Information or data leaked can be also from insider/staff though, but this will depend how they manage their security sop within the company.
*
Google Ads and Meta Ads are not charity companies for sure. They have their own interests and profits to maintain.

Do you think Ad-blockers go against their companies ethics and policies? We all know for well ad-trackers do not function as merely banner displays. It collects a whole lot more information on users through browser fingerprints and javascript system info.

I don't believe casino and porn content ad developers have ethics to begin with. That was how mobile operators could leak out SMS shortcodes and drain subscribers years back when users accidentally click/load those illegal ad banners.

Why would these large corporations including third party telcos even care if there are few people in the market knows what's going on behind those ad trackers? As long as the revenues keeps coming in, no one complains of sharing databases of their clients.Enablers, Providers, Content creators.

They're all suspects playing dumb and pointing fingers in a circle with endless blaming.

 

Change to:
| Lo-Fi Version
0.0199sec    0.91    5 queries    GZIP Disabled
Time is now: 2nd December 2025 - 12:15 PM