Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

 How will android developer mode breach bank app?

views
     
SUSpetpenyubobo
post Mar 3 2025, 11:32 AM

Regular
******
Senior Member
1,030 posts

Joined: Jan 2022

QUOTE(Paradigmata @ Mar 3 2025, 04:26 AM)
Now my Pb bank and mae app I see gave such warning.

How can developer mode and USB debugging mode breach bank app security?
*
Why do you turn on your developer mode permanently, TS?

Can't you just turn it off under settings, developer options and only enable it when you need to do debugging?
SUSpetpenyubobo
post Mar 3 2025, 11:42 AM

Regular
******
Senior Member
1,030 posts

Joined: Jan 2022

QUOTE(yeeck @ Mar 3 2025, 11:03 AM)
It looks like the myPB bank app also thinks the apps/updates installed by the phone maker via regular OS updates (but not via Playstore) are red flags. Hint...Oppo. Not sure about other phones but should be the same.
*
They do that because they want to force install their malicious apps in your phone and don't want you to remove them on purpose.Some of these telemetry apps even steals your surfing habits, data which you use daily and many of your personal inputs reporting them back to the manufacturers servers claimed for improvement purposes.

It actually work both ways.

Those ad blocker apps actually do you good but the content ad-tracking companies such as Google and Meta don't like you blocking their ads for loss of revenues. So they include those apps as illegal/security risks tools in their security patches.

Knowledgeable users of course know what they're doing, those ad-blocking/telemetry apps are not security risk apps but are revenue loss to Google/Meta.

But why do you think these corporations include them as illegal risky security apps under their security patches?
SUSpetpenyubobo
post Mar 3 2025, 11:56 AM

Regular
******
Senior Member
1,030 posts

Joined: Jan 2022

Why do you think Chrome intentionally block plugins such as uBlock recently few months back?

Are they actually improving your security by not allowing you to block their ad-trackers? Or they are actually trying to protect their own revenues/interests?

People need to have some common sense.

The devil will not tell you that he's feeding you poison, he will say this is nourishment for you to take regularly and so are their security patches which will block you from taking away their revenues.

Get it?


SUSpetpenyubobo
post Mar 3 2025, 12:20 PM

Regular
******
Senior Member
1,030 posts

Joined: Jan 2022

QUOTE(kelvinng92 @ Mar 3 2025, 11:55 AM)
I think you misunderstanding this, he mean the bank apps check for apps that not installed from Google Play Store, but some chinese phone manufacturer (xiaomi, poco, oppo, etc) come with preloaded apps that are not downloaded from Play Store.

The android developer usually either, many of them are iphone user or using those samsung, etc, company didn't provide variety of testing phone brand to test or any cloud devices service. The developers will need to whitelist those preloaded apps if they are implementing this mechanism.
*
There was once, when I used ad-blocker on my phone those banking apps wouldn't load.I think it's still happening occasionally..

What does that mean? Our online bank portals have been known to use malicious domains that are being abused by ad trackers?

Do the banks prefer you to receive malicious ads and are encouraging you not to install ad-blockers for "their" security reasons of protecting their ads revenues side businesses?
SUSpetpenyubobo
post Mar 4 2025, 01:22 PM

Regular
******
Senior Member
1,030 posts

Joined: Jan 2022

QUOTE(JON97 @ Mar 3 2025, 06:21 PM)
You got a point with ad blocker.. But even banking app would want your data.. if not why does a simple banking app need access to my microphone, and location and to scan nearby devices?

Tng is another example.. Requesting too much data to a point might as well just take all of it.
*
Ad-blockers actually operate in a very simple concept.

It updates with the latest list of blacklisted domain addresses and force redirect them to a void IP that loads nothing.Preventing your privacy from being leaked back to the hacker's data collection servers.

These domain addresses are supposed to be malicious because hackers and data thefts usually forwards your stolen data back to their own base when they collect them from your device/PC.

The strange thing is why when we enable ad-blockers, the banking apps also seize to load and force close?

Don't you think there's devil in the details?

Malicious domain links that are believed to be data retrieval servers when blocked also prevents your banking apps from loading? icon_idea.gif
SUSpetpenyubobo
post Mar 4 2025, 03:17 PM

Regular
******
Senior Member
1,030 posts

Joined: Jan 2022

QUOTE(kelvinng92 @ Mar 4 2025, 03:08 PM)
Just some correction, the blacklisted domains not necessarily are all malicious (depend on which list are using), some list include blocking analytics tools domain like Google Analytics as well, companies use those for data collection and analysis.
Not sure which functionality you looking at, but one of the example that get functionality break I knew is those universal link/deep linking third party services like adjust, branch, appsflyer, etc which usually came with analytics data collection. Their functionality (especially deferred deep link) will get affected as the universal ink (something like a shorten link) need to process through their server to get proper navigation linking in the apps. Companies use them for the universal link + analytics + push notification campaign + more as solution instead of implement their own from scratch.
*
It's like saying Google Analytics are saints and cyber criminals cannot abuse their solutions for unethical purposes?
Also call centre scammers have been imposing as Microsoft tech support experts for so many years os well known thing.

It's all grey area. They have their own interests which might not be the same as the public due to revenues reasons.

To block them is actually a good way to avoid unwanted issues. Why can't the bank use their own trusted domains for the sole purpose of their services?
That way they can reduce phishing better.

Or they actually have secret collaboration with these ad companies that they are not revealing to their customers?
SUSpetpenyubobo
post Mar 4 2025, 06:06 PM

Regular
******
Senior Member
1,030 posts

Joined: Jan 2022

QUOTE(kelvinng92 @ Mar 4 2025, 03:59 PM)
I never said Google Analytics are saints  sweat.gif . Companies usually use those third party services to save the development cost and time, especially when those marketing/business team demand for something to roll out fast. Build from scratch takes a lot of cost, people and time, when there are many complete, featured-rich and ready solution out there.

What data to be submitted to those third party service server also decided by developer, usually not bodoh to feed sensitive data into it and their security team should also review it.

Of course you can block them, and it is the developer responsibility to at least keep the main functionality to work properly.

Information or data leaked can be also from insider/staff though, but this will depend how they manage their security sop within the company.
*
Google Ads and Meta Ads are not charity companies for sure. They have their own interests and profits to maintain.

Do you think Ad-blockers go against their companies ethics and policies? We all know for well ad-trackers do not function as merely banner displays. It collects a whole lot more information on users through browser fingerprints and javascript system info.

I don't believe casino and porn content ad developers have ethics to begin with. That was how mobile operators could leak out SMS shortcodes and drain subscribers years back when users accidentally click/load those illegal ad banners.

Why would these large corporations including third party telcos even care if there are few people in the market knows what's going on behind those ad trackers? As long as the revenues keeps coming in, no one complains of sharing databases of their clients.Enablers, Providers, Content creators.

They're all suspects playing dumb and pointing fingers in a circle with endless blaming.

 

Change to:
| Lo-Fi Version
0.0163sec    0.70    6 queries    GZIP Disabled
Time is now: 5th December 2025 - 04:17 PM