In a recent update to the HSBC app they’ve added a screen to prevent you from using the app unless you use the default (google) keyboard.
They do a similar thing if you have an accessibility service running that can access the screens content. A fair enough security warning if you’ve happened to install a dodgy keyboard app, but highly frustrating when using an open source alternative that enhances the security and privacy over the default option (HeliBoard in my case).
I haven’t found a way to circumvent the page yet. It would be useful if Android allowed you to block the permission to query all packages, but alas.
You must log in or register to comment.
banks will do everything in their power to restrict who can use their services in the name of security but are absolutely fine with 6-char password size limits and SMS 2FA
They are in an illusion where their backend is absolutely perfect, but third party apps like open source keyboards implement spyware that spies on users predictable bank passwords. (FlorisBoard is the biggest predator)
Source? That’s FUD if I ever heard it
What source? That was obvious sarcasm.
I hate that some people need it to be spelled out for them now. I feel like that wasn’t the case on ye olde internet.
deleted by creator
Hmm. Good point. Maybe I was late-night-lemmying and thought this was another thread. That is a big load of bullshit though. HSBC, the financier of choice for terrorists, wants you to use google keyboard.
Hmm, yeah. You still don’t seem to get it.
Are you drunk?
OK then, please ELI5
no
learn what sarcasm is: https://en.wikipedia.org/wiki/Sarcasm
I’m not sure about this app especially, but I hate that my bank personally has so many restrictions on the app usage but I can also just use a web browser on God knows what with who knows what extensions installed and they’re all like sure, come on in!
They likely won’t allow that forever. If Google has its way with the web, trusted browser environments will be a thing, and banks will only accept those.
were you also against cache attestation and manifest v3?
Considering that HSBC is remarkably evil, even compared to other major international banking corporations, this might be a good nudge to stop doing business with them.
You would have to be extremely evil to be a far comparison to any other bank.
Thats impressive.
Move to a credit union. HSBC is terrible.
Yeah, I don’t really have a reason to stay with HSBC. A responsible me would look for a bank with better credit card interest. Might as well shop around for a new one.
Hell yeah! And make sure to tell them the reason for closing your account too
I understand the reason for this, but if this is what they’ve decided to do they should also provide a trusted HSBC keyboard that can only be used with their banking application.
Can apps has their own keyboard and never call the system one? Installing their kb as another app and as a system one at that would be 200% more infuriating. Now THEY can log your keys elsewhere.
They can build a keyboard into it, sure. It’s just UI elements and a bunch of buttons. Won’t be a good keyboard, but it can be done.
It’s possible. First example I can think of is NYT’s games app uses their own keyboard. It’s clunky, but if someone is concerned (or data hungry) enough for the users security they certainly could.
They do a similar thing if you have an accessibility service running that can access the screens content
Well fuck disabled people I guess?
Actually, banks are a heavily regulated industry and they have to comply with strict non-discrimination requirements including making all reasonable accommodations for people with disabilities.
If you know someone who uses a screen reader and is therefore unable to use HSBC’s app, encourage them to file a complaint with the appropriate regulator (in the US, try https://www.consumerfinance.gov/complaint/ ).
Banks are very attentive about listening to their regulators.
(Of course, it’s possible that what HSBC did still works with commonly used screen readers for the blind because they actually thought of this.)
Yeah it is bad. Maybe it’s the case again that the default screen reader is allowed but third party ones aren’t?
Okay, I just tested turning on the built in screen reader and it launched just fine 😑
It is for their own good… Daddy said so.
HSBC - High school before Christ
HSBC - Hot Sexy Babes Caressing
Hugely Shitty Banking Corporation
You guys use banking apps?
I do. Not for like spreadsheeting my spending/saving but just checking if something went through, sure.
I find banking apps pretty infuriating. Don’t support rooted/custom rom. Too easy to make mistake. Susceptible to ‘malware’ (ie intent jacking or if the app logs tokens in logcat lol). I use netbanking when needed. For txn logs, mostly SMS works fine.
I find keeping bank account logged in always isn’t necessary and just a invitation of hassles.
