Can I use banking apps on LineageOS with Magisk? - LineageOS Questions & Answers

Hi. Apologies for the noob question. Is it possible to get banking apps, PayPal etc to work on lineage ? I've installed magisk but don't know how to configure it, even if it will do what I need. Is there a guide somewhere? Thanks.

aneng64 said:
Hi. Apologies for the noob question. Is it possible to get banking apps, PayPal etc to work on lineage ? I've installed magisk but don't know how to configure it, even if it will do what I need. Is there a guide somewhere? Thanks.
Click to expand...
Click to collapse
First of all, you will harm the security of your transactions if you wanted to use banking apps on a rooted phone.
Secondly, if such a banking app will work on a phone with root hidden by magisk, I would advise you to give up such an app or bank for the reason I mentioned in the first sentence.

ze7zez said:
First of all, you will harm the security of your transactions if you wanted to use banking apps on a rooted phone.
Secondly, if such a banking app will work on a phone with root hidden by magisk, I would advise you to give up such an app or bank for the reason I mentioned in the first sentence.
Click to expand...
Click to collapse
Why.... precisely? Beyond the generic rubber-stamp warning that rooted/custom ROM devices lack the security of stock builds, what data do you have that proves that running banking apps on phones with root/custom ROMs is likely to result in theft of my money?

aneng64 said:
Why.... precisely? Beyond the generic rubber-stamp warning that rooted/custom ROM devices lack the security of stock builds, what data do you have that proves that running banking apps on phones with root/custom ROMs is likely to result in theft of my money?
Click to expand...
Click to collapse
Generally speaking, this is how money can be stolen at the very least, but also more, since identity verification can also be done with bank accounts.
Do not combine "rooted" with "custom", as there is no close relationship.

Oh... I see. Thank you. I have no need for root to be honest. I just need to be running Lineage OS. Is that safe to use unrooted?

aneng64 said:
Oh... I see. Thank you. I have no need for root to be honest. I just need to be running Lineage OS. Is that safe to use unrooted?
Click to expand...
Click to collapse
Root does not increase the level of safety. It's good for you to use the original LineageOS, if it exists for your phone, and not use TWRP. It's likely that the bank's app won't object.

Just started to using LineageOS official last release from there website ((lineage-19.1-20230302-nightly-pioneer-signed)) . i have there mindtegapps for google integration. the problem is my carrier money transfer app crashs and doesn't starts. before i changed to LineageOS. this app was working on my phone original rom. is there any thing i can do to try to fix it? like crash logs or something i can try? i tried Google Carrier Services and Android System WebView. but nothing changed. it still crashs. is there away i can know which is the last supprted OS for that app? i mean they could just have not updated there app to newest google framework. idk for sure i am just guessing.
the app name " Orange Cash "

PC is rooted by default. People use banking sites and programs on PCs.
Phone will require same steps to prevent money steal.
Generally it is not the rooted phone by itself is source of trouble but user actions.
If user installs shady autocraticker from google play and give permissions to it thief would not need root to steal money.
To send a link by email or messanger and ask to enters credit card information thief does not need root permissions.
Criminals don't expect phone to be rooted. They pray on inattentive users.
It is often possible to have control of your own device with root and use banking.
Some banks allow to use browser instead of app.
Bank usually would call on the phone to accept login and transactions for additional security.
Decision depends on how much money user has on banking account, and how careful he is.

veseihaty said:
PC is rooted by default. (...)
Click to expand...
Click to collapse
That's why there are no PC banking applications/programs.
Using banking applications increases the security of transactions, which using only a web browser does not.
Thanks to apps, banks have the ability to continuously improve security on phones that have stopped getting security patches from the phone manufacturer. The use of push technology makes banking apps a cheap token.
The banks' action on this issue is beneficial to customers.

ze7zez said:
Generally speaking, this is how money can be stolen at the very least, but also more, since identity verification can also be done with bank accounts.
Do not combine "rooted" with "custom", as there is no close relationship.
Click to expand...
Click to collapse
What are you talking about? Rooting means *the user* has control over the device, vs the manufacturer. Not giving the user root privileges is all about the manufacturing retaining control over what you do with the device, and being able to push its bloatware on you, and nothing to do with security.
HOW exactly does giving the user root access damage security in any way?
I'm gonna go ahead and say that not only having root access does NOT threaten security, but the other way around, it improves it, as I can remove all the unsafe apps the manufacturer bundled with my phone.
You are wrong, you were asked to back up your claims, and you did not actually do so.

almafuerte said:
What are you talking about? Rooting means *the user* has control over the device, vs the manufacturer. Not giving the user root privileges is all about the manufacturing retaining control over what you do with the device, and being able to push its bloatware on you, and nothing to do with security.
HOW exactly does giving the user root access damage security in any way?
I'm gonna go ahead and say that not only having root access does NOT threaten security, but the other way around, it improves it, as I can remove all the unsafe apps the manufacturer bundled with my phone.
You are wrong, you were asked to back up your claims, and you did not actually do so.
Click to expand...
Click to collapse
Read the "Payment Services Directive 2", analyze, understand and acknowledge.
The XDA forum is for discussion, not for answering every question asked. That's what google is for, for example.

Yes, just use magisk delta.

ze7zez said:
Read the "Payment Services Directive 2", analyze, understand and acknowledge.
The XDA forum is for discussion, not for answering every question asked. That's what google is for, for example.
Click to expand...
Click to collapse
Why should I care about a European regulation, considering I'm not in Europe, and my bank is not European?
Regardless, said spec doesn't really give ANY justification either as to *why* a rooted phone would actually be unsafer in any way.
You didn't say "Because a stupid spec says so", you said "because of security concerns", of which there aren't any.

Related

Google can remotely remove apps from our phones!

This is an interesting article.
Google this week removed two applications from its Android Market, and exercised a feature that lets the company remotely delete the apps from a user's phones.
Read full article
socktug said:
This is an interesting article.
Google this week removed two applications from its Android Market, and exercised a feature that lets the company remotely delete the apps from a user's phones.
Read full article
Click to expand...
Click to collapse
Old news m8
Really? I never knew they could do it.
I found it interesting anyway. Lol
cant you just reinstall the backup apk via astro?
Disappointed, Google is becoming Apple.
In no way is Google becoming apple it was a malicious app that wasn't what it said it was I am glad they look in to the apps and can pull bad ones out b4 they can do harm
Sent from my Nexus One using XDA App
Which apps was that? The article doesn't say?
I don't mind them taking it from the app store, good for them doing that.
They intruded my phone. That is the exact same thing apple has been doing/does.
Maybe I liked that app and WANTED it on my phone?
And that sucks my dear friend.
ljesh said:
I don't mind them taking it from the app store, good for them doing that.
They intruded my phone. That is the exact same thing apple has been doing/does.
Maybe I liked that app and WANTED it on my phone?
And that sucks my dear friend.
Click to expand...
Click to collapse
So you would rather keep a malicious app that doesn't do what it says it does and can cause harm to your phone and/or steal your information?
Yes, I would rather keep a malicious app that does whatever it wants on my phone instead of Google invading your privacy.
Or lets put it this way. You better live with your malicious app instead of putting me in situation for Google to invade my privacy.
Or maybe you would like your antivirus company to have access to remove viruses from your PC? I mean, they are still doing good job, keeping your PC clean... and invading your privacy.
I (personally) am really concerned about this issue, don't know why nobody talks against this. Either you ignore it, or support it. Really strange.
ljesh said:
Yes, I would rather keep a malicious app that does whatever it wants on my phone instead of Google invading your privacy.
Or lets put it this way. You better live with your malicious app instead of putting me in situation for Google to invade my privacy.
Or maybe you would like your antivirus company to have access to remove viruses from your PC? I mean, they are still doing good job, keeping your PC clean... and invading your privacy.
I (personally) am really concerned about this issue, don't know why nobody talks against this. Either you ignore it, or support it. Really strange.
Click to expand...
Click to collapse
i can appreciate your position on privacy. however i find your stance invades my freedom to own a phone. you state that i should live with a malicious app so you can keep your privacy. i don't know enough about programming to tell if an app is malicious or not, so i personally don't mind allowing google to remotely remove a malicious app. if you don't like or agree with this, don't use the marketplace. you agreed to allow google to use this feature the second you entered the app market. you can manually download apps and install them to your phone outside of the marketplace and preserve your privacy.
I am NOT happy with this act of google.
ljesh said:
Yes, I would rather keep a malicious app that does whatever it wants on my phone instead of Google invading your privacy.
Or lets put it this way. You better live with your malicious app instead of putting me in situation for Google to invade my privacy.
Or maybe you would like your antivirus company to have access to remove viruses from your PC? I mean, they are still doing good job, keeping your PC clean... and invading your privacy.
I (personally) am really concerned about this issue, don't know why nobody talks against this. Either you ignore it, or support it. Really strange.
Click to expand...
Click to collapse
While I agree that this capability of Google's sounds a bit shady, consider this:
-Privacy is the issue here. Yet, most Android users use Gmail, Google Calendar, Google Contacts, Google Docs, etc. Therefore, Google already has much of our supposedly private information. Ironic thing is that we, the users, willingly provide it to them.
-This "feature" of Android is relatively well-known. So, it's not like Google was deliberately trying to hide something. Moreover, they even came out to say that they utilized this "feature". They're certainly not obligated to do so and yet, they did it anyway.
-Apple fully controls the user experience on their iOS. All applications must be approved by Apple. The Android Market doesn't experience this sort of control from Google. So perhaps Google uses this remote kill feature as a form of last-resort control. I realistically can't fault Google for wanting some sort of control over their OS.
Google have never hid the fact they can remove malicous apps from peoples handsets. Keep in mind they can only do it, if the app was installed through the marketplace, i for one have nothing to hide so have none of the privacy issue others seem to worry about, and the ppl that say "ooh id rather have malicious software on my fone than have google wipe it" u shud think more about the people who dont want malicious code on there phone and that by comunicating with other android phones you could be passing it on
This all came up before when the iPhone first came around, and the discussion will be no different this time.
However, in custom ROM design there were options created as a killswitch to Apples God Mode.
I'd say the only way to resole the problem would be to follow in those steps.
Make an update.zip that will patch out the relevent code or application that allows google to do this. Then you make the concious choice on your own without affecting anyone else.
I think it's better that google has a feature like this, and to those people that talk about privacy.
How about a app that steals all the information stored on your phone or makes expensive calls.
Google has less impact on your privacy then those apps can do.
i dont like this either, how about (since people get notified anway) that google simply gives an advisory that appears on peoples phones stating why this app needs removing. that way you can ignore it if you want.
you know that this will be used to remove apps that the RIAA/MPAA mafia complain about - that's just a matter of time.
i'm curious if it's a 1 time thing. like they remove it, but you have the apk still and just re-install the sucker
ljesh said:
Yes, I would rather keep a malicious app that does whatever it wants on my phone instead of Google invading your privacy.
Or lets put it this way. You better live with your malicious app instead of putting me in situation for Google to invade my privacy.
Or maybe you would like your antivirus company to have access to remove viruses from your PC? I mean, they are still doing good job, keeping your PC clean... and invading your privacy.
I (personally) am really concerned about this issue, don't know why nobody talks against this. Either you ignore it, or support it. Really strange.
Click to expand...
Click to collapse
Please, stop with the privacy bull****. During this process google never accessed any of you data of your phone, hell they never even entered your phone, but merely pressed a button that sent a request to your phone to delete the retarded app.
You guys need to stop whinning about stuff that you accepted in the first place (yes you did, by clicking "i accept those terms" when accessing the market).
Can people stop spreading FUD? You can install whatever app you want on your phone...Google can't touch them unless you got them FROM Google in the Market. If you got malicious apps from Google I guarantee you guys would be the first on the net *****ing and moaning about it.
How do I know this? From the numerous "Swype broke my multi-touch!!" posts that followed the Swype developers BEGGING you not to install it. No matter how much they said it was unfinished leaked code, fools STILL installed it and then wanted to ***** about it breaking their phone, albeit temporarily. This proves one thing...end users are usually pretty dumb. Google is covering their back as it's been proven they can't really trust their users to use sense.
Aitese said:
Can people stop spreading FUD? You can install whatever app you want on your phone...Google can't touch them unless you got them FROM Google in the Market. If you got malicious apps from Google I guarantee you guys would be the first on the net *****ing and moaning about it.
How do I know this? From the numerous "Swype broke my multi-touch!!" posts that followed the Swype developers BEGGING you not to install it. No matter how much they said it was unfinished leaked code, fools STILL installed it and then wanted to ***** about it breaking their phone, albeit temporarily. This proves one thing...end users are usually pretty dumb. Google is covering their back as it's been proven they can't really trust their users to use sense.
Click to expand...
Click to collapse
quoted for truth

Barclays Pingit doesnt work for root users.

Ive recently downloaded the barclays pingit app for my dhd and the app has a built in checker to see if your phone has root access and denies you access to the app if you are.
does anyone know a way of tricking the app into thinking im not rooted, ive been waiting for a barclays mobile app for android since ive been on android and now they have one i cant use it.
thanks,
Nathan
Yes I want to do this also; I am wondering if I could temporarily turn off Super-User on my SGS2, would I then be able to configure Pingit, hoping to turn SuperUser back on and then run it OK.
maybe
could always try renaming the SU folder. This will temporarily unroot the device, but you might need to do that by adb. The only reason the app is blocked from rooted devices is to protect you though. If you forced your way passed security and were frauded then banks arent so kind at refunding you if you are a victim of fraud.
I believe the app will be opened up to rooted devices later on, I know the beta pingit worked on rooted devices, but crashed. Might have been due to me using ICS though.
Spoken to Barclays about this
Ok, so after a couple of usual answers from the normal ill informed call handlers, I was told that "not many people use a rooted device"
Barclays I guess are not that bothered about missing out on a sector like myself, that run An It support company, and are small enough to not be able to afford Pdq machines, and wont to provide an alternative payment method to its customers. Given the nature of our business, it wouldn't be surprising that we would have rooted out devices...!
Anyway after much moaning, I still could not get a "real" reason why the Barclays developers, are worried about rooted devices..the only answer I was given was "the developers dont want rooted users changing or seeing their work" !!...
So the point of this reply is to post the email address I was given to email barclays about the lack of support for the app on a rooted phone.
I was told to put PINGIT in the subject field and send it to [email protected]
Who knows if enough people email them, they may realise its worth allowing the app onto rooted devices.
Chris
reppo28 said:
So the point of this reply is to post the email address I was given to email barclays about the lack of support for the app on a rooted phone.
I was told to put PINGIT in the subject field and send it to [email protected]
Who knows if enough people email them, they may realise its worth allowing the app onto rooted devices.
Chris
Click to expand...
Click to collapse
Good idea Chris, I have used this wording in my message to them;
“Pingit is just what I have been waiting for! However you have made it so I can’t use it on my fantastic Rooted Samsung Galaxy S2; I will not be giving up my phone to get Pingit, no I will simply change banks to whom ever first offers the same type App.
Goodbye Barclays”
PINGIT
I emailed Barclays (as per email address above), and was given this response:
It is not possible to download and use the Barclays Pingit App on rooted android phones and Jail broken Iphone as they could allow other
applications running on the devices to capture the five digit security passcode that is used to access the Pingit App which may result to fraud.
If we come across any phones that are being attempted to download the app through by passing this option they will be blocked for security
reasons.
Consequently at this present moment in time, we have no plans to allow either rooted or jailbroken phones to access the app.
Click to expand...
Click to collapse
Wouldn't a keyboard app capture that security key on unrooted devices, too? If so, surely logic follows that unrooted phones with custom keyboards should also be blocked.
The irritating thing about their explanation is that the root check happens after they ask for all your details. Security fail.
OK I got it working with the following step.
Install SuperSU
Install Voodorootkeeper.
Using Root explorer or similar. Go to sys/apps Rename superuser.apk to superSU.apk
Run Voodoo rootkeeper and temp hide root.
Pingit it should now work.
PayPal works beautifully on rooted phones, which in my mind is reason enough for other financial institutions to follow their lead!
Sent from my Desire HD using Tapatalk 2
gcarter said:
PayPal works beautifully on rooted phones, which in my mind is reason enough for other financial institutions to follow their lead!
Sent from my Desire HD using Tapatalk 2
Click to expand...
Click to collapse
PayPal isn't a bank/building society and isn't regulated by the FSA. That means they don't have to follow "best practice" with regards to security. Barclays have tried to minimise all possible avenues for fraud.
Does the Pingit app use its own build in keypad or does it use whichever keyboard you have installed and selected?
It's own keypad.
Humma78 said:
OK I got it working with the following step.
Install SuperSU
Install Voodorootkeeper.
Using Root explorer or similar. Go to sys/apps Rename superuser.apk to superSU.apk
Run Voodoo rootkeeper and temp hide root.
Pingit it should now work.
Click to expand...
Click to collapse
This didn't work for me. Any ideas how else this can be achieved?
I take it there is no workaround?

Bypassing the Android Permission Model

i just wanted to share this article for everyone to see!
http://privacy-pc.com/articles/bypassing-the-android-permission-model.html
what do you guys think about this? and about android as a whole (security wise)?
jamcar said:
i just wanted to share this article for everyone to see!
http://privacy-pc.com/articles/bypassing-the-android-permission-model.html
what do you guys think about this? and about android as a whole (security wise)?
Click to expand...
Click to collapse
I wouldn't say that the permissions system is "completely flawed," though it does lack significantly in key areas. Some of the permissions would be better served if they were split into multiple sub-permissions (eg. phone ID), but I'm relatively content with the current status quo.
Additionally, using Facebook, or heck, a mobile device on it's own even, means that you already thrown away any claims to your own data and privacy. While there is always room to better the system, it is important to remember that we've all signed clauses with a bold BUYER BEWARE heading. It is the user's job to take additional steps to secure all that, rather than waiting on Google to clean up their act IMO.
If you have any concerns about privacy on an Android device, I highly suggest using this app LBE Security Master http://forum.xda-developers.com/showthread.php?t=1422479 (there's a hint of irony there, as the app is from China with root and internet access). That one works on JB unlike the previous released with worked up to ICS.

[Q] this may be more general to android but, root question

Out of curiosity why isn't root allowed out of the box on the Nexus 7?
I mean I get that no one should use superuser access/root privileges on anything more than a "need to use" basis and honestly, I'll even admit that with the way the ecosystem has evolved, root isn't really entirely "needed" but, it still boggles my mind that there is no way I can just open up a terminal, type in a code, and get root.
I've tried googling the issue but, I generally get a bunch of responses about things which aren't quite related.
Snow_fox said:
Out of curiosity why isn't root allowed out of the box on the Nexus 7?
I mean I get that no one should use superuser access/root privileges on anything more than a "need to use" basis and honestly, I'll even admit that with the way the ecosystem has evolved, root isn't really entirely "needed" but, it still boggles my mind that there is no way I can just open up a terminal, type in a code, and get root.
I've tried googling the issue but, I generally get a bunch of responses about things which aren't quite related.
Click to expand...
Click to collapse
I think its fine the way it is. its jailbroken out of the box so you can use your device how you wish and that is what matters. You can't expect a company to support users to change everything about it. Then people complain about bricked devices or contact them for support for some custom rom.
However I believe they made it pretty easy to root. They certainly could have made it a lot harder. Anyone who has the skills (or patience to learn how) to use root certainly can root a device based on the tutorials given. And other users who don't want to worry about it don't ever see it. The little bit of effort helps weed out the people who would mess things up for themselves.
firesoul453 said:
I think its fine the way it is. its jailbroken out of the box so you can use your device how you wish and that is what matters. You can't expect a company to support users to change everything about it. Then people complain about bricked devices or contact them for support for some custom rom.
However I believe they made it pretty easy to root. They certainly could have made it a lot harder. Anyone who has the skills (or patience to learn how) to use root certainly can root a device based on the tutorials given. And other users who don't want to worry about it don't ever see it. The little bit of effort helps weed out the people who would mess things up for themselves.
Click to expand...
Click to collapse
I don't expect a company to support me changing anything I want about it. If I misuse root privileges, then I don't expect to have a lifeline when I call asus/google. I don't expect say Dell or HP to cover my PC if I try to install ubuntu and I botch something up.
However, refusing to let me have root because "might" mess something up is also flawed logic. I may also for one reason or another need root access.
While I am glad they make it easy to root, the reality is there is they are being counter productive. Honestly, just leaving in root access would decrease the chances of me bricking my device at this point. As of now to get root access I'll have to flash a custom recovery compared to just giving the ability to go into a terminal and type in "oem -su enable" or something.
If the flashing issue is really that big of a deal, then why force users to flash to get what they want in the first place?
Snow_fox said:
I don't expect a company to support me changing anything I want about it. If I misuse root privileges, then I don't expect to have a lifeline when I call asus/google. I don't expect say Dell or HP to cover my PC if I try to install ubuntu and I botch something up.
However, refusing to let me have root because "might" mess something up is also flawed logic. I may also for one reason or another need root access.
While I am glad they make it easy to root, the reality is there is they are being counter productive. Honestly, just leaving in root access would decrease the chances of me bricking my device at this point. As of now to get root access I'll have to flash a custom recovery compared to just giving the ability to go into a terminal and type in "oem -su enable" or something.
If the flashing issue is really that big of a deal, then why force users to flash to get what they want in the first place?
Click to expand...
Click to collapse
Root can cause problems. It can cause security problems if not used right and can brick not only while rooting but while flashing custom roms and things.
while you and I don't go asking for support, a lot of people do. People try to pass things off as warrenty problems and do call and email asking for support for things not originally on that phone.
And it hurts them in other ways. Google makes pretty much all their money from ads. Rooting makes it easy to block ads and you average rom might have it built right in. The only reason google bothers with android was for the ad money. So there is no incentive for them give root out of the box. They already are more open and free than their main competitions.
You could look at samsung. THey make their money of the hardware and so have been more open with rooting with odin, thought they still don't really care for it (probably because of the support issue)
And the carriers are even worse because rooting allows for things like wireless tethering for free and data is their biggest costs. Their certnaly isn't any reason for carriers to push for root.
I honestly don't know the true answer; only Google would know.
But in my opinion, it's because Android is an open source OS, and giving users root access allows them to alter .apk's very easily. This is bad for developers, because most developers make money from advertisements or in-app currency, and allowing users to alter their .apk to easily block ads or change in-app currency would thwart developer interest.
In Windows for example, the OS is not open source, but users have "root" access because they can always get to the root of every program/file. BUT users CANNOT EASILY alter the programs installed on Windows - if they want a hacked version, they usually have to download a hacked version that someone else hacked.
Whereas in Android, it's very easy for me to download any .apk I want, run my hack app that says "Search for this value and change it to this" and BAM it's now hacked in literally seconds.
firesoul453 said:
Root can cause problems. It can cause security problems if not used right and can brick not only while rooting but while flashing custom roms and things.
while you and I don't go asking for support, a lot of people do. People try to pass things off as warrenty problems and do call and email asking for support for things not originally on that phone.
And it hurts them in other ways. Google makes pretty much all their money from ads. Rooting makes it easy to block ads and you average rom might have it built right in. The only reason google bothers with android was for the ad money. So there is no incentive for them give root out of the box. They already are more open and free than their main competitions.
You could look at samsung. THey make their money of the hardware and so have been more open with rooting with odin, thought they still don't really care for it (probably because of the support issue)
And the carriers are even worse because rooting allows for things like wireless tethering for free and data is their biggest costs. Their certnaly isn't any reason for carriers to push for root.
Click to expand...
Click to collapse
I'm not going to deny adblocking is one of my many vices. While many people have many views on it, all I can say is until ads no longer break my experience completely, I'll be stuck using adblockers. While this is becoming less of a problem with phones/tablets that have faster processors I've had my entire phone lock up before because of certain types of ads my phone couldn't handle. On top of that many are frustrating to deal with as there is no "x" visible for me to tap and I have to back out of whatever I was doing because the phone can't handle the discrepancy in size and find some way to navigate around the ad.
While this is only one example there have been other issues. Hell I had to use a script that required root back when I had my captivate just to get it it to work on my schools wifi. There were a number of issues and I imagine there are still a number of issues that make the lack of root almost a deal breaker.
Sure you can argue from a support issue point of view but, realistically as I already said, I wouldn't have to flash anything if I had access to root... I guess they just chalk it up to "some people are going to do whatever it takes anyway...." but, that just doesn't make much sense to not let people have it anyway.
Geodude074 said:
I honestly don't know the true answer; only Google would know.
But in my opinion, it's because Android is an open source OS, and giving users root access allows them to alter .apk's very easily. This is bad for developers, because most developers make money from advertisements or in-app currency, and allowing users to alter their .apk to easily block ads or change in-app currency would thwart developer interest.
In Windows for example, the OS is not open source, but users have "root" access because they can always get to the root of every program/file. BUT users CANNOT EASILY alter the programs installed on Windows - if they want a hacked version, they usually have to download a hacked version that someone else hacked.
Whereas in Android, it's very easy for me to download any .apk I want, run my hack app that says "Search for this value and change it to this" and BAM it's now hacked in literally seconds.
Click to expand...
Click to collapse
This is actually one of the best reasons I think I've ever heard and I've actually asked this question a lot in different places over the years. That's a pretty feasible answer.
Geodude074 said:
I honestly don't know the true answer; only Google would know.
But in my opinion, it's because Android is an open source OS, and giving users root access allows them to alter .apk's very easily. This is bad for developers, because most developers make money from advertisements or in-app currency, and allowing users to alter their .apk to easily block ads or change in-app currency would thwart developer interest.
In Windows for example, the OS is not open source, but users have "root" access because they can always get to the root of every program/file. BUT users CANNOT EASILY alter the programs installed on Windows - if they want a hacked version, they usually have to download a hacked version that someone else hacked.
Whereas in Android, it's very easy for me to download any .apk I want, run my hack app that says "Search for this value and change it to this" and BAM it's now hacked in literally seconds.
Click to expand...
Click to collapse
Rooting has nothing to do with decompiling apks. apk hacking is bad but thats a whole other thing. Anyone can get a hold of pretty much every apk easliy, no need for root.
Windows doesn't really have root, its pretty different. You can give programs administrator privileges I guess, but not exactly the same. Decompiling apks is only easier because its java, it has nothing to do with the os or root privileges.
Don't expect any of these companies support to support root until they have a reason to.

Medical app not compatible - is it potentially achievable for me to get it to work?

Hi,
I use continuous glucose monitoring to monitor my blood sugar, as I am a type 1 diabetic. The CGM I use uses Bluetooth to sync with an app (Medtronic's Guardian Connect app) and gives blood sugar data, safety alerts etc., but this app is only compatible with selected Android phones, which doesn't include any Oneplus phones. I really like the Oneplus 7t so I would rather not sell it if possible, so I was thinking of trying to make it compatible with the Oneplus and removing the phone model block. This has been done before with a different medical manufacturer's CGM app ( https://forum.xda-developers.com/oneplus-7t/help/medical-app-compatibility-t4015519 ), so I think it should be possible. Given my lack of programming ability, I was wondering if there are resources anywhere that might help with learning how to do this? Obviously they're not going to tell me "This is how you make this specific app work", but I'm just hoping to find some general resources on this type of coding. I have searched around with no success as I am not sure where to look. I gather it would take more than simply changing the buildprop file to trick the app into thinking it's a compatible phone.
Thanks.
Would help to know the app and what issues you're having. Is it not showing up in the play store? Does it give an error?
ziddey said:
Would help to know the app and what issues you're having. Is it not showing up in the play store? Does it give an error?
Click to expand...
Click to collapse
Sorry, not sure how I managed to omit all those details. The app is Guardian Connect (https://play.google.com/store/apps/details?id=com.medtronic.diabetes.guardianconnect&hl=en). I am able to download it, but when I open it it says "incompatible with your device", as it's only officially compatible with a limited subsection of Android phones (https://guardianconnect.medtronic-diabetes-mena.com/en_gb/app-compatibility). However, the Dexcom app that I linked in the first post also has limited compatibility, yet people have managed to get it to work with other android phones, so I'm cautiously optimistic that it will be possible for me to do the same.
I can't link URLs properly yet as I'm a new user, so I had to add those spaces in the links.
{Mod edit: Links inserted}
Riveon said:
Sorry, not sure how I managed to omit all those details. The app is Guardian Connect (https://play.google.com/store/apps/details?id=com.medtronic.diabetes.guardianconnect&hl=en). I am able to download it, but when I open it it says "incompatible with your device", as it's only officially compatible with a limited subsection of Android phones (https://guardianconnect.medtronic-diabetes-mena.com/en_gb/app-compatibility). However, the Dexcom app that I linked in the first post also has limited compatibility, yet people have managed to get it to work with other android phones, so I'm cautiously optimistic that it will be possible for me to do the same.
I can't link URLs properly yet as I'm a new user, so I had to add those spaces in the links.
{Mod edit: Links inserted}
Click to expand...
Click to collapse
Hello. Just wanted to inform you that I inserted the working links on your behalf (at least I assumed so).
I hope you'll find a solution for the issue soon.
Oswald Boelcke said:
Hello. Just wanted to inform you that I inserted the working links on your behalf (at least I assumed so).
I hope you'll find a solution for the issue soon.
Click to expand...
Click to collapse
Thanks for that
I have diabetes and want to use this app for checking my blood glucose level continiously on my oneplus 8pro phone but the app says its not compatible with the device. I don't know how to solve this problem.
Is there anybody who can help us with this?
Have you you guys tried to email the developer of the app to fix this?
I have diabetes and want to use this app for checking my blood glucose level continiously on my oneplus 8pro phone but the app says its not compatible with the device. I don't know how to solve this problem.
Is there anybody who can help us with this?
v.konvict said:
Have you you guys tried to email the developer of the app to fix this?
Click to expand...
Click to collapse
Yep, they weren't helpful at all though, unfortunately - they just gave a generic "keep an eye on the compatible device list" response. In the end I gave up and sold a Oneplus and got a Samsung.
Hi!
I just had contact with medtronic Belgium and they said; the more people call us the more 'problem cases' go to the IT'ers in America. So they mean how faster the problem will be solved so just give them a call
Greetings
https://m.apkpure.com/guardian-connect-us/com.medtronic.diabetes.guardianconnect.us/download?from=details
Needs stock, unrooted, bootloader locked, oos10
How can we fake the phone ID for an app?
HueyT said:
https://m.apkpure.com/guardian-connect-us/com.medtronic.diabetes.guardianconnect.us/download?from=details
Needs stock, unrooted, bootloader locked, oos10
Click to expand...
Click to collapse
Can this unlocking of phone be done for two other apps from Medtronic as listed below please?
CareLink™ Connect - Apps on Google Play
Diabetes data sharing
play.google.com
MiniMed™ Mobile - Apps on Google Play
Insulin pump display
play.google.com
Same error message as original post...
I am using an Asus ROG 5s Pro
Thanks in advance to anyone who can help
Can't use unlocked bootloader or rooted phones for medical apps as less secure
volkslove said:
Can this unlocking of phone be done for two other apps from Medtronic as listed below please?
CareLink™ Connect - Apps on Google Play
Diabetes data sharing
play.google.com
MiniMed™ Mobile - Apps on Google Play
Insulin pump display
play.google.com
Same error message as original post...
I am using an Asus ROG 5s Pro
Thanks in advance to anyone who can help
Click to expand...
Click to collapse
https://apkpure.com/developer/Medtronic%2C%20Inc.
Here is the list of all Medtronic's apps. Download the APK, then select the file from your Downloads folder in the Files app.
You may be prompted about the app being from an unknown source or risk to your device. Ignore the warning, tap OK, yes, or allow if prompted.
Hope this helps and as the post above already said I would consider calling Medtronic customer service and asking them to make the app available to all phones.
KemikalElite said:
https://apkpure.com/developer/Medtronic%2C%20Inc.
Here is the list of all Medtronic's apps. Download the APK, then select the file from your Downloads folder in the Files app.
You may be prompted about the app being from an unknown source or risk to your device. Ignore the warning, tap OK, yes, or allow if prompted.
Hope this helps and as the post above already said I would consider calling Medtronic customer service and asking them to make the app available to all phones.
Click to expand...
Click to collapse
Was actually hoping for a work around to use on phones that are not on the compatible list, i.e. for the app to not check for phone compatibility before starting.
volkslove said:
Can this unlocking of phone be done for two other apps from Medtronic as listed below please?
CareLink™ Connect - Apps on Google Play
Diabetes data sharing
play.google.com
MiniMed™ Mobile - Apps on Google Play
Insulin pump display
play.google.com
Same error message as original post...
I am using an Asus ROG 5s Pro
Thanks in advance to anyone who can help
Click to expand...
Click to collapse
I second this; rooted OnePlus 8 Pro running an A12 custom ROM
Personally I've actually come pretty close and was able to hide both Root and Developer Options from being detected using XPrivacyLua, but was unable to get MagiskProps working properly to get around the final "Your Phone is Incompatible" by spoofing as a Google Pixel (one of the primary "approved" devices) message, even after trying multiple older APKs combined with clearing data/cache
Zilch163 said:
I second this; rooted OnePlus 8 Pro running an A12 custom ROM
Personally I've actually come pretty close and was able to hide both Root and Developer Options from being detected using XPrivacyLua, but was unable to get MagiskProps working properly to get around the final "Your Phone is Incompatible" by spoofing as a Google Pixel (one of the primary "approved" devices) message, even after trying multiple older APKs combined with clearing data/cache
Click to expand...
Click to collapse
Thanks.
Actually the logic behind limiting the compatible devices boggles my mind because, other than replicating the screen of the insulin pump and sending data downloaded from the pump to health care providers, the app does not allow pump to accept commands from external devices. So I do not see what the concern is with allowing more devices to use the app...
volkslove said:
Thanks.
Actually the logic behind limiting the compatible devices boggles my mind because, other than replicating the screen of the insulin pump and sending data downloaded from the pump to health care providers, the app does not allow pump to accept commands from external devices. So I do not see what the concern is with allowing more devices to use the app...
Click to expand...
Click to collapse
There is no logic, just retarded medical industry bureaucracy BS.
I've contacted customer support multiple times and asked them the same question, only to get the same useless response of pretending to "pass on my feedback".
It's actually one of the reasons I wanna find out how to work around the problem even more; like who needs them to take proper control of a medical device that I own.
Would also be amazing to get a Wear OS app that displays the same or similar information to the app, but I don't see that being made by Medtronic for at least a decade.
Zilch163 said:
I second this; rooted OnePlus 8 Pro running an A12 custom ROM
Personally I've actually come pretty close and was able to hide both Root and Developer Options from being detected using XPrivacyLua, but was unable to get MagiskProps working properly to get around the final "Your Phone is Incompatible" by spoofing as a Google Pixel (one of the primary "approved" devices) message, even after trying multiple older APKs combined with clearing data/cache
Click to expand...
Click to collapse
Hi! Im struggling with getting this app working on my rooted xiaomi. Do you remember how exactly did you bypass those checks with xprivacylua?

Categories

Resources