Third party keyboards no longer accepted by HSBC's banking app. - eviltoast

In a recent update to the HSBC app they’ve added a screen to prevent you from using the app unless you use the default (google) keyboard.

They do a similar thing if you have an accessibility service running that can access the screens content. A fair enough security warning if you’ve happened to install a dodgy keyboard app, but highly frustrating when using an open source alternative that enhances the security and privacy over the default option (HeliBoard in my case).

I haven’t found a way to circumvent the page yet. It would be useful if Android allowed you to block the permission to query all packages, but alas.

  • henfredemars@infosec.pub
    link
    fedilink
    English
    arrow-up
    48
    arrow-down
    1
    ·
    edit-2
    4 days ago

    I’m not sure about this app especially, but I hate that my bank personally has so many restrictions on the app usage but I can also just use a web browser on God knows what with who knows what extensions installed and they’re all like sure, come on in!

    • redshift@lemmy.ml
      link
      fedilink
      English
      arrow-up
      19
      ·
      4 days ago

      They likely won’t allow that forever. If Google has its way with the web, trusted browser environments will be a thing, and banks will only accept those.

    • JoYo@lemmy.ml
      cake
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      13
      ·
      edit-2
      4 days ago

      were you also against cache attestation and manifest v3?