PrivSec-dev / banking-apps-compat-report

Report and track banking app compatibility with GrapheneOS, including which workarounds may be required.
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/
87 stars 4 forks source link

neon – your account app #207

Closed ElucGeek closed 1 year ago

ElucGeek commented 1 year ago

Is there an existing issue for this?

App name

Neon - your account app

Link to app

https://play.google.com/store/apps/details?id=com.neonbanking.app

App version

3.1.18

Country of the app

Switzerland

Build Number

TQ1A.230105.001.A2.2023010300

Device list

Pixel 7

Profile app tested in

Owner profile

Google Play installed

Installed

Google Play services Network permission revoked?

SafetyNet Enforcement

Native code debugging

Exploit protection compatibility mode

Stock OS compatibility

Description of the app's functionality

Full functionality, including view balance, transactions, make payment, send to contact,...

Are there any extra notes you think users should know about?

I didn't got a notification yet but I assume it works. Same, I'm not using eBill, so not tested but no reason to have issues.

ADB logcat of the app if necessary

No response

akc3n commented 1 year ago

Thanks @ElucGeek

retog commented 1 year ago

Thanks! Did you get contactless (NFC) payment to work?

ElucGeek commented 1 year ago

Thanks! Did you get contactless (NFC) payment to work?

I don't know this feature. Are you sure you don't mean Google Pay/Wallet NFC payment? This is not working but it's not related to the Neon app. As far as I know there is no NFC payment in the Neon app. In the app you can pay to your contact (if you share your contacts with the app) or do a bank (IBAN) payment like with any bank but that's all.

retog commented 1 year ago

Hi @ElucGeek , as Google pay doesn't work on graphene os contactless payment only works if the banking app supports it. Some banking apps do and I was hoping neon would be one of those, as having to use the card again is a major bummer.

ElucGeek commented 1 year ago

Hi @ElucGeek , as Google pay doesn't work on graphene os contactless payment only works if the banking app supports it. Some banking apps do and I was hoping neon would be one of those, as having to use the card again is a major bummer.

Hi @retog , I never heard of a banking app that can be used to pay directly on Google Pay compatible terminal, do you have an example? if possible from a Swiss Bank? Regarding Google Pay, it's a matter of compromise, I did use it less than 10 times in a year when I was on LineageOS but each time I used it I had the card on me as well, so it was not really necessary. Anyway I need the card to withdraw money, for shop that doesn't support Google Pay or to pay amount above a certain limit (if I'm right Google Pay has the same limit as contactless payment, but not sure). On top of that, even if I didn't reach a zero-Google setup yet, I still try to avoid giving financial data to Google or any other app/service than my bank and card provider. But it's going off the topic.

retog commented 1 year ago

Hi @ElucGeek, there seems to be several banking app that support NFC payment according to https://www.reddit.com/r/GrapheneOS/comments/100a5pk/grapheneos_nfc_payment_options_google_pay_etc/. I think the UBS app had it till around two years ago.

Before switching to graphene I always paid with my phone. Yes, the physical card is somewhere in my wallet stored in a bag of my wheelchair, but my phone is always at hand. Also for me it's easier to use than a terminal. Touching the terminal is also less hygienic, something I have to worry about, as I'm on immunosuppressants. But even without my particular circumstances, I can't see how anybody would like to fiddle with a card when you could just hold your phone.

In Switzerland there's the partial work-around of paying with ubs-twint connected to the Neon card, but it doesn't work abroad and it's just not as convenient.

retog commented 1 year ago

It shouldn't be too hard for Neon to implement this feature given the support built in Android: https://developer.android.com/guide/topics/connectivity/nfc/hce

So if you know anybody at neon, nudge them :)