PrivSec-dev / banking-apps-compat-report

Report and track banking app compatibility with GrapheneOS, including which workarounds may be required.
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/
87 stars 4 forks source link

IKO #25

Closed PatrykMis closed 2 years ago

PatrykMis commented 2 years ago

Is there an existing issue for this?

App name

IKO

Link to app

https://play.google.com/store/apps/details?id=pl.pkobp.iko

App version

v3.133.26

Country of the app

Poland

Device

Google Play installed

Google Play services Network permission revoked?

SafetyNet Enforcement

Native code debugging

Stock OS compatibility

Profile app tested in

Description of the app's functionality

app works with and without Google GSF and GMS with native code debugging disabled, details below.

Without GSF and GMS

with GSF and GMS

The app is working. No issues have been noticed. Nearby departments, ATMs etc. untested (it requires location permission and may want to use GSF/GMS location services).

Are there any extra notes you think users should know about?

Don't install the app to secondary and/or work profiles on devices with android 12+ unless you are not planning to use contactless payments via NFC. NFC payments are not supported for secondary/work profiles on Android 12+ for some reason - NFC can be enabled or disabled only.

ADB logcat of the app if necessary

No response

akc3n commented 2 years ago

Thanks for the feed back. We really appreciate it.

PatrykMis commented 2 years ago

Don't install v3.140.28 (version code: 45359), at least without Google Play. From this version the targetSdk was razed to 33 and some libs were probably bumped too. Impossible to launch at all, it throws message like something went wrong, we're working already on this. It's not GOS-related issue, for all devices without GMS or MicroG.

Not tested with (Sandboxed) Google Play yet.

Last working:

akc3n commented 2 years ago

@PatrykMis I've created a post addressing this here https://akc3n.page/posts/banking-app-issues/ with some possible solutions. Please let us know if your issue is resolved afterwards. Thanks.

PatrykMis commented 2 years ago

Of course I tried it already. The issue still exists with native code debugging enabled and Exploit Protection Compatibility Mode - forgot to mention, sorry. I have tried granting all permissions, too.

PatrykMis commented 1 year ago

After extensive testing it on different devices, OSses and configurations, finally I can confirm that app requires GMS (or eventually MicroG) to work, even to run properly. The only workarround is to use HMS-based version from Huawei App Gallery and skipping dialogue to install HMS services each time (fortunately, HMS version is signed by the same key). Further more, it throws error on contactless payments but payment is successful. Thus, I recommend setting PIN code for contactless payments to be entered on a terminal, not in the app.

akc3n commented 1 year ago

Thank you for the update @PatrykMis