PrivSec-dev / banking-apps-compat-report

Report and track banking app compatibility with GrapheneOS, including which workarounds may be required.
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/
87 stars 4 forks source link

Mir Pay #495

Closed erius0 closed 1 month ago

erius0 commented 2 months ago

Is there an existing issue for this?

App name

Mir Pay

Link to app

https://appgallery.huawei.com/app/C103191567

App version

v1.47.7.350

Country of the app

Russia

Build Number

2024082200

Device list

Pixel 8

Profile app tested in

Owner profile

Google Play installed?

Installed

Where did you install this app from?

Other (extra notes below)

Google Play services Network permission revoked?

Native code debugging

Exploit protection compatibility mode

Memory tagging extension (MTE)

Stock OS compatibility

NFC payments

Description of the app's functionality

This app allows to add and make NFC payments with cards from any Russian bank issued by Mir card payment service, everything works as intended

Are there any extra notes you think users should know about?

Some other countries also accept payments with Mir cards The app was apparently removed from Google Play Store, the only place I could find it was Huawei AppGallery. To avoid installing and using AppGallery you can directly download it from their website by modifying the URL Direct download link: https://appgallery.cloud.huawei.com/appdl/C103191567

ADB logcat of the app if necessary

No response

spring-onion commented 1 month ago

Thanks for the report. The link to the app leads me nowhere? Direct download link works though.

erius0 commented 1 month ago

The link is correct, I think the apps region is restricted to Russia, cant seem to access it from a non-Russian ip address Here's what it looks like when accessed from a Russian ip image

spring-onion commented 1 month ago

Ah fair enough!

0x62c734ec commented 2 weeks ago

For those interested in the secondary profile (NOT OWNER): the answer yes, but before the opening of the application, you should:

  1. Turn on NFC on the phone
  2. Close MirPay app through Force stop (its necessary)
  3. Open MirPay and pay will work in that secondary profile.

Btw app requires DCL via memory, you cant run app without allowing DCL via memory.