PrivSec-dev / banking-apps-compat-report

Report and track banking app compatibility with GrapheneOS, including which workarounds may be required.
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/
84 stars 4 forks source link

T-Bank #522

Open b1ek opened 1 day ago

b1ek commented 1 day ago

Is there an existing issue for this?

App name

T-Bank

Link to app

https://www.tbank.ru/apps/android-bank/

App version

v6.47.0

Country of the app

Russia

Build Number

2024101200

Device list

Pixel 6a

Profile app tested in

Owner profile

Google Play installed?

Not Installed

Where did you install this app from?

Other (extra notes below)

Google Play services Network permission revoked?

Native code debugging

Exploit protection compatibility mode

Memory tagging extension (MTE)

Dynamic code loading via memory

Dynamic code loading via storage

Stock OS compatibility

NFC payments

Description of the app's functionality

The app seems to works as expected. Enabling T-Pay shows message: "T-Pay is not available on this device"

Stories load, I can transfer money between the investbox and my card, notifications load, what seems to be WebView for travel tours is as shitty as it was on my old phone with JIT disabled.

All sections of the app - menu, payments, city, chat and "more" open and do not raise an error. Profile information menu is opening as expected

Are there any extra notes you think users should know about?

App is incompatible with restricted DCL via memory

ADB logcat of the app if necessary

Logs when DCL is restricted:

long text ```systemverilog 10-21 04:27:07.143 13641 13641 W pool-17-thread-: type=1400 audit(0.0:14590): avc: denied { read } for name="version" dev="proc" ino=4026532008 scontext=u:r:untrusted_app:s0:c149,c256,c512,c768 tcontext=u:object_r:proc_version:s0 tclass=file permissive=0 app=com.idamob.tinkoff.android 10-21 04:27:07.191 13641 13641 E HMSSDK_HMSPackageManager: query hms action, resolveInfoList is null or empty. 10-21 04:27:07.191 13641 13641 E HMSSDK_HMSPackageManager: query aglite action, resolveInfoList is null or empty 10-21 04:27:07.191 13641 13641 E HMSSDK_HMSPackageManager: PackagePriorityInfo list is null 10-21 04:27:07.191 13641 13641 E HMSSDK_HMSPackageManager: Failed to find HMS apk 10-21 04:27:07.191 13641 13641 I HMSSDK_HMSPackageManager: Enter getHMSPackageNameForMultiService 10-21 04:27:07.192 13641 13641 E HMSSDK_HMSPackageManager: query hms action, resolveInfoList is null or empty. 10-21 04:27:07.192 13641 13641 E HMSSDK_HMSPackageManager: query aglite action, resolveInfoList is null or empty 10-21 04:27:07.192 13641 13641 E HMSSDK_HMSPackageManager: PackagePriorityInfo list is null 10-21 04:27:07.192 13641 13641 E HMSSDK_HMSPackageManager: Failed to find HMS apk 10-21 04:27:07.192 13641 13641 I HMSSDK_HuaweiMobileServicesUtil: hmsPackageName is com.huawei.hwid 10-21 04:27:07.192 13641 13641 E HMSSDK_HMSPackageManager: query hms action, resolveInfoList is null or empty. 10-21 04:27:07.192 13641 13641 E HMSSDK_HMSPackageManager: query aglite action, resolveInfoList is null or empty 10-21 04:27:07.192 13641 13641 E HMSSDK_HMSPackageManager: PackagePriorityInfo list is null 10-21 04:27:07.193 13641 13641 E HMSSDK_HMSPackageManager: Failed to find HMS apk 10-21 04:27:07.193 13641 13697 I HMSSDK_HMSPackageManager: enter asyncOnceCheckMDMState 10-21 04:27:07.193 13641 13641 I HMSSDK_HuaweiMobileServicesUtil: HMS is not installed 10-21 04:27:07.205 13641 13641 D nativeloader: Load /data/app/com.idamob.tinkoff.android/lib/arm64/libi.so using ns clns-2 from class loader (caller=): ok 10-21 04:27:07.281 13641 13724 D CompatibilityChangeReporter: Compat change id reported: 160794467; UID 10149; state: ENABLED 10-21 04:27:07.291 13641 13724 D CompatibilityChangeReporter: Compat change id reported: 194532703; UID 10149; state: ENABLED 10-21 04:27:07.291 13641 13724 D CompatibilityChangeReporter: Compat change id reported: 253665015; UID 10149; state: ENABLED 10-21 04:27:07.291 13641 13724 D CompatibilityChangeReporter: Compat change id reported: 311402873; UID 10149; state: DISABLED 10-21 04:27:07.291 13641 13724 D CompatibilityChangeReporter: Compat change id reported: 323349338; UID 10149; state: DISABLED 10-21 04:27:07.337 13641 13641 D nativeloader: Load /data/app/com.idamob.tinkoff.android/lib/arm64/libdpboot.dn80.so using ns clns-2 from class loader (caller=): ok 10-21 04:27:07.337 13641 13641 I Fingerprint: [20240805-202409101329 b7:b7 34 google/bluejay/bluejay:14/AP2A.240905.003.F1/2024101200:user/release-keys blocked] ```
b1ek commented 1 day ago

Since the app is not listed in play store, you need to install it from this link: https://www.tbank.ru/apps/android-bank/

I have scanned the QR code from the page with my phone which downloaded an .APK file, which I installed with Vanadium. If that even matters