Comment on Norwegian government to set 15-year age limit for using social media

• virku@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

  I don’t think BankID has any sort of SDK that lets other apps access user data like that? All interaction with BankID I know of at least is triggered with the app needing authentication/signature opening a BankID session to the central service where you enter your authentication and then the BankID app is used as MFA to verify this.

  source

  • sibachian@lemmy.ml ⁨3⁩ ⁨weeks⁩ ago

    they run verification through google/apple services. so we scandinacians can’t use a degoogled/microg android phones at all. at one point (long long ago) they used to run their own which made it available on any platform, but that service mysteriously died the day ubuntu phone launched. very coincidental.

    source

    • MoonlightFox@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

      I am not sure if this is true, maybe I am misunderstanding something. I use GrapheneOS and can use all banking services in Norway just fine. GrapheneOS does have a translation layer or something like that for Google Play Services, is that what you are thinking of?

      source

      • sibachian@lemmy.ml ⁨3⁩ ⁨weeks⁩ ago

        ah, it’s possible BankID has a different authentication process in norway. while it’s privately owned, they probably have actual requirements and guidelines to follow in norway as opposed to sweden.

        source
  • Lifter@discuss.tchncs.de ⁨3⁩ ⁨weeks⁩ ago

    What I meant was that the phone operating system has SDKs (e.g. google services on android) which the app uses to make sure it hasn’t been tampered with, which makes it even harder to make an open source client.

    It’s the opposite of supplying an SDK for third party developers.

    source

    • Lifter@discuss.tchncs.de ⁨3⁩ ⁨weeks⁩ ago

      Or even run the app as is on a “non-compliant” os - like a rooted android.

      source
    • virku@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

      Oh I see. Thanks for the clarification. Is that something they could have gone without and still be as secure as possible?

      source

      • Lifter@discuss.tchncs.de ⁨3⁩ ⁨weeks⁩ ago

        Not if you ask them but taking the time to design a system that isn’t reliant on a strong client (and then open sourcing it) would probably be more secure, and obviously more inclusive.

        For instance, I’m very eager to switch to a lknux phone but having blockers like this is forcing me to stay on Android, even though I am sick and tired or the enshittification.

        source