• 0 Posts
  • 129 Comments
Joined 9 months ago
cake
Cake day: July 14th, 2025

help-circle




  • In the case of Russia, China, Iran, North Korea, etc. they have control of the routes in and out of the country. In other words, if an individual is inside one of those countries and tries to connect to an outside resource, that connection passes through a government-controlled device and every request is ostensibly approved or denied. This would not work in most other countries. Those governments would have to wrangle many disparate entities to seize control at scale. Even then there are ways to disguise connections beyond using a VPN.

    (I feel like most people here are gonna say “duh, we know”. This is for the people in the back.)








  • One of my banking apps (Citi) didn’t even work in stock Android on a Pixel. It thinks I’m rooted lol.

    Everything works well enough in the browser though. Nowadays I just do all that stuff on a desktop PC. Not everything needs to be an app or even done on a phone.

    The desktop versions of bank websites have everything I need, whereas mobile versions can skip out on certain features. Plus, these apps tend to hoard perms for “security” reasons, or so they say.

    If you have a strong password and legit MFA (like TOTP or a physical key), use a trusted device/browser that’s good enough. There shouldn’t be a need to grab my location or nearby devices.

    Bonus points if the bank lets you review login sessions and deauth devices, flags things like impossible travel, etc.

    Credit unions tend to do better. DCU is one example. They excel at security, don’t do any silliness with perms in their app, let you review logins and devices, and have a strong MFA implementation. The big private national players just want to sell you to data brokers to pad their margins while you pay ridiculous interest rates on their crappy products and get nothing in return.