TL;DR
- Efforts like Graphene OS face increasing pressure from apps that refuse to run on non-standard Android.
- The custom ROM project characterizes Google’s approach to device attestation as incomplete and flawed.
- Graphene OS is prepared to take legal action if Google won’t let it pass Play Integrity checks.
The only reason I stopped using grapheneOS was because Google contactless payment didn’t work.
Loved everything else about graphene tho
I’ve never used contactless on my phone, I already had a contactless debit card. Why are you, and others, using their phones to pay?
I can create a virtual card before every trip, use it via my phone and then cancel it after the trip, never worrying if my card got skimmed anywhere for one.
when you pay using the virtual wallet it automatically makes a mock id to the POS … at least in my country it does
Ehhh I’m not sure how I got skimmed. Better safe than sorry now, a deleted card is pretty foolproof
For some fucking reason there is zero option for this type of secure virtual card in my country. And I hate it. A friend got skimmed for over $1200 a couple months ago.
Lazy.
Just plain lazy.
I already have my phone in hand in shops - shopping lists, reminders or even plain taking my mind off the shelves so I won’t buy unnecessary shit. Then I get to checkout and…my phone is already in hand. Just boop it and done. No need to dig out wallet from pocket and then dig out card from wallet.
There’s no need to carry your cards if you already have your phone.
Also, unlike your wallet, if you lose it you can track it.
Do you not carry cash? My cards go with my cash, which I would carry anyway even if I could pay by phone just in case I’m out and lose one.
No I don’t. It’s all contactless here.
Why carry a contact less card when you can pay with your phone? Have you given it a try? I find myself without a card in lots of situations. Paying by phone is incredibly convenient. Lot harder to lose than a card too.
I’d still carry my debit card if I used phone, just in case I lose one while out and about. I think I’d be more likely to notice my phone is missing but more likely to lose the phone in the first place.
I’ve never tried it in part because I don’t trust my phone with it’s proprietary software, and I suspect there may be no open source apps to pay with.
A contactless card barely takes up any space. It’s not particularly easier to lose either. I’ve never lost my card; I just keep it in my wallet, in my pocket, just like my phone is in my pocket.
You know what takes up less space? Software on the phone that I’m already carrying.
There have also been occasions where I forget my wallet but still have my phone to pay with.
Easy with one card, but it’s a different story when you have multiple cards. Transit pass, loyalty cards from grocery stores for discounts, credit cards for cash back rewards.
Yes, it has an upper limit though as I discovered after cycling to the garage to pick up my car with just my phone. Triple cycling joy that day 🙄
Yes this depends on the linked card, the software you are using and sometimes vendor limits. Many banks have a cardless withdrawal from atm option as a backup if there happens to be atm nearby. These can have pretty high limits. There are also card generating apps like cash app where you create a cc number on the fly. In a pinch most vendors can easily split the cost of something across different cards if one is maxing out.
the app hides the real numbers for the credit card and gives the POS a mock id to make the purchase. it’s harder to clone. also you need to unlock the phone for it to work it’s an extra layer of protection
Giving a mock card sounds useful. I’ve looked into that for paying online but I couldn’t find an open source way to do it.
Pretty sure all contactless forms of payment work like that
I find it super convenient.
Also, it doesn’t have a limit. Pretty sure I bought my last car with contactless on my phone, but that was years ago.
I’ve never used a contactless debit card. I already had a chip and pin debit card. Why are you, and others, using your contactless card to pay?
I didn’t choose, my bank gave me a contactless card when my last chip and pin card expired (the card still has chip and pin which I use when contactless fails).
My Chip+PIN card has an RFID chip. Standard in Germany. Why would I tell, much less trust, google with my banking. Why would I let them skim data and/or a percentage off the transaction. Why would I choose a system with spotty acceptance, whereas I can use my girocard everywhere.
You could use sandboxed google play on the main user or second user.
Still can’t use tap to pay
Do you pass play integrity?
GrapheneOS, and other non-OEM OSes, do not. It’s kinda the whole point of the article/OP I linked.
Have you tried playintegrity fix?
Nope, nor do I intend to. GrapheneOS frowns upon rooting and modifying the system as it typically widens your attack surface. I’m not using a secure OS then going around to purposefully make it less secure.
no you cant
Oh I never actually tried but figured it would. That sucks then
I’m sure Google contactless payment works really well when the phone is dead. Or you drop your phone in a toilet or off a bridge. It’s far easier to loose a phone than a card in a wallet in your pocket. If you lose your phone, you also lose access to all your money.
Not a fan of google pay, but I gotta say, I lost way more wallets than phones in my life it’s about a 3 to 0 ratio (not counting purses I have lost before owning a phone.
I also carry a wallet? Cause, yknow, ID and stuff.
Phone is just way more convenient. Especially since I don’t have a limit on its contactless amount. Whereas with my card, I would have to chip&pin for anything over £40