cross-posted from: https://lemmy.today/post/29758710

Google is not entitled to my personal banking information or any other PII! WTF if I go to a store and want to buy I will.

  • Matt@lemmy.ml
    link
    fedilink
    arrow-up
    4
    ·
    17 hours ago

    Just ignore this.

    The major downside of biometrics is that if you get caught, they can force your finger on the phone or force you to look at the front camera.

    • some_guyOP
      link
      fedilink
      arrow-up
      4
      ·
      15 hours ago

      Yep. I don’t allow biometrics to unlock my devices for this reason. Purchase something? Sure thing! Unlock? Hell no.

      • Novaling@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 hours ago

        If you know you’re about to be in a shady place, you can do a quick restart or lockdown mode on both Android and iPhone. So you still get to use biometrics, but turn it off when you know you might be in some shit soon.

  • Zerush@lemmy.ml
    link
    fedilink
    arrow-up
    6
    ·
    1 day ago

    Smartphones are the biggest spyware. I prefer to lick my elbow before storing sensitive data in these devices or using it with banking or medical apps.

    • Matt@lemmy.ml
      link
      fedilink
      arrow-up
      2
      ·
      17 hours ago

      I prefer to carry my laptop with it. I mostly use my phone as a mobile router.

      The less you do on your phone, the better.

  • Eager Eagle@lemmy.world
    link
    fedilink
    English
    arrow-up
    46
    arrow-down
    2
    ·
    edit-2
    2 days ago

    If your banking app has a biometrics lock, it doesn’t mean the bank has your biometric data. That’s not how this works.

    • JackAttack@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      1
      ·
      20 hours ago

      I feel like the bigger security concern here, if one needs to worry about it for their threat level that is more likely, is just like if someone knows your password, who could force me to unlock my phone via biometrics?

      • IttihadChe@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        19 hours ago

        In America at least, “law enforcement” (Police, Ice, CBP) aren’t allowed to force you to enter your password, but they can just happen to hold your phone up to your finger/face to unlock it using biometrics.

        • rumba@lemmy.zip
          link
          fedilink
          English
          arrow-up
          1
          ·
          6 hours ago

          If you don’t enter your password you are deemed suspicious. They’ll just put you in detention for a while to see if you’re a danger. Maybe the holding cells get full and they ship you off maybe you just sit there for a few weeks.

          They don’t seem to give a fuck about what they’re allowed or not allowed to do this year.

          Travel with a burner phone.

        • throwawayacc0430@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          15 hours ago

          In America at least, “law enforcement” (Police, Ice, CBP) aren’t allowed to force you to enter your password

          Might wanna rethink that. If you aren’t a citizen, they could just threaten to send you to el salvador if you refuse to unlock (and maybe still do it after you complied). Even judges are getting arrested by the gestapo, I don’t feel safe even as a citizen. These are not normal times, I wouldn’t put so much faith on the rule of law.

    • Richard@lemmy.world
      link
      fedilink
      arrow-up
      15
      arrow-down
      1
      ·
      edit-2
      2 days ago

      Yeah, android doesn’t allow apps to collect biometrics data, at least not using the standard fingerprint sensors.

      Unless the OS is heavily modified i don’t think AOSP is technically capable of doing that

  • QuazarOmega@lemy.lol
    link
    fedilink
    arrow-up
    20
    arrow-down
    1
    ·
    2 days ago

    I’m all for not giving more data points where it’s not needed, but is this as bad it seems? All biometric data remains stored on the device, it isn’t sent to Google, or any app for that matter, that’s how the API works

    • MasterBlaster@lemmy.world
      link
      fedilink
      arrow-up
      8
      arrow-down
      9
      ·
      2 days ago

      Exactly. Just like they never tracked and stored our movements when we turned iff location history.

      The class action suit they lost on that was fake news /s

      • N0x0n@lemmy.ml
        link
        fedilink
        arrow-up
        3
        arrow-down
        1
        ·
        edit-2
        12 hours ago

        Yeah… People are like this… It’s All fake news until it isn’t anymore and than everyone is Pikachu Faced…

        After all they have done and still doing… I can ASSURE and GUARANTEE you with 100% certitude that they would NEVER do that… They are not that kind of evil. /s

        Sigh 😮‍💨😮‍💨

        • 3abas@lemm.ee
          link
          fedilink
          arrow-up
          2
          ·
          11 hours ago

          There’s a difference between saying “the secure enclave holds the biometric data securely and locally in a verifiable way with no mechanism to retrieve the actual data” and “trust them, don’t worry about it”

      • QuazarOmega@lemy.lol
        link
        fedilink
        arrow-up
        1
        arrow-down
        1
        ·
        1 day ago

        That’s different, it’s technically possible not to comply with that statement because the location data is sent and stored, it takes just not deleting it to violate that, it just evaluates to a pinky promise that has to be verified by inspecting their systems.
        This, on the other hand, is a technically verifiable claim, the code is open and it all runs locally on the same machine, the TEE will give the green light and that’s how apps will accept your biometric verification, the only thing that might be suspicious is with the implementation of the TEE, I don’t know if every manufacturer keeps the data it gets on the device or secretly communicates outside, this unknown is also a good reason to use a Google Pixel device if you care about that

        Google Pixel phones use a TEE OS called Trusty which is open source, unlike many other phones.

        From the Privacy Guides Mobile phones page

  • hddsx@lemmy.ca
    link
    fedilink
    arrow-up
    24
    arrow-down
    2
    ·
    2 days ago

    We think someone has been using your fingerprint. Have you considered submitting your DNA so we know it’s you?

    • MeThisGuy@feddit.nl
      link
      fedilink
      arrow-up
      3
      ·
      edit-2
      20 hours ago

      no need. just get arrested for (not convicted of) a felony and they will do that part for you

      or have some idiot family member who thought 23 & me was a novel and fun idea

  • Z3k3@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    1
    ·
    2 days ago

    I honestly don’t understand why any company is still trying to store my payment info with the number of leaks that happens

    Oh yeh drunk purchases

  • Stefan@lemmy.ml
    link
    fedilink
    arrow-up
    6
    arrow-down
    1
    ·
    2 days ago

    Temporary workaround — close Play store, turn off data & wifi, open Play store and then connect to network.

    Don’t give anything to Google.

    • ☂️-@lemmy.ml
      link
      fedilink
      arrow-up
      15
      arrow-down
      2
      ·
      edit-2
      2 days ago

      Permanent workaround: Aurora Store and F-Droid.

      Disable the Play Store.

    • Umbrias@beehaw.org
      link
      fedilink
      arrow-up
      4
      ·
      2 days ago

      if you browse the play store on a web browser you can open app links directly to bypass this. for now.

  • redlemace@lemmy.world
    link
    fedilink
    arrow-up
    10
    arrow-down
    7
    ·
    2 days ago

    but…but… It’s sooooooo easy and convenient for you and it’s safe, we pinky-promise!

  • catloaf@lemm.ee
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 days ago

    I don’t have it turned on and I’ve never seen this screen. How did you get there?