Tell HN: PayPal Blocks GrapheneOS

It seems like the PayPal app now refuses to run on GrapheneOS. I don't know if it's only because I have enabled the PayPal card for contacless NFC payments, but when opening the app it crashes with the following exception: com.paypal.oslo.app.rasp.RootDetectionSecurityException: Security policy violation: s=root

78 points | by leumon 2 hours ago

19 comments

  • axegon_ 28 minutes ago
    This is arguably the most irritating thing with just about every largecorp developer: "os that hasn't been updated in 6 years? Sure boss!". Os that is built specifically around security and privacy with daily updates: "No, you can't do that". Annoying - yes. Safe way to make sure I will stop being your customer - also YES!
  • onion2k 11 minutes ago
    Has PayPal blocked GrapheneOS, or have they blocked every OS they're unable to verify and done a poor job of implementing their checks?

    Hanlon's Razor is a useful tool. https://en.wikipedia.org/wiki/Hanlon%27s_razor

  • zerof1l 1 hour ago
    I see this happen from time to time. Lately, almost all of the apps work fine on GrapheneOS. The best strategy is to keep writing the business once every two or so weeks that you can’t log in to and use the app. Don’t go too technical at first, because most of the time, the moment they hear things like “rooted” or “unofficial,” they just say your phone is the issue. To date, I was able to convince, or at least contribute to, making three apps work on GOS.
  • Kwpolska 16 minutes ago
    Why would anyone still use PayPal after so many cases of accounts being banned and funds being frozen for no reason, and all the other terrible stuff they've done?
    • rciorba 8 minutes ago
      Critical mass? I had to start using it after moving to Germany, because everyone else expects you to use it.

      One of the ladies at daycare is leaving? Here's a paypal link to chip in for a good-bye present.

      Split a take-out order with a German friend, but he paid? Here's his paypal to send him your share.

      It's just assumed that everyone has paypal over here...

    • DemetriousJones 6 minutes ago
      I simply use it as an intermediary between my bank and any website I don't fully trust
  • bit1993 20 minutes ago
    I was always suspicious of GrapheneOS, thought it was too good to be true. But this makes me reconsider and want to install GrapheneOS.
    • kissiel 7 minutes ago
      I think if paypal not working on GOS makes you not use it, then GOS is definitely not for you...
      • WCSTombs 4 minutes ago
        They're saying the opposite, no?
    • nicman23 7 minutes ago
      it is great and you know that because cops are pissy about it
  • ThomasGlanzmann 11 minutes ago
    I'm on Debian Testing sometimes on amd64 and sometimes on m1. Paypal also doesn't like me. Than I have two options: I use a Windows VM to do the payment or I use another payment method. Most of the time I use the other payment method.
  • gnoll_of_gozag 28 minutes ago
    Can it still run in browser like it would on a regular pc?
  • aabdelhafez 1 hour ago
    Switched to Wero and haven't looked back.

    https://wero-wallet.eu

    • unpopularopp 41 minutes ago
      Unfortunately peasants like us who don't live in the 5 countries where it's available still can't look back
    • muvlon 17 minutes ago
      You need to use your bank's app for Wero, and many EU banks' apps refuse to run on GrapheneOS for the same reasons as PayPal. This is sadly not a clear win for Wero.
    • therealmarv 23 minutes ago
      wait for it... I can see a future were every wallet, payment etc. app will block devices which are on custom ROMs and do not pass strong hardware integrity with blessing from Google.

      I've read once that there are paid app testing labs which test if an app has root and custom ROM detection and when they don't have that it's a minus point on the report.

    • oniony 41 minutes ago
      The website is pages and pages of blankness for me on Firefox mobile.
  • Grisu_FTP 11 minutes ago
    I still remember when my bank wanted me to run Android 9 instead of my Android 15 rom (without root) on my Samsung S8 because "muh security!!"

    Funnily enough, the only way to hide those detections was to Root my phone... And i still remember when i had an appointment there, they wanted to see something in my Bank app, i opened it (and i assume it had an update since i then last used it) and a big "THIS DEVICE IS NOT SUPPORTED. ROOT IS NOT SUPPORTED" poped up

    But was as simple as readding the bank app to my root hiders.

    but still, i hate this security theater

  • sdcfgy 26 minutes ago
    I'm starting to see these restrictions as a deterrent for using the products in question. My GOS handset is slowly fizzling away into a dumbphone with Firefox, organic maps and k9. And you know what, I am starting like it.
  • tombardier 16 minutes ago
    Still works on my up to date pixel 9 xl. I haven't enabled NFC payments though
  • nunobrito 19 minutes ago
    Paypal doesn't work on LineageOS since a long time, even though the connections of that dubious Graphene distro with the US government are always in the horizon it is just natural that paypal doesn't work there now.

    Otherwise it would just continue to raise suspicious that Graphene is favored by governments and big tech.

  • leumon 1 hour ago
    Update: it seems to work when disabling "secure app spawning" (for now)
    • zvmaz 45 minutes ago
      So it's not PayPal blocking GrapheneOS?
  • freakynit 1 hour ago
    "RootDetectionSecurityException" .. there's your answer ... it doesnt't want to run on "rooted" devices.
    • tensegrist 26 minutes ago
      iirc grapheneos can't be rooted unless you do your own build
    • leumon 1 hour ago
      Well I haven't rooted my device. It's just normal grapheneos
      • therealmarv 20 minutes ago
        These days, root is mostly flagged via indirect indicators rather than detecting the root binary itself. For instance, detecting custom ROMs is a common clue. Does anyone remember the suhide days? ;)
      • freakynit 1 hour ago
        [dead]
    • windowliker 35 minutes ago
      Isn't it more likely to be saying that the app is running with root privileges?
  • hd4 42 minutes ago
    did you re-lock the bootloader?
  • gib444 1 hour ago
    With or without Google Play Services running?
    • leumon 1 hour ago
      With. But disabling "Secure app spawning" seems to fix it for now.
  • fenestella 23 minutes ago
    [dead]