alt Hacker News> But banks specifically are among the most obnoxious shitters when it comes to "you aren't allowed to do things except the way we want it".
> Over and over again you have to contend with bullshit like 120MB APKs full of obfuscated code, root detection, custom firmware detection, "non-mainstream device" detection, VPN detection, and even more obscure spyware-flavored functionality.
Ok, the question is then: exactly why do they go through that much trouble? Because that's a lot of trouble.
Replies
ChocolateGod • today at 5:11 PM
Because the bank takes liability if money is taken from your account without your permission.
MikhailTal • today at 3:21 PM
in order to minimize chances of someone stealing 6 billion out of them that's why
Same reason why media companies spend millions on DRM that delays the pirates by 0 days. Checklist-driven "security", CYA and out of touch executives calling the shots.
Did the higher ups want more effort to be spent on "security"? Yes. Is there any way to actually add "more security" to the setup? No. Could not doing anything in face of direct orders from the above be bad for your career? Yes. So random bullshit go.
It's not like the bank client developers are even implementing any of it themselves. They buy someone else's middleware and hopefully don't misconfigure it when they cram it into their builds.