Capital One Android Banking App Blocks Rooted Phones!

IceColdRum

[rant]I've just downloaded the Capital One Banking App from the Android Market only to find out it blocks rooted phones:mad:

I'm thoroughly unimpressed and will be emailing them to ask why they see fit to block rootd phones yet every other bank who has an app couldn't care less! no doubt I'll get the usual !!!! and bull story of "security reasons"[/rant]

flyingscotno1

IceColdRum wrote: »

[rant]I've just downloaded the Capital One Banking App from the Android Market only to find out it blocks rooted phones:mad:

I'm thoroughly unimpressed and will be emailing them to ask why they see fit to block rootd phones yet every other bank who has an app couldn't care less! no doubt I'll get the usual !!!! and bull story of "security reasons"[/rant]

Are you sure- seems a US based app that blocks UK users rather than rooted phones? Incompatible with all my devices.

IceColdRum

flyingscotno1 wrote: »

Are you sure- seems a US based app that blocks UK users rather than rooted phones? Incompatible with all my devices.

silo24

Actually sounds very sensible to me....

A rooted phone could potentially allow bypassing of the endpoint security that is probably resident in the app itself, removing one layer of the end to end security solution that they employ.

I suspect it's more a case of the others not being aware or employing different security solutions, i.e. not including endpoint security.

'Rooting' a handset does much more than just allow you to mess around with the apps and software/os on the device. It also gives you direct access from the application layer down towards the transport, network and data link layer of the device, allowing you to do things on the mobile network that the specifications do not allow for many a very good reason.

silo24

/\ Suddenly my previous post seems less relevant....

IceColdRum

Scratch that I've just checked and it's not because I'm in the UK as it gives me a British number to ring... see screenshot below:

custardy

IceColdRum wrote: »

[rant]I've just downloaded the Capital One Banking App from the Android Market only to find out it blocks rooted phones:mad:

I'm thoroughly unimpressed and will be emailing them to ask why they see fit to block rootd phones yet every other bank who has an app couldn't care less! no doubt I'll get the usual !!!! and bull story of "security reasons"[/rant]

you may think so
however the bank has a responsibility to protect those accessing accounts
sounds like a good move to me
you will still be able to access via browser I assume?

IceColdRum

custardy wrote: »

you may think so
however the bank has a responsibility to protect those accessing accounts
sounds like a good move to me
you will still be able to access via browser I assume?

I fail to see how that would be any less unsafe? any risks involved with using a rooted phone would be just as prevalent in the browser as with their own app surely?:(

Notmyrealname

IceColdRum wrote: »

I fail to see how that would be any less unsafe? any risks involved with using a rooted phone would be just as prevalent in the browser as with their own app surely?:(

No because when you root the phone you bypass one of the most important security locks. You are completely replacing the operating system of the phone with one knocked up by an unknown party. It is easily possible for someone to plant malware in a ROM image and also as the phone has been rooted, it makes it much easier for a malicious site to install malware on the phone.

gjchester

IceColdRum wrote: »

I fail to see how that would be any less unsafe? any risks involved with using a rooted phone would be just as prevalent in the browser as with their own app surely?:(

Your probably right, however Capital one don't see it that way.

If they have written the App so it won't work on rooted phones then thats a policy they have, if you don't like it revert your phone to stock, or get another card provider.

MikeWhite

Notmyrealname wrote: »

You are completely replacing the operating system of the phone with one knocked up by an unknown party.

Sometimes, maybe, but there are lots of phones and methods that do nothing of the sort.