Skip to content

2. b. background info & community ervaringen

background info

Veel apps hebben Google Services Framework (GSF) nodig, waarvoor /e/OS als vervanger MicroG gebruikt.
LineageOS weigert om MicroG te installeren , maar je kan dat zelf als extra stap doen.

De meeste software die afhankelijk is van Google Services Framework, gebruiken GSF alleen voor Google Cloud Messaging ,
i.e. push berichten ( ? naar Android apparaten, naar google servers , in beide richtingen ?) .
Dat is iets dat microG zonder problemen doet.

De problemen met apps ontstaan meestal door het toestel te rooten, wat los staat van LineageOS
Die issues kan je soms oplossen door Magisk te verbergen, maar dat is niet voor alle apps een oplossing.

community ervaringen

  • ITSME op LineageOS : blijft mekkeren over root.
  • DigiD (= NL versie van eID ? ) getest & werkt op LineageOS + microG + Aurora Store + DigiD (dus vrij van non-foss Google code)

gl:: payconiq on LineageOS :

https://www.reddit.com/r/belgium/comments/set8f0/lineageos_magisk_payconiq_or_keytrade_app_not/
- Payconiq was working on my phone, using Magisk 23 and Magisk hide.
Magisk has been updated to 24.1, Magisk hide is gone and I have to use Magisk Zygisk… And Payconiq doesn’t work anymore.
- The app “Keytrade”, it never worked, with any version of Magisk.
it seems that they find a way to detect if a phone has a custom rom pretty nicely.
- ItsMe, the latest version doesn’t work because the device is rooted, even when hiding it in Magisk, there’s no way to bypass the check.

After installing the safetynet fix (https://github.com/kdrag0n/safetynet-fix), Payconiq works
but not Keytrade & ItsMe app doesn’t work at all,
you need to install an older version and disable automatic updates !

I also wrote to ItsMe in order to ask them to reconsider their technical choice.

started a Clean setup on my Galaxy S7 (SM-G930F)
LineageOS 19 + GApps 12 + Magisk + Zygisk + Universal Safetynet Fix (Also did a “Hide Magisk”)
works:
- Argenta Banking App
- Fortis Banking App
- Paypal
What i can’t get to work:
- Payconiq by Bancontact: “Custom ROM blablabla something whatever”
- Itsme identification App: “Rooted device detected”

Working op /e/
- Belfius Mobile Banking (except barcode scanning)
- Argenta Mobile App

you can use Aurora store
/e/ not 100% legal to ship the store as a default installer:
“We cannot ship Aurora as default installer. It would be illegal because it infringes Play Store Terms Of Services.”
However it is fine for us end-users to use it.
I use it to install a bank app then uninstall the store.(prefer Fdroid)

Itsme is not gonna work I’m afraid
Hum, i’m belgian user too and with my sansung galaxy A3 2016, i have too version 0.10-p with fix for bootloop with wifi :DDD
After, on banking apps, i have installed and used :
- BNP
- Itsme
- Revolut
these apps working very well for me (i don’t test/use barcode scan and bancontact)
For itsme, I have many issues linked to mobile operator or restriction by istme :
app blocked for move on second validation (via sms) : i use my personnal dns on /e/ (FR side) and itsme don’t like that (change temporally by FAI DNS)
no sms receive for second validation when create/validate account => base (my old operator) “block” sms by itsme
now, all are ok for me

security evaluations

Reasons why LineageOS is deemed less safe than a factory ROM, despite the outdatedness of the factory ROM.

LineageOS requires unlocking the boot loader, i.e. any malicious software could bootstrap the OS,
making it invisible to the OS that there’s essentially a wrapper between the OS and the hardware,
intercepting any traffic or requests coming from the OS to the hardware (e.g. wifi adapter, bluetooth adapter, etc)

But software exploits (that aren’t fixed through updates) are also ways to gain access to root level functionality.

Apps involving money all much prefer to deal with the 99,9% tech illiterate customers who use their services in a very small number of standardized, predictable ways, rather than deal with 100% of customers. Using rooted or jailbroken devices and doing everything everyone else is doing, is a phantasy.
A lot of these “Why doesn’t company X allow me to use their services with my super-sophisticated setup?” posts are furthermore tech nerd humblebrags that reek of entitlement. “Excuse me, I’m smart enough to use a custom rom, you know. You companies should be glad to have smart people like me as customers.” No, they shouldn’t.

Pick your poison: Google’s panopticon, Apple’s bloated mess where important security vulnerabilities don’t get patched for months, or manage your finances with your physical card, disconnected physical token and the browser. You can downvote this comment because you don’t like this answer, but it’s true just the same. I used Cyanogen around 2013 and it’s a tech nerd illusion that these things can be made to do everything a non-custom rom is allowed to do, even with hours of tinkering every week.