this post was submitted on 20 Aug 2023
652 points (96.4% liked)
Asklemmy
43948 readers
1144 users here now
A loosely moderated place to ask open-ended questions
Search asklemmy ๐
If your post meets the following criteria, it's welcome here!
- Open-ended question
- Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
- Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
- Not ad nauseam inducing: please make sure it is a question that would be new to most members
- An actual topic of discussion
Looking for support?
Looking for a community?
- Lemmyverse: community search
- sub.rehab: maps old subreddits to fediverse options, marks official as such
- !lemmy411@lemmy.ca: a community for finding communities
~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Most security on consumer hardware
Let's take android for example. There are legitimate security implementations like SELinux, full disk encryption but something like samsung's knox is useless outside of enterprise use and kills OS level modifications
The only reason I haven't rooted my phone is because of the Knox circuit. Rooting it trips the circuit, and it can't be reset. Once the circuit is tripped, my bank won't ever recognize my phone again, because it's "insecure".
Knox is used by Samsung own functions. Your bank app only does a root check. Which can easily be hidden with Magisk. If you trip Knox, you lose the Samsung exclusive security features baked into the OS. That's it. Google Pay and USAA both complained about root access and refused to work with Magisk hiding off. With it on, they function as normal.
Integration into Knox requires enterprise device management and a custom app.
Huh. I'll have to give it a try then. My prior phone, which had been rooted, wouldn't work with my bank, and my bank claimed it was due to the Knox circuit.
My understanding was that knox is only used for samsung pay, secure folder and similar samsung exclusive crap
I haven't owned a recent scamsus tho so idk