Lindroid

"needs root and patches to AOSP". So there go the banking apps mentioned elsewhere and you can just use postmarketOS.

Still cool though!

I have a rooted phone and when you hide root (using Magisk app) all banking apps work just fine?

Some, not all. Last time I checked magisk wasn't able to fake safetynet hardwareattestation

Yup. I gave up on trying to get Google wallet / Android pay to work on my lineage device. I got it working sometimes but it broke after update and just wasn't reliable enough to keep trying when paying for stuff. I'm not really sure whom they're protecting with this stuff -- the credit card processing companies, maybe?

> I'm not really sure whom they're protecting with this stuff -- the credit card processing companies, maybe?

(small nit: does "whom" even go there?)

They're protecting the TEE because they do not want third parties to be able to automate Google Pay through modified software. This isn't necessarily just about normal end users but more like smartphone farms.

>They're protecting the TEE

Why do Transesophageal Echocardiograms[0] need protecting, and from whom do such diagnostics require protection?

I expect I'm missing something, but a web search for 'TEE' only returns that diagnostic test.[1]

[0] https://www.webmd.com/heart-disease/atrial-fibrillation/tran...

[1] Moral: Don't assume everyone knows what a particular acronym means. Just because it's in your head doesn't mean everyone else knows what you mean.[2] E.g., if I say 'JRE' I mean 'Java Runtime Environment' and not 'Joe Rogan Experience'.

[2] According to Piaget[3], people are able to identify that others don't know what's in their heads sometime between ages two and seven.

[3] https://psychcentral.com/health/piaget-stages-of-development...

Sorry, TEE stands for Trusted Execution Environment. It's where stuff like DRM executes with access to secrets that the HLOS (Android) can't tamper with. On ARM SoCs the TEE is usually provided as part of TrustZone. No need to patronize.