←back to thread

Technical Analysis – Improper Use of Private iOS APIs in Vietnamese Banking Apps

(blog.verichains.io)
88 points quyleanh | 2 comments | 28 Mar 25 07:04 UTC | HN request time: 0.612s | source
Show context
a012 ◴[31 Mar 25 15:38 UTC] No.43536286[source]▶
The banking apps exploited non-public APIs to provide “protection” for users, it doesn’t sound right
replies(1): >>43536302 #
1. alephnerd ◴[31 Mar 25 15:40 UTC] No.43536302[source]▶
It's due to regulatory mandates around device fingerprinting and biometrics.

VN is in the process of rolling out a China style biometrics validation system.

replies(1): >>43537874 #
2. Zak ◴[31 Mar 25 18:04 UTC] No.43537874[source]▶
A quick web search of the list of apps it's checking for suggests it's jailbreak-related, not general fingerprinting. Only banks get to escape Apple's restrictions, not end-users.