Hacker Newsnew | past | comments | ask | show | jobs | submit | UnreachableCode's commentslogin

>Contactless payments already work on GrapheneOS via Curve Pay

Are you sure about this? It was my understanding that NFC passes for gyms and stuff worked, but that if you want to pay for something with Google or Curve, you're shit outta luck


It depends on how the payment app works. Android provides a native Contactless Payments API which can be used by any wallet app. This is local to the device and works flawlessly on GrapheneOS as well. You can set your preferred wallet app for this feature under NFC settings.

Google Pay/Wallet is one of the wallet apps using this API. If you use Google Pay, you set it as your preferred wallet app, and Google will act as an intermediary between you and whatever payment method you've configured in Google Wallet. It's this Google Pay app that's broken.

Banking, payment and wallet apps that implement the Contactless Payments API work normally as they should. But, some banks have lazy developers, and just hyperlink you to add your card to Google Wallet instead.


I paid for my lunch with Curve Pay on GrapheneOS today.


The issue is banks being lazy and using google wallet instead of their own app. My bank used to allow me to use NFC to pay directly, then after merger with another bank the only option that was left was using google wallet.


> Are you sure about this? It was my understanding that NFC passes for gyms and stuff worked

This is only true for Google Wallet. It can be used as a normal wallet app for stuff like plane tickets, etc., but Google Pay requires the OS to be specifically whitelisted by Google. This is an incredibly anti-competitive move aimed at supporting Google's monopoly by deliberately disabling functionality on alternative (including much more secure) operating systems like GrapheneOS under the guise of security.

Curve Pay works fine on GrapheneOS, there's even an article by a community member talking about it: https://shkspr.mobi/blog/2025/06/contactless-payments-with-g...


Is Curve Pay going to sell my data to someone?


Definitely wouldn't be unheard of in the Fintech industry. But I don't know, because I don't use the service. My bank thankfully offers their own implementation of NFC payments within their own app, so I don't need to rely on any third-party services. Many banks in Europe actually do this. Here's a German article about Google-free mobile payments on GrapheneOS: https://www.kuketz-blog.de/nfc-datenschutzfreundlich-bezahle...


What about some form of external auditing down the line to add legitimacy to these honeypot claims? Maybe open sourcing the technology as well?


We’re working on an audit now. There’s an RFC on Reddit looking for input: https://www.reddit.com/r/CapeCellular/s/zTn7HQ0emo


What can be open sourced (GrapheneOS) already is, and the remainder is business logic that they have described for the MVNO that is likely carrier specific and tied to the oddball MVNO platform they are using.

Very hard to make the latter usable by anyone else IMO.


> What's the alternative? I don't know.

Real world connection and a strong foundation of core friends, perhaps?


My first step for this was joining a makerspace. Now I can complain about everything with my fellow nerds.


We still need a way to meet people with similar niche interests. This isn't served well IRL.


How? If you like playing Warhammer, go to Games Workshop. If you like climbing, go to a bouldering gym. I appreciate that there are probably some counter examples. But part of this, in my mind, needless demand for tech spaces to meet other hobbyists is catering to an over-reliance on technology. Yes, there are reasons you might want to screen people or groups - for instance, women looking for safety. But surely the existing tools for such a problem are good enough? Instagram and Facebook groups? Or Reddit or Hacker News? The problem is people become chronically attached to these services and convince themselves they need them to function socially. Which is complete myth.


Not everyone lives close to a major city hub.

Also, depending on your interests, you may not want to meet people IRL right away. Talking to anonymous strangers is often a good way to learn more about sensitive subjects without taking too much risk.

But yeah, I'm with you, we rely too much on these services at the moment.


Shipping from whom? I haven't used Amazon in years. Entertainment - Blurays and CDs! Transport, who are we talking here? Unless you're giving Tesla your dollars, are you really supporting the regime? Forgive my ignorance here.


> Shipping from whom? I haven't used Amazon in years.

But you’re still buying stuff. So either using a different shipping service or spending the money on diy shipping aka drive to store.

It’s not about the specific example though. Merely pointing out that removing a subscription doesn’t inherently remove the need/want it is fulfilling and associated spending. You can’t move the overall market down if you’re just shifting economic activity between players in it.

You’d need to get people to actually spend less and forgo the needs/wants entirely. Which is a tough ask and I don’t think is particularly viable


No, because most banking apps call upon the Google Play Integrity API, which GrapheneOS doesn't (or can't?) use. There's a decent list kicking around of which ones work (Monzo, for instance).

https://privsec.dev/posts/android/banking-applications-compa...


It's more common in banking apps than in other apps to implement Play Integrity but it's cetainly not "most banks" that do it. It's still only a small subset. Sucks of course if it's your bank.


Maybe not in your region, but here in the UK I think the majority of high street banks do not function on GrapheneOS.


While on the subject, does anybody know any good ad-blocking solutions for mobile phones?

So far I have experimented with NetShield from ProtonVPN and https://nextdns.io/ with varying results. There are also features baked into certain browsers like the cookie blocker with DuckDuckGo which works extremely well, and UnTrap for Safari on iOS which allows for heavy Youtube web customisation.

Also, shout out to Playlet on Roku. A privacy focused YouTube proxy for the TV which blocks ads and even can identify sponsors, filler and credit segments and allow you to skip these.

I am not involved in any of these projects, I just think they're cool.


https://blokada.org/

Blokada 5 is free. It blocks ads and trackers system wide. It works in all games and apps I checked for the last 4-5 years.

Used to work with YouTube as well, but not any more. I use New Pipe for that.

You're experience may vary depending on block lists you subscribe to, but vanilla set up is already quite good.


Firefox on Android has UBlock Origin available. But that covers the browser only. I guess AdGuard and VPN might help here?


I am using Brave and YouTube Revanced on my android and I completely forgot what ads look like


Firefox Focus has an extension build in that works with Safari


Adguard works great. UBlock on Firefox also does the job.


What's wrong with Roku? They have a few ads here and there but I've always found the interface to be super slick. And they aren't Google, so not as harmful to share my data with? (a big assumption, I know)


Roku has been bad in a number of ways, but here's one:

https://techcrunch.com/2024/03/05/roku-disables-tvs-and-stre...


I wouldn't assume Roku is better to share your data with. Google uses your data to feed their own algorithms instead of just straight up selling it. Their incentive is to keep the data internal so they alone can extract value from it.

Roku just directly sells it to anyone who wants it: https://advertising.roku.com/learn/resources/roku-unveils-da...


"Few ads here and there" is always worse than "no ads".


Hey bro, I saw your reply to my comment elsewhere asking if Revolut works on GrapheneOS. But I can't reply to it because the thread is locked.

Anyway, it does. https://privsec.dev/posts/android/banking-applications-compa...


Not sure if it's been missed or I'm an anomaly. But as a senior level software engineer who graduated in the 10s, with a wealth of experience, I too (like the juniors who get reported on) am struggling to get a new job. Either I'm just not as good as I think I am, or the barrier is ridiculously high for the next type of job I'm trying to achieve (high paying, product focused developer).


LinkedIn bothers me the least, even though it definitely has some of the highest level of cringe content. It's still a good tool to interact with recruiters, look at companies and reach out to their employees. The trick is blocking the feed with a browser extension.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: