5 ms·

> No account necessary and no private american conglomerates can delete that account. Officially you need a Google or Apple account to download a wero capable

by haagch 2mo ago

> No account necessary and no private american conglomerates can delete that account. Officially you need a Google or Apple account to download a wero capable app from their stores, and Google and Apple can always delete all wero capable apps from their stores like for example with Russian sanctioned banks. Some banking apps work on non - google play controlled android smartphones, but always only accidentally. Some banks like for example Consorbank already crack down on "sideloading" their app at all: https://www.reddit.com/r/Consorsbank/comments/1p909w1/comment/nrv0ni6/ https://www.reddit.com/r/Consorsbank/comments/1p909w1/commen...

anticrymactic 2mo ago
While researching Wero initially, I was confused too that no APK is offered. Maybe we can change that.grbn
- deleted 2mo ago
  [deleted]
microtonal 2mo ago
If Wero is going to be similar to iDEAL, which it is based on, the payment flow will be through your bank's app. Heck, even the Wero app description says so: The Wero app is available only for account holders from the German bank Postbank and the French bank La Banque Postale. Are you a customer of another Wero-enabled bank? If so, you can easily use Wero within your banking app. https://play.google.com/store/apps/details?id=eu.epicompany.wero.wallet https://play.google.com/store/apps/details?id=eu.epicompany.... I have seen quite some people downloading their banking apps through the Aurora store (admittedly, it's a frontend for the Play Store, but you don't need an account or the app). Or you can use something like APKMirror and verify that they have the correct signing keys. Of course, if they need Play Services or Play Integrity basic, then you need sandboxed Google Play or microG. If your bank does remote attestation through Play Integrity, then it is game over, but it is worth contacting your bank. E.g. some banks have added the GrapheneOS signing keys and added support for AOSP remote attestation.
- sebtron 2mo ago
  I can pay with iDEAL without interacting with a smartphone, using only my laptop and a physical 2FA device provided by my bank. Do you know if this will be possible with Wero?
  - microtonal 2mo ago
    I am not 100% sure, but I think PSD3 will require that authentication methods without a smartphone are provided: https://ec.europa.eu/commission/presscorner/detail/fr/qanda_23_3544 https://ec.europa.eu/commission/presscorner/detail/fr/qanda_... Require payment services providers to ensure that all users can benefit from methods to perform SCA which are adapted to their needs and situations and, in particular, that those methods do not depend on one single technology, device or mechanism, for instance on the possession of a smartphone.
  - Muromec 2mo ago
    It's up to your bank actually. Banks (generally) don't want to pay for your hardware key so you need to do a special dance to trigger their compliance bound neural pathways to send you one. But then the true bliss will arrive the next year with eidas 3.0 or whatever it is called
    - Freak_NL 2mo ago
      In the Netherlands this boils down to the 'system banks' (the big ones like ING, ABN AMRO, Rabobank, etc.) which grudgingly offer hardware devices for people who won't or can't use a smartphone, and the neobanks (like Revolut, Knab, and Bunq) which make an Android or IOS smartphone a hard requirement.
      - weberer 2mo ago
        With Nordea, you get a code book full of one-time codes.
      - Vinnl 2mo ago
        ASN Bank has a website that allows you to set a browser-linked code once, after verifying both your email address and phone number. You can then use that browser+code as the 2FA device. It's pretty neat.
toomuchtodo 2mo ago
It’s fine to decouple from US payment and financial infra today and punt on decoupling from US big tech in the future. These changes take time and effort at scale, so it’s about being directionally accurate, not doing all the changes all at once. “You eat an elephant one bite at a time.” Europe is eating the financial infra bites right now. There are other bites to be taken over the next several years. Similar to Airbus moving critical apps from AWS to France’s Scaleway. Flexing the muscle needed to do the rest, and starting with the most important. https://hn.algolia.com/?dateRange=all&page=0&prefix=false&query=airbus%20scaleway&sort=byDate&type=story https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
- Muromec 2mo ago
  I heard a loud and solid "fuck US" from the people forming the technical opinion on this matter. The way selection function for the technical parties in this conversation is going makes it double the fun.
Phelinofist 2mo ago
But you can use Wero also from your good old desktop PC, right? Sure, paying in a restaurant with Wero for example might need this, but I think this is a really, really great first step in the right direction

by haagch 2mo ago

anticrymactic 2mo ago

While researching Wero initially, I was confused too that no APK is offered. Maybe we can change that.grbn

deleted 2mo ago
[deleted]

microtonal 2mo ago

If Wero is going to be similar to iDEAL, which it is based on, the payment flow will be through your bank's app. Heck, even the Wero app description says so: The Wero app is available only for account holders from the German bank Postbank and the French bank La Banque Postale. Are you a customer of another Wero-enabled bank? If so, you can easily use Wero within your banking app. https://play.google.com/store/apps/details?id=eu.epicompany.wero.wallet https://play.google.com/store/apps/details?id=eu.epicompany.... I have seen quite some people downloading their banking apps through the Aurora store (admittedly, it's a frontend for the Play Store, but you don't need an account or the app). Or you can use something like APKMirror and verify that they have the correct signing keys. Of course, if they need Play Services or Play Integrity basic, then you need sandboxed Google Play or microG. If your bank does remote attestation through Play Integrity, then it is game over, but it is worth contacting your bank. E.g. some banks have added the GrapheneOS signing keys and added support for AOSP remote attestation.

sebtron 2mo ago
I can pay with iDEAL without interacting with a smartphone, using only my laptop and a physical 2FA device provided by my bank. Do you know if this will be possible with Wero?
- microtonal 2mo ago
  I am not 100% sure, but I think PSD3 will require that authentication methods without a smartphone are provided: https://ec.europa.eu/commission/presscorner/detail/fr/qanda_23_3544 https://ec.europa.eu/commission/presscorner/detail/fr/qanda_... Require payment services providers to ensure that all users can benefit from methods to perform SCA which are adapted to their needs and situations and, in particular, that those methods do not depend on one single technology, device or mechanism, for instance on the possession of a smartphone.
- Muromec 2mo ago
  It's up to your bank actually. Banks (generally) don't want to pay for your hardware key so you need to do a special dance to trigger their compliance bound neural pathways to send you one. But then the true bliss will arrive the next year with eidas 3.0 or whatever it is called
  - Freak_NL 2mo ago
    In the Netherlands this boils down to the 'system banks' (the big ones like ING, ABN AMRO, Rabobank, etc.) which grudgingly offer hardware devices for people who won't or can't use a smartphone, and the neobanks (like Revolut, Knab, and Bunq) which make an Android or IOS smartphone a hard requirement.
    - weberer 2mo ago
      With Nordea, you get a code book full of one-time codes.
    - Vinnl 2mo ago
      ASN Bank has a website that allows you to set a browser-linked code once, after verifying both your email address and phone number. You can then use that browser+code as the 2FA device. It's pretty neat.

toomuchtodo 2mo ago

It’s fine to decouple from US payment and financial infra today and punt on decoupling from US big tech in the future. These changes take time and effort at scale, so it’s about being directionally accurate, not doing all the changes all at once. “You eat an elephant one bite at a time.” Europe is eating the financial infra bites right now. There are other bites to be taken over the next several years. Similar to Airbus moving critical apps from AWS to France’s Scaleway. Flexing the muscle needed to do the rest, and starting with the most important. https://hn.algolia.com/?dateRange=all&page=0&prefix=false&query=airbus%20scaleway&sort=byDate&type=story https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

Muromec 2mo ago
I heard a loud and solid "fuck US" from the people forming the technical opinion on this matter. The way selection function for the technical parties in this conversation is going makes it double the fun.

Phelinofist 2mo ago

But you can use Wero also from your good old desktop PC, right? Sure, paying in a restaurant with Wero for example might need this, but I think this is a really, really great first step in the right direction