PrivSec-dev/banking-apps-compat-report

GoTyme Bank

Closed this issue · 2 comments

insectcatcher commented

Is there an existing issue for this?

  • I have searched the existing issues

App name

GoTyme Bank

Link to app

https://play.google.com/store/apps/details?id=ph.com.gotyme

App version

1.36.0

Country of the app

Philippines

Build Number

2024092900

Device list

Pixel 6a

Profile app tested in

Owner profile, Secondary profile(s)

Google Play installed?

Installed

Where did you install this app from?

Google Play Store

Google Play services Network permission revoked?

  • Revoked
  • Not revoked
  • I did not have Google Play services installed

Native code debugging

  • Allowed
  • Blocked

Exploit protection compatibility mode

  • Enabled
  • Disabled

Memory tagging extension (MTE)

  • Enabled
  • Disabled
  • N/A

Dynamic code loading via memory

  • Restricted
  • Allowed

Dynamic code loading via storage

  • Restricted
  • Allowed

Stock OS compatibility

  • Works
  • Does not work
  • Not tested

NFC payments

  • Works
  • Works but requires another service
  • Does not work
  • N/A (Not supported by app)
  • Not tested

Description of the app's functionality

The app never worked, even my first time ever installing that app. I have tried every setting toggle from GrapheneOS to prevent this error from appearing, but with no success. After opening the app, the black screen shows up, then either going to the home screen, going to the recent apps page, or waiting a bit longer from the black screen, it shows the error message from the app:

" This app cannot run because the environment is not secure and your data may be at risk. "

And there's an OK button with QR code under that button.

Screenshot_20241003-124914

Are there any extra notes you think users should know about?

No response

ADB logcat of the app if necessary

No response

insectcatcher commented

Crash logs :
type: crash
osVersion: google/bluejay/bluejay:14/AP2A.240905.003.F1/2024092900:user/release-keys
package: ph.com.gotyme:1310
process: ph.com.gotyme
processUptime: 118 + 336 ms
installer: com.android.vending

java.lang.RuntimeException: Unable to create application com.tyme.digital.ProtectedMyApplication: com.tyme.digital.MessageGuardException_RFA6IDc4MyAxMjY4MTI3NTA2NzkgWzIwMjQwNzI2LTIwMjQwOTI2MDkyNyBiNzpiNyAzNCBnb29nbGUvYmx1ZWpheS9ibHVlamF5OjE0L0FQMkEuMjQwOTA1LjAwMy5GMS8yMDI0MDkyOTAwOnVzZXIvcmVsZWFzZS1rZXlzIGJsb2NrZWRdIDAxOTI1NjI5LTQ5MTQtNDRiNi1iYzQ4LTEwMWNlZDQzMGM5Mw: DP: 783 126812750679
at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7434)
at android.app.ActivityThread.-$$Nest$mhandleBindApplication(Unknown Source:0)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2386)
at android.os.Handler.dispatchMessage(Handler.java:107)
at android.os.Looper.loopOnce(Looper.java:232)
at android.os.Looper.loop(Looper.java:317)
at android.app.ActivityThread.main(ActivityThread.java:8623)
at java.lang.reflect.Method.invoke(Native Method)
at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:580)
at com.android.internal.os.ExecInit.main(ExecInit.java:50)
at com.android.internal.os.RuntimeInit.nativeFinishInit(Native Method)
at com.android.internal.os.RuntimeInit.main(RuntimeInit.java:369)
Caused by: com.tyme.digital.MessageGuardException_RFA6IDc4MyAxMjY4MTI3NTA2NzkgWzIwMjQwNzI2LTIwMjQwOTI2MDkyNyBiNzpiNyAzNCBnb29nbGUvYmx1ZWpheS9ibHVlamF5OjE0L0FQMkEuMjQwOTA1LjAwMy5GMS8yMDI0MDkyOTAwOnVzZXIvcmVsZWFzZS1rZXlzIGJsb2NrZWRdIDAxOTI1NjI5LTQ5MTQtNDRiNi1iYzQ4LTEwMWNlZDQzMGM5Mw: DP: 783 126812750679
at com.tyme.digital.ProtectedMyApplication$a$d.ionCnptdj(Unknown Source:9)
at com.tyme.digital.ProtectedMyApplication$a$d.wFwpj(Unknown Source:0)
at com.tyme.digital.ProtectedMyApplication$a$d.khJBwf(Unknown Source:6)
at com.tyme.digital.ProtectedMyApplication$a$d.sg(Unknown Source:1)
at com.tyme.digital.ProtectedMyApplication.onCreate(Unknown Source:46)
at android.app.Instrumentation.callApplicationOnCreate(Instrumentation.java:1391)
at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7429)
... 11 more
Caused by: java.lang.RuntimeException: DP: 783 126812750679
at com.tyme.digital.ProtectedMyApplication.teqflzo(Native Method)
at java.lang.reflect.Method.invoke(Native Method)
at com.tyme.digital.ProtectedMyApplication$DataBinderMapperImpl.E(Unknown Source:31)
at com.tyme.digital.ProtectedMyApplication$DataBinderMapperImpl.fbDx(Unknown Source:472)
at com.tyme.digital.ProtectedMyApplication.teqflzo(Native Method)
at com.tyme.digital.ProtectedMyApplication.onCreate(Unknown Source:41)
... 13 more

spring-onion commented

Unfortunately I replicated this. Time to link them the attestation compatibility guide!