606
Free Software Foundation announces a Librephone initiative to develop a fully free and open source smartphone (liliputing.com)
submitted 1 year ago by to c/linuxphones@lemmy.ca
75 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 26 points 1 year ago (17 children)

I hate BankID with a fiery passion. I complain to all my Swedish colleagues how messed up it is that government services are locked behind a private company that only supports American big-tech operating systems. They are finally coming around to my way of thinking now.

I'm one of the only people I know in Sweden without a smartphone, just a dumbphone.

I couldn't get BankID to work with Wine or Waydroid so I just use an old Windows laptop when I need to access government services with the physical dongle. But I hate going back to Windows so it's always a pain.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 17 child comments
    •
  • [–] 16 points 1 year ago (8 children)

    BankID is so ass, the one we have here in Finland is a bit better, but the one we have in Estonia is the best.

    The Estonian one is by far the most comfortable to use of the three, with even a working and maintained Linux version. It is also tied to the PCKS#11 certificate stored in your ID card, instead of a corporate bank account.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 2 points 1 year ago

    Back when BankID was young, in the wee 00s, it was actually just a certificate on your computer. The management software for this is still around I believe, it's called BankID Säkerhetsprogram. The Linux support for it was dropped in 2014.

    The reason it took off the way it did is because it was in early, and the banks backed it. The government has been really slow implementing their own solution. They had DIGG work on it for a while, but then transferred the assignment to Polismyndigheten.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 1 year ago

    For both of you Saper and Blessed please read my comment on this comment thread for EU Linux to collectively grow with some recommendations on what to do with other people. I am certain that is our main way to get Linux phones since more EU countries are getting interested day by day with proper protections in place

    "Help me, Obi-Wan Kenobi, You're My Only Hope"

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 1 year ago (5 children)

    It's annoying to have to have a card reader though, so everyone just uses Smart-ID or Mobiil-ID anyway. But at least we have the option not to.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 1 point 1 year ago (2 children)

    Mobiil-ID and Smart-ID just register a new certificate to your ID, so it's the same mechanism, different UX :)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    Yes but the UX works better much of the time. Downside of course is that you can't sign documents without an Internet connection, if that's something you may need to do. And the fact that you need a phone

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] [S] 1 point 1 year ago (1 child)

    I'm pretty sure that you can use something like a YubiKey as a PKCS#11 certificate store, if the issue is just the card reader form factor.

    kagis

    Yeah:

    https://developers.yubico.com/yubico-piv-tool/YKCS11/

    This is a PKCS#11 module that allows external applications to communicate with the PIV application running on a YubiKey.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 1 year ago

    That solves one issue, the other being how buggy it can be to use in the browser. The file signing feature is separate software (which has an official Linux port!), but to log into your bank, etc, browsers often pre-decide for you which certificate you want to use and then complain that it's not present. Perhaps it's changed now, I haven't used it much in quite a few years now because Mobiil-ID and Smart-ID have just worked 99% of time.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 1 year ago (7 children)

    I know some people on the internet is against the whole idea behind digital identification. But if its only used for things that would normally require identification in the physical world. Like banks and government interactions. I don't have anything against it per say. It can even be administered and handed out by a company (although that is against my personal ideology) but they have to then be forced to either release the source code or support at least one distro of Linux, or flatpack works too. Let's not get in to snap packages, it opens a whole other can of worms.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 3 points 1 year ago (2 children)

    Yeah we have that in BC Canada, your digital ID gives you access to BC services and as a login credential partner to federal tax account.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    Isn't it just a webiste though?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago*

    If you mean the federal tax access, yes. However their security has increased after breaches so to login you need username, and a pass code they mail to you to setup a login and password. Then they send you a printable cyptic gridded square. So you login with a user name and password , they send a challenge code and you cross reference it on your chart to send back the codes to get access. If your paper is expired or you lose your password you have to through snail mail again. OR you use your BCID key tied to your personal device, website waits for code generated from phone. It simplifies access, and ensures only the person holding the device can login and not a brute force from a random person

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 1 year ago

    Exactly.

    Through Handelsbanken I have two physical card readers.

    • One is wireless and I can use to authenticate online purchases and login to Handelsbanken. That one works on any browser so it works no problem on Linux. It even has a camera on the back of it to scan QR codes.
    • The second one connects through USB and requires you to download a program that only works on Windows and MacOS. This is the one that is required for all government services, other banks and everything else.

    My hope was that I would be able to use the first physical card reader to scan the QR codes that come up for mobile bankID for other sites, but the QR code scanning functionality only works with Handelsbanken's website.

    If I could login to everything with the wireless card reader then they wouldn't even need to make a version that specifically works for Linux, just a version that works for all browsers. It doesn't seem like it would need to be that big of a change from perspective.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 1 year ago

    We have that but it's just a website we go to login to. And every 3 or 6 months forget which it asks for your drivers license. So we can login to governmment sites on any platform since it is another website used for verification.

  • permalink
  • fedilink
  • source
  • parent