Chase Bank Bars Linux Desktop Log In For Security Reasons? \ stacker news ~opensource

Chase Bank Bars Linux Desktop Log In For Security Reasons?

932 sats \ 40 comments \ @siggy47 3 Aug opensource

I have been Linux only for about two years on my desktop. I frequently need to log into my bank for various reasons. I do this fairly regularly, but I haven't done it for a few months. Today I could not log in. Although I was using an "approved browser", there are now only two approved operating systems: Windows and Mac OS. The explanation on the site? "For security reasons."

Has anyone else experienced anything like this?

view all related items

67 sats \ 0 replies \ @IamSINGLE 3 Aug

I think you should ask the bank for correction on this. I've done a little search and found they store everything on Linux and they should help.

202 sats \ 4 replies \ @Coinsreporter 3 Aug

They have mentioned it on their website this.

https://m.stacker.news/43220

All that's required is an extension, a User Agent Switcher,and set it to Windows 10 using Edge, which is reported as the system you are using to Chase Bank. It will all work then at Chase as needed. This is the Switcher I used on Firefox 84 ESR version to accomplish this. ESR versions are unbranded, stand alone browser, so can have on same OS that already has an system installed version. I hope the switcher extension is secure, at least it's "recommended".

Source

https://addons.mozilla.org/en-US/firefox/addon/user-agent-string-switcher/?utm_source=addons.mozilla.org&utm_medium=referral&utm_content=search

11 sats \ 1 reply \ @siggy47 OP 3 Aug

Thanks. I'll give it a try. I didn't need one before. I'll use your recommended one.

67 sats \ 0 replies \ @Coinsreporter 3 Aug

I'm not expert. This is the recommendation I found on the Linux discussions.

0 sats \ 0 replies \ @WeAreAllSatoshi 3 Aug

Yea, it’s a very defensive position to take. It’s common to disallow browsers/platforms that you don’t explicitly support because you don’t want to deal with your software not working. I think it’s overkill personally, but it is a thing people do. They probably don’t dedicate any time to testing on Linux

0 sats \ 0 replies \ @siggy47 OP 3 Aug

deleted by author

64 sats \ 1 reply \ @JesseJames 3 Aug

What the what? Never seen anything like it. I know on Linux some utilities just won't work that's why I still have my macbookpro (until it dies and then it will go to kubernetes heaven :-)) If they really want to be secure stop using windows..lol You could also, change the agent response in your browser (developer options) and identify or "pretend" to be IE on windows... YMMV

21 sats \ 0 replies \ @siggy47 OP 4 Aug

Yes, I could do the agent thing. It just was never necessary before. I'm not a big fan of Chase anyway. It's a good excuse to move on.

43 sats \ 0 replies \ @bature_ 4 Aug

Big brother coming for you.

43 sats \ 0 replies \ @Athena 4 Aug

Write a detailed mail to your bank. They will definitely do the needful.

65 sats \ 1 reply \ @StillStackinAfterAllTheseYears 3 Aug

Amazed that anyone would treat Linux as less secure than Windows. I'd bet most of their backend is running on Linux.

21 sats \ 0 replies \ @JesseJames 3 Aug

I thinks that's more ignorance/laziness and lack of knowledge, windows is all they know and use, sad but common.

64 sats \ 0 replies \ @plebone 3 Aug

Time to switch banks.

64 sats \ 8 replies \ @grayruby 3 Aug

Would be interesting to get the perspective of someone with a better technical understanding if there could possibly be a security issue or if this is just gatekeeping.

61 sats \ 7 replies \ @siggy47 OP 3 Aug

True. I'm sure someone here can provide insight.

64 sats \ 6 replies \ @grayruby 3 Aug

Could simply be a matter of it not being worth their time and effort to maintain whatever functionality would be required for the site to work with Linux. Maybe it is simply a matter of not enough people using Linux for it to be worth their IT depts time.

50 sats \ 5 replies \ @siggy47 OP 3 Aug

While you were replying I tried my backup laptop with Ubuntu. It worked flawlessly. I cannot log in with NixOs. That seems really weird.

63 sats \ 1 reply \ @ChrisLAS 3 Aug

I'm on NixOS (using Firefox) here, and I could log into my Chase account just now. I don't think I have anything special installed.

20 sats \ 0 replies \ @siggy47 OP 3 Aug

I think I have the unwrapped package.

63 sats \ 1 reply \ @RdioActiv 3 Aug

Different user agent perhaps? Or a DRM component like widevine?

20 sats \ 0 replies \ @siggy47 OP 3 Aug

I don't think either of those. I think it might be the firefox package I installed. I think it was unwrapped firefox. I'm not up on the technicalities. That's just my guess.

43 sats \ 0 replies \ @grayruby 3 Aug

That does seem odd.

43 sats \ 0 replies \ @Malachi17 3 Aug

There is enough fishy stuff going on with Chase to warrant changing your account to something else "less secure". Anybody that thinks Microsoft is more secure than Linux is not someone I trust my money with.

43 sats \ 0 replies \ @SatsMate 3 Aug

I'm with Chase too, Is Custodia bank yet available for people to bank with? I want a bitcoin friendly bank.

43 sats \ 1 reply \ @kepford 3 Aug

Just re-read your post. You don't know that it has anything to do with Linux. The approved OS thing and the browser may not have anything to do with it. I could be due to your inactivity or some issue with your cookies. Any number of things.

I would try logging in with an incognito or private window. Who knows what they are doing. I think the supported OS/browser thing is mostly to cover them when people call having issues. Their support team doesn't know linux and also for the browser they likely do not test their site on Linux browsers. I know our team does but I work for a Linux company. That said, every team has limits.

0 sats \ 0 replies \ @siggy47 OP 3 Aug

Good point, especially since I'm not having problems on the Ubuntu laptop.

43 sats \ 7 replies \ @kepford 3 Aug

I have experienced some issues but usually it is due to using uBlock or due to my PiHole DNS that blocks trackers. Usually just using a different browser resolves it.

Ungoogled Chromium is good for this. Have you tried in different browsers?

Another option though it isn't great would be to run a VM. That would be a last resort. Chase sucks man. This is so absurd.

0 sats \ 6 replies \ @siggy47 OP 3 Aug

I have brave on the laptop too, but that's not listed as a supported browser. Maybe I will give it a shot anyway.

43 sats \ 5 replies \ @kepford 3 Aug

I would. I've had issues with my power and gas company recently. Was able to log in with FF in a private window. Sometimes browser extensions can cause issues. Ad blocking, cookie settings, its really absurd. Its a mess, this WWW thing.

43 sats \ 3 replies \ @kepford 3 Aug

@siggy47 could also be your IP address if you are using VPN. I have had issues with services blocking VPN IPs.

0 sats \ 2 replies \ @siggy47 OP 3 Aug

That's possible too. I haven't played around with vpn settings in a while though, and it has never caused problems before.

43 sats \ 1 reply \ @kepford 3 Aug

I mean, if it were me I'd turn off VPN to test it. Their site is encrypted. All your VPN is doing is preventing your ISP from seeing you went to that domain. Its a bank site so its likely very low risk.

If you wanted to be safer you could kill all your tabs and other online services before you "uncloak". That way those tabs aren't making connections your ISP will see.

55 sats \ 0 replies \ @siggy47 OP 3 Aug

Thanks for all this advice. I'll play around

43 sats \ 0 replies \ @kepford 3 Aug

@siggy47 I send you a lightning message

43 sats \ 0 replies \ @kepford 3 Aug

PagerDuty, an app for managing people that are on-call started blocking GrapheneOS for "security" reasons. Had a long back and forth with their support a while back about it. Frustrating.

43 sats \ 0 replies \ @quark 3 Aug

LOL Maybe they think by doing that they would stop most hackers? Haha For security reasons they should only allow us, Linux users.

43 sats \ 1 reply \ @Chronicsats 3 Aug

Could modify your Header. Also which browser are you using. Might be a some extensions blocking certain cookies or urls possibly. Also make sure you are going to a legit site. I saw someone else post they can get to it.
Here are some directions to try with chrome:

Install a User Agent Switcher extension:
- Open Chrome and go to the Chrome Web Store
- Search for "User-Agent Switcher for Chrome"
- Choose a reputable extension (e.g., "User-Agent Switcher for Chrome" by Google)
- Click "Add to Chrome" and confirm the installation
Configure the User Agent:
- Click on the extension icon in your Chrome toolbar
- Select "Windows" as the operating system
- Choose a specific browser version (e.g., "Chrome on Windows")
Visit the website:
- Go to the site that was previously blocking you
- Attempt to log in
(Optional) Verify the user agent:
- Open Chrome DevTools (Press F12 or Ctrl+Shift+I)
- Go to the "Network" tab
- Refresh the page
- Click on any request in the Network panel
- Look for the "User-Agent" header in the "Request Headers" section
- Confirm it shows a Windows user agent
Remember to switch back:
- When you're done, click the extension icon again
- Select "Default" to return to your normal user agent

0 sats \ 0 replies \ @siggy47 OP 3 Aug

Thanks very much for this detailed reply.

43 sats \ 0 replies \ @hueso 3 Aug

Looks like they've just lost a customer.

0 sats \ 0 replies \ @Octopus 3 Aug outlawed

stackers have outlawed this. turn on wild west mode in your /settings to see outlawed content.