I have been Linux only for about two years on my desktop. I frequently need to log into my bank for various reasons. I do this fairly regularly, but I haven't done it for a few months. Today I could not log in. Although I was using an "approved browser", there are now only two approved operating systems: Windows and Mac OS. The explanation on the site? "For security reasons."
Has anyone else experienced anything like this?
I think you should ask the bank for correction on this. I've done a little search and found they store everything on Linux and they should help.
reply
They have mentioned it on their website this.
All that's required is an extension, a User Agent Switcher,and set it to Windows 10 using Edge, which is reported as the system you are using to Chase Bank. It will all work then at Chase as needed. This is the Switcher I used on Firefox 84 ESR version to accomplish this. ESR versions are unbranded, stand alone browser, so can have on same OS that already has an system installed version. I hope the switcher extension is secure, at least it's "recommended".
reply
Thanks. I'll give it a try. I didn't need one before. I'll use your recommended one.
reply
I'm not expert. This is the recommendation I found on the Linux discussions.
reply
Yea, it’s a very defensive position to take. It’s common to disallow browsers/platforms that you don’t explicitly support because you don’t want to deal with your software not working. I think it’s overkill personally, but it is a thing people do. They probably don’t dedicate any time to testing on Linux
reply
deleted by author
reply
What the what? Never seen anything like it. I know on Linux some utilities just won't work that's why I still have my macbookpro (until it dies and then it will go to kubernetes heaven :-)) If they really want to be secure stop using windows..lol You could also, change the agent response in your browser (developer options) and identify or "pretend" to be IE on windows... YMMV
reply
Yes, I could do the agent thing. It just was never necessary before. I'm not a big fan of Chase anyway. It's a good excuse to move on.
reply
Big brother coming for you.
reply
43 sats \ 0 replies \ @Athena 4 Aug
Write a detailed mail to your bank. They will definitely do the needful.
reply
Amazed that anyone would treat Linux as less secure than Windows. I'd bet most of their backend is running on Linux.
reply
I thinks that's more ignorance/laziness and lack of knowledge, windows is all they know and use, sad but common.
reply
Time to switch banks.
reply
Would be interesting to get the perspective of someone with a better technical understanding if there could possibly be a security issue or if this is just gatekeeping.
reply
True. I'm sure someone here can provide insight.
reply
Could simply be a matter of it not being worth their time and effort to maintain whatever functionality would be required for the site to work with Linux. Maybe it is simply a matter of not enough people using Linux for it to be worth their IT depts time.
reply
While you were replying I tried my backup laptop with Ubuntu. It worked flawlessly. I cannot log in with NixOs. That seems really weird.
reply
63 sats \ 1 reply \ @ChrisLAS 3 Aug
I'm on NixOS (using Firefox) here, and I could log into my Chase account just now. I don't think I have anything special installed.
reply
I think I have the unwrapped package.
reply
Different user agent perhaps? Or a DRM component like widevine?
reply
I don't think either of those. I think it might be the firefox package I installed. I think it was unwrapped firefox. I'm not up on the technicalities. That's just my guess.
reply
That does seem odd.
reply
There is enough fishy stuff going on with Chase to warrant changing your account to something else "less secure". Anybody that thinks Microsoft is more secure than Linux is not someone I trust my money with.
reply
I'm with Chase too, Is Custodia bank yet available for people to bank with? I want a bitcoin friendly bank.
reply
43 sats \ 1 reply \ @kepford 3 Aug
Just re-read your post. You don't know that it has anything to do with Linux. The approved OS thing and the browser may not have anything to do with it. I could be due to your inactivity or some issue with your cookies. Any number of things.
I would try logging in with an incognito or private window. Who knows what they are doing. I think the supported OS/browser thing is mostly to cover them when people call having issues. Their support team doesn't know linux and also for the browser they likely do not test their site on Linux browsers. I know our team does but I work for a Linux company. That said, every team has limits.
reply
Good point, especially since I'm not having problems on the Ubuntu laptop.
reply
I have experienced some issues but usually it is due to using uBlock or due to my PiHole DNS that blocks trackers. Usually just using a different browser resolves it.
Ungoogled Chromium is good for this. Have you tried in different browsers?
Another option though it isn't great would be to run a VM. That would be a last resort. Chase sucks man. This is so absurd.
reply
I have brave on the laptop too, but that's not listed as a supported browser. Maybe I will give it a shot anyway.
reply
I would. I've had issues with my power and gas company recently. Was able to log in with FF in a private window. Sometimes browser extensions can cause issues. Ad blocking, cookie settings, its really absurd. Its a mess, this WWW thing.
reply
@siggy47 could also be your IP address if you are using VPN. I have had issues with services blocking VPN IPs.
reply
That's possible too. I haven't played around with vpn settings in a while though, and it has never caused problems before.
reply
43 sats \ 1 reply \ @kepford 3 Aug
I mean, if it were me I'd turn off VPN to test it. Their site is encrypted. All your VPN is doing is preventing your ISP from seeing you went to that domain. Its a bank site so its likely very low risk.
If you wanted to be safer you could kill all your tabs and other online services before you "uncloak". That way those tabs aren't making connections your ISP will see.
reply
Thanks for all this advice. I'll play around
reply
@siggy47 I send you a lightning message
reply
PagerDuty, an app for managing people that are on-call started blocking GrapheneOS for "security" reasons. Had a long back and forth with their support a while back about it. Frustrating.
reply
43 sats \ 0 replies \ @quark 3 Aug
LOL Maybe they think by doing that they would stop most hackers? Haha For security reasons they should only allow us, Linux users.
reply
Could modify your Header. Also which browser are you using. Might be a some extensions blocking certain cookies or urls possibly. Also make sure you are going to a legit site. I saw someone else post they can get to it.
Here are some directions to try with chrome:
  1. Install a User Agent Switcher extension:
    • Open Chrome and go to the Chrome Web Store
    • Search for "User-Agent Switcher for Chrome"
    • Choose a reputable extension (e.g., "User-Agent Switcher for Chrome" by Google)
    • Click "Add to Chrome" and confirm the installation
  2. Configure the User Agent:
    • Click on the extension icon in your Chrome toolbar
    • Select "Windows" as the operating system
    • Choose a specific browser version (e.g., "Chrome on Windows")
  3. Visit the website:
    • Go to the site that was previously blocking you
    • Attempt to log in
  4. (Optional) Verify the user agent:
    • Open Chrome DevTools (Press F12 or Ctrl+Shift+I)
    • Go to the "Network" tab
    • Refresh the page
    • Click on any request in the Network panel
    • Look for the "User-Agent" header in the "Request Headers" section
    • Confirm it shows a Windows user agent
  5. Remember to switch back:
    • When you're done, click the extension icon again
    • Select "Default" to return to your normal user agent
reply
Thanks very much for this detailed reply.
reply
43 sats \ 0 replies \ @hueso 3 Aug
Looks like they've just lost a customer.
reply
stackers have outlawed this. turn on wild west mode in your /settings to see outlawed content.