this post was submitted on 19 Jul 2023
1 points (100.0% liked)

Technology

67242 readers
3644 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

Not sure if this is a good place for this post or not, but here goes.

I reject outbound connections to meta domains at the firewall. I noticed this banking app refuses to prompt for login credentials unless I am on mobile or a public WiFi network. I watched my FW logs and noticed many rejected connections to graph[.]facebook[.]com.

I contacted their support team, but they denied the connection was their app. I shared the screenshot on this post and they closed my case without comment.

I emailed the address on the Google play store and they also denied the connection was their app. I shared the screenshot and they asked if I downloaded the app from the play store, implying the official app doesn't do this, but of course it does.They closed my case without proper resolution as well.

Just thought I'd share this here so people know that some banks make direct connections to Facebook to share analytics, without your knowledge or informed consent, and they lie about it when called on it.

top 4 comments
sorted by: hot top controversial new old
[–] Doug@midwest.social 1 points 2 years ago

So I just tested this. I'm not at home so I had to VPN in which is no issue.

  • I opened graph.facebook.com and confirmed it was working
  • I opened and logged in to my Ally app
  • I added graph.facebook.com to my pi-hole's black list as a regex entry
  • I opened graph.facebook.com in the browser and confirmed it was blocked
  • I force closed and cleared the cache on my Ally app
  • I opened and logged in to my Ally app

It's not the Meta connection that's giving you trouble.

[–] ChatGPT@lemmy.world 1 points 2 years ago (1 children)

It’s probably NTP a lot of banking apps have extra protections and if it can’t determine the time from its own trusted authority it may not allow the connection.

[–] rcmaehl@lemmy.world 1 points 2 years ago* (last edited 2 years ago)

Launchdarkly is likely a culprit as well. Just doing a background search reveals that the service allows dev teams to do A/B testing, enable new features without releasing a new version, and various other "dynamic" functions.

collapsed inline media

OP is on the wrong side of Occam's razor

[–] MangoPenguin@lemmy.blahaj.zone 1 points 2 years ago* (last edited 2 years ago)

Something else is going on with your setup, I block graph.facebook.com via DNS too and Ally works fine, both app and browser.

Your screenshot looks like you're also blocking ntp.org which could definitely screw with a banking app, and launchdarkly.com may also be the problem if they're loading assets from that service.