Is something like this too much google?
Probably it loses the anonymity of microg but in really rough situations like this could be an ok complement.
Are you suggesting installing google play to AAS?
Not necessarily!
Did it on the first phone over a decade ago, and happy we don’t need to with microg.
The keyword to me there is sandboxing.
Of course I hope actual Play services wilö never be needed.
For what it’s worth, I rejuvenated an ancient Android tablet with LineageOS 17.1 and MindTheGapps.
OP keeps crashing, same as on Sailfish, despite my efforts to re-googlify.
Logcat is very chatty, so I fed it through Claude, which assessed the situation basically to be hopeless, because the GApps alone don’t a Google make.
I’m not sure that’s 100% true if Graphene manages this with sandboxing, but the main difference might be if it has original bona-fide keys in store for the sandbox.
1 Like
It works on e/OS still. So probably not full marriage to Google, but something else
1 Like
Flashed on a Google Android?
The tablet I resurrected was Android 7.1. That’s EOL in 2019, which means it would never have had a facility to make this work, no matter what.
“OP-mobile currently only works on devices running iOS 17 or newer, or Android 10.0 or newer. For security reasons, OP-mobile does not work on other or outdated operating systems, and the Sailfish operating system is not supported.
Due to essential security requirements, OP-mobile cannot be used on Sailfish devices, so using the app requires a supported iOS or Android device. If you wish, you can also use the banking services via browser at op.fi.
I will forward your feedback for service development.”
1 Like
What an answer but at least a reply. Basically they force us to use the US duoply, period. Unfortunately Finnish banks have the power to force us users as bank authenticity is used in every Finnish online public (governmental) service. The thing in question lays exactly here, as Finnish government sees the bank authentication as ‘most secure’ method. Could this be questioned since there are reasons to doubt the security and disclosure of personal information by Google application services respectively Apple services? There are several scientific articles backing up this doubt, getting understanding at Finnish government or banks would not be an easy task. How about a complaint here: https://tietosuoja.fi/tietosuoja - however this should be very well and clearly stated.
PS: I also left a complaint at OP. Also, I noticed that I cannot even use OP.fi login without the OP-mobiili app
2 Likes
What is google’s role in security check (android attestation) between app and backend server; is it anything else than providing root certificate for chain used in security check? As far as I understand the process, google does not participate in handshake between app and server. And does not know anything about bank (or other service) users or identities.
From SFOS support and general independence (un-googleness) perspective is the problem getting that google provided root cert to SFOS? Or that google cannot be trusted as root cert provider?
Just trying to understand how much this is technical problem and how much it is about trustworthiness of key holder. Or what is the part that makes us slave to google.
If current OP Mobiili problem (and this discussion) is something else than android attestation… then sorry for going off topic.
3 Likes
These are valid questions and points. At least I don’t have full picture, what is the root cause and module on it, which is preventing OP Mobili to work in Jolla. Is it Android Attestation? That emulated Android is not accepted and it’s rejected?
If someone has deeper knowledge, I would be grateful to hear and understand this.
1 Like
Sure that should be questioned, though I’m not certain this can go beyond the ideological.
Consider a traditional Android or Apple phone, locked down tight, everything signed and attested etc.
Then be a bank, whose customer base uses predominantly apps, browser relegated to the elderly, disabled and civil-liberties-minded.
You deal with psd2 and soon psd3 and fin-fsa commanding you to trace transactions, and instant sepa and aml and kyc etc.
Would you rather build post-hoc infra to rollback transactions because a malware affected Sailfish and rooted phones alike, or buy a toolkit du jour that checks if the phone is untampered-with?
Not like advocating for the opposition but some hurr durr about Google being inherently unsafe just does not hold the same kind of water as Google being the Digi-DDR down to the Stasi levels.
Banks should IMO take this into consideration even if it expands their danger zone from malware-ridden desktops of the elderly, but we know at least where OP’s cost/benefit analysis landed them. Back to the game of whack-a-mole for us.
It’s damned near impossible to found a new bank, and have a technical model where the app is a simple REST client like the browser, has a ton of risks, so we will likely never get out of this mess.
3 Likes
The Jolla update on deliveries confirms that the 5.3 update will address android banking app concerns, and we can expect the update to be related to the compatibility layer.
So, the effort to work with banks and legislators towards building sovereign banking tools is still on. Organizing around this seems a tad diffucult. There is no common narrative on what the problems are… We could try to do a collective text, detailing where we are at now, what is wrong, what needs to be done. Also dreaming what the positive outcomes will be if digital right advocates, banks & legislators succeed in establishing a sovereign alternative.
I belive, the European bank that steps up in this matter will be a standard leader and stands to gain a lot from an investment to this.
2 Likes
Apple and Google has totally different verification systems for this. I mean banks have accepted them both. So it’s not impossible to have non Google security stack in apps side. Why not third one if it’s safe?
1 Like
I think it’s a question of scale vs risk. If most of everyone is using a mobile app, that’s where to focus the security effort.
It’s gonna be a tough sell, convincing OP that Sailfish is safe enough or small enough, but for different reasons. Safe enough when someone can easily install backdoored software, and we don’t hope the community stays small.
And the real argument should be that OP is overreaching here and they should back the fsck down. My money sadly says neither the bank nor the regulators will have patience for this kind of argument.
Better start burning those tokens on reverse-engineering and patching.
1 Like
I got the same reply yesterday, probably copypasta for every question about the app compatibility, but they neglected to address my question about possible cooperation with local alternatives in any way. I haven’t had the time to continue the questioning yet, but i will press them for an answer on how OP has prepared to guarantee customers service in the case that the required services by Google or Apple become unavailable, due to the unlikely but not impossible geopolitical shifts, USA-EU IT regulation clashes or the like.
5 Likes
As others, I wanted to add my bits and asked bank cashier to write a complain after they “fixed” my access issue (now using website access instead of App). Switching away from convenience due to recent issues with OP App…maybe for the best 
So that will be 3 extra complains from us added to others (my wife and I also complained using our bank service) 
I highly encourage everyone to sent complain to OP. But in the meantime, great news from hard working sailors Community meeting on October 29, 2026 - #24 by rainemak 
2 Likes