this post was submitted on 21 Jan 2026
615 points (98.9% liked)

Technology

79136 readers
2554 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] wreckedcarzz@lemmy.world 9 points 2 days ago (1 children)

That is more the fault/worry of the financial sector and not G. The fact that they gave up this amount of leeway is shocking. Their risk tolerance is very low and giving G the ability to manage virtual cards and allow payments with them is huge in itself.

Even Privacy, which does part of the same thing/idea, still only works for some cards, doesn't work at all for credit cards (last time I checked), and has been in the sector for a similar amount of time.

G had to lock down Pay to appease the financial sector's risk management. Anything else was DOA.

[–] Zak@lemmy.world 8 points 2 days ago (1 children)

I wonder what an alternate history where Google chose not to become evil would look like.

What if they had looked at Microsoft's Palladium proposal and thought, as pretty much everyone outside institutional IT departments did that locked devices with remote attestation was a nightmare scenario best forgotten, refused to build it, and made an effort to prevent anyone else from doing so on top of Android? Safetynet didn't appear until 5-6 years after Android launched to the public. What if it never did? Android already had enough momentum by that point I don't think the financial sector could refuse to be on it no matter what risk management said.

[–] wreckedcarzz@lemmy.world 9 points 2 days ago (2 children)

Well, I kind of know what happened in that scenario... because it did. Until Pay, there was Wallet. The original Wallet, not the current one. Wallet had a physical and virtual prepaid debit card, that you would load up and manage in the app. I used it a few times (new tech woo), and distinctively remember ordering at a McDonald's, the clerk announced the cost, I held my Nexus 7 to the new nfc pad, they started to say 'uhh no you have to-' and then a success beep, and their jaw dropped. They thought it was nuts, I told them in a few years 'this will be everywhere'.

So before Pay, there was Wallet, and it's own little sandbox of testing if anyone would use this. A couple years later the Wallet card discontinued, and Pay took its place.

[–] Zak@lemmy.world 5 points 2 days ago

A different Wallet/Pay implementation is a possible outcome, but I'm thinking of a bigger picture where Android phones are more like PCs: no non-unlockable bootloaders, no remote attestation anywhere, barriers to root detection at the OS level, third-party ROMs encouraged.

The early days of Android were like that. I wonder if things had developed along that path, would we have a paradise for power users? A security nightmare for mainstream users? Both? Neither?

[–] AbidanYre@lemmy.world 2 points 2 days ago (1 children)

Until Pay, there was Wallet. The original Wallet, not the current one.

Classic Google.

I remember wallet only working consistently at McDonald's.

[–] Holytimes@sh.itjust.works 2 points 2 days ago

For most of early wallets existence it did only work McDonald's lol