bluebird

Public Key

npub1qnx7fltm27u0fg4xyjmn7sw7leqaaecpjwh326l2he0clczvdc7qzgna9y

NIP-05 Address

bluebird@hessen-social.mostr.pub

Profile Code

nprofile1qqsqfn0yl4a40w8552nzfdelg800usw7uuqe8tc4d04tuhu0upxxu0qpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsvgqd0g

Publishing to

relay.primal.net

relay.damus.io

nos.lol

Author Public Key

npub1qnx7fltm27u0fg4xyjmn7sw7leqaaecpjwh326l2he0clczvdc7qzgna9y

Show more details

Last Notes

2026-08-23 17:26:17 UTC

- reply

@nprofile…8d0p Yes, I did try that without success. The app crashes in an obfuscated code path (no memory corruption bug ig) and opens a website stating that the device might be rooted or there would be settings that reduced system security.
For some reason, the issue can 𝗻𝗼𝘁 be reproduced on my P6a on the same app version 5.3.1 (latest). They might have setup hardware attestation but did not add the keys of the GOS build on newer Pixel devices?
https://discuss.grapheneos.org/d/23692-sparkasse-pushtan-app-not-working-anymore/92
https://github.com/PrivSec-dev/banking-apps-compat-report/issues/604

2026-08-23 15:13:41 UTC

@nprofile…8d0p What options do we have when an app starts blocking GrapheneOS?
After they had fixed an earlier issue with GrapheneOS compatibility, the TAN app of the German Sparkasse recently stopped working again. I think they have changed their checks (they do not seem to be using Play Integrity).
The app works on my current P6a, but not on a newer Pixel 10a. I reached out to them via the bank and app ratings but they either claim the device was rooted or that they do not support GOS.