K PLUS

[ignas2526]

Is there an existing issue for this?

• I have searched the existing issues

App name

K PLUS

Link to app

https://play.google.com/store/apps/details?id=com.kasikorn.retail.mbanking.wap

App version

v5.17.10

Country of the app

Thailand

Build Number

UQ1A.231205.015.2023121200

Device list

Pixel 7a

Profile app tested in

Owner profile

Google Play installed

Installed

Google Play services Network permission revoked?

• Revoked
• Not revoked
• I did not have Google Play services installed

Native code debugging

• Enabled
• Disabled

Exploit protection compatibility mode

• Enabled
• Disabled

Stock OS compatibility

• Works
• Does not work
• Not tested

Description of the app's functionality

Transfer via account number is working ( both own/other/cross-bank )

Are there any extra notes you think users should know about?

When using the app for the first time, it asks to switch from Wi-Fi to a mobile network. Sim cards from certain countries seem to not work. For the best result, use a Thai sim card.

ADB logcat of the app if necessary

No response

[vaardan]

One more thing to note. For me, when I tried installing the app from Aurora Store using Anonymous account it somehow detected the app as "not from Play Store" and urged me to download the app from Play Store. After I did that it worked fine.

[akc3n]

@vaardan

when I tried installing the app from Aurora Store using Anonymous account it somehow detected the app as "not from Play Store"

This is a bit dated, but it does have a small explanation here:
https://akc3n.page/posts/banking-app-issues/#auroraoss-is-problematic

[spring-onion]

As seen in #331 the app now denies functionality, probably due to play integrity. Please check out this update to find out what's being done to combat this problem and what you can do to help.

[ignas2526]

@spring-onion Please remove the Not compatible label.
I just installed version 5.17.10 and it now works!
Since there are no news from GrapheneOS about spoofing, the Bank must have read my or somebody else's pleads to support GrapheneOS hardware attestation.

This app now works with all the GrapheneOS security features on:
Exploit protection compatibility mode: disabled
Hardened memory allocator: enabled
Extended virtual address space: enabled
Native code debugging: blocked

[spring-onion]

@ignas2526 Thanks for the update. Did you install it from the play store? Are you running it in the owner or a secondary profile and does that profile have the play services installed?

[vaardan]

Also can confirm. After the installation of the 5.17.10 from PlayStore it works. I personally run that on a secondary profile with all of the google stuff installed.

Although I'm not sure whether they have supported GrapheneOS's hardware attestation or just removed that breaking check for now. There was a lot of comments on PlayStore regarding app breakage on the previous version. Going into the future it would be a good idea to check comments there before downloading the update.

[ignas2526]

@ignas2526 Thanks for the update. Did you install it from the play store? Are you running it in the owner or a secondary profile and does that profile have the play services installed?

Installed it from the play store. Running in the owner.