I run a small business and I would like to accept credit / debit card payments on my Android phone running #GrapheneOS
Does anyone know of an app or paired terminal which will work?
SumUp asked me to turn off Developer Tools, but still said the device didn't meet the security requirements for accepting payments.
They offer a Bluetooth paired card reader - but I don't want to spend £30 if it won't work with Graphene.
Anyone have experience *receiving* tap-to-pay on their GrapheneOS device?
@Edent don't know about any bank solutions, but for Developer Options there's a Quick Tile Toggle: https://f-droid.org/packages/me.velc.devqs
@Edent have a friend that had the issue he bough a stand alone terminal (with a sim as he tend to move arround with it to pay) to avoid the issue.
@Edent Damn, what a world we live in when a payment vendor says GrapheneOS, an OS built specifically with security in mind, isn't up to their security requirements. 🙃
@thedarkener What are the names of the people behind GrapheneOS and what sort of liability have they agreed to?
@thedarkener how do you know that Graphene is more secure?
If you're a bank and having to deal with huge amounts of fraud, how would you verify that Graphene meets your security requirements?
Like, I'm quite happy to use it. But I'm not going to lose millions if they get compromised.
@Edent Dude, are you trolling or what?
Your profile shows that you're into F/OSS. You should already know the answers to these questions.
@thedarkener
I *do* know the answers to these questions. I've written extensively about it.
See, for example, https://shkspr.mobi/blog/2023/05/the-limits-of-general-purpose-computation/
Just because the OS is "built with security in mind" doesn't mean that it needs the regulatory needs of a bank.
@Edent A buddy who was using Square and a Pixel 6a (that he had been using to test Android apps) ran into this a few months ago. This isn't the answer you are looking for, but he ended up keeping one phone for Square at craft fairs and another for testing his Flutter apps.
@joe I'm gonna end up with a drawer full of phones, aren't I 😆
@Edent @joe Or a collection like this, depending on what you're trying to achieve...
(None of these need phones to work, but all of them can be paired with apps running on phones if necessary. That's not my interest in them — I use them with point of sale systems. The Square Terminal on the right is one of the ones we used on the bar at EMF in 2024.)
@Edent If it helps, SumUp sell standalone terminals (which are more expensive) but work very well. We use them unattended across the hackspace.
If you wanted to try a £30 terminal, Screwfix sell them and have a pretty generous returns policy.
@hugh yeah, that's what I'm thinking. TBF, they're doing one for £19+VAT with free returns, so I might try that. Ta!
@Edent I am going to assume that the pedophile class will not allow you to receive payments though a device they can't spy on you from.
Your best move is probably one of those tablet cash register situations. That way you can keep all of their spyware on that device.
Of you could buy a used ATM, set it up in your shop and charge them a fee to get cash. It could save you on credit card fees...
@fiend_unpleasant Wow! You're *so* insightful! Can you tell me more, please?
@Edent Sure, what part of it did you not understand?
@Edent Yeah, I have developer tools turned on so I can switch off WiFi scan throttling. For some reason this means SumUp decides I can't use NFC for charging. But actually a bigger problem for me is their permissions model which means only the main email address can authorise charges and raise support tickets.
@sborrill so you're able to use it on GrapheneOS?
@Edent Sorry no, not got that far. It's bad enough with stock Android or even just as not the main email address in a web browser.
@sborrill I'm not being funny, but I'm struggling to understand why you replied to me then?
@Edent I was saying that flagging developer tools wasn't a GrapheneOS-specific issue. SumUp doesn't even work well on stock Android (or on a web-browser). I'll back off now if I'm deemed to be a reply guy. Good luck taking payments. I'll follow along as it's something I'm interested in for various volunteer things I'm involved in.
