Not sure if this is a good place for this post or not, but here goes.

I reject outbound connections to meta domains at the firewall. I noticed this banking app refuses to prompt for login credentials unless I am on mobile or a public WiFi network. I watched my FW logs and noticed many rejected connections to graph[.]facebook[.]com.

I contacted their support team, but they denied the connection was their app. I shared the screenshot on this post and they closed my case without comment.

I emailed the address on the Google play store and they also denied the connection was their app. I shared the screenshot and they asked if I downloaded the app from the play store, implying the official app doesn’t do this, but of course it does.They closed my case without proper resolution as well.

Just thought I’d share this here so people know that some banks make direct connections to Facebook to share analytics, without your knowledge or informed consent, and they lie about it when called on it.

  • @s38b35M5OP
    link
    English
    3
    edit-2
    1 year ago

    When I unblock the Facebook address, the app opens as expected.

    I’m not blocking any NTP. My home servers rely on it (just TrueNAS checks time every 3 minutes…), but I do block DNS outbound to force using my own DNS.

    • fatalicus
      link
      English
      241 year ago

      You are blocking NTP though. Look at your image, all the way at the bottom.

    • @marmo7ade
      link
      English
      15
      edit-2
      1 year ago

      deleted by creator

      • @heyitsmikey128
        link
        English
        21 year ago

        I’m going to assume that hopefully OP knows how DNS works and meant he blocks all outbound DNS requests from his devices and sets a specific DNS for his external queries from his FW/Router. I do the same thing.

        However, he is blocking NTP right there so who knows.

        • XIN
          link
          fedilink
          English
          01 year ago

          PCap is just a packet capture. “Closed” in this context just means the connection is no longer currently active.