What about TOR proxies?
Could be interesting to know what the app does when ran on a TOR middlebox (it would probably detect an emulator) or if you attach it to a TOR proxy. I mean one can perfectly set up a private AP and forward all the traffic from the AP to TOR. As it is transparent forwarding (except it relays only TCP and DNS -UDP 53) the app CANNOT detect there is some TOR involved! Obviously the bank's server can detect that because (almost all) the tor exit nodes are known.
The result could be interesting to know if the app works in such conditions. If it works, it means the bank don't ban TOR, just a list of local applications... and I'm not sure that does really enhance security, but sure it enhances annoyances!
P.S.: I tested my bank app with a TOR middlebox, it works.
Biting the hand that feeds IT
