yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] Pkt_Lnt:
Looks like we are screwed now with just an unlocked bootloader!

https://www.reddit.com/r/Android/comments/587ss9/psa_android_safetynet_now_tripped_by_unlocking/
[Android Software/Hacking General [Developers Only]] sotoLOTO-:
Thanks for your work. Does your SuperUser run both on Lollipop 5.0.1 and MM?
[Android Software/Hacking General [Developers Only]] Boosik:
The time has come for the Russian hackers to create SafetyNet emulator.

EDIT:

Huawei Mate 8 is my phone.

Full unroot, stock recovery, stock rom, unlocked bootloader: http://i.imgur.com/PfGaSe4.jpg

Full unroot, TWRP recovery, stock rom, unlocked bootloader: http://i.imgur.com/C4MI1UI.jpg

So is this hoax or I'm just really lucky?
[Android Software/Hacking General [Developers Only]] phhusson:
I can confirm this on my device (CAF 6.0)

The properties used to detect locking are:

ro.boot.verifiedbootstate ro.boot.veritymode ro.oem_unlock_supported ro.boot.flash.locked

So properties are NOT standard Android, which could explain why you don't get detected.

Can you give the values of those properties when locked and when unlocked? (I'd guess they'll all be at the same state, possibly not defined)
[Android Software/Hacking General [Developers Only]] Boosik:
This is from unlocked bootloader. I think I can't relock it without factory reseting my phone (and that is not an option right now).

shell@HWNXT:/ $ getprop ro.boot.verifiedbootstate
ORANGE
shell@HWNXT:/ $ getprop ro.boot.veritymode
logging
shell@HWNXT:/ $ getprop ro.oem_unlock_supported

shell@HWNXT:/ $ getprop ro.boot.flash.locked

shell@HWNXT:/ $
[Android Software/Hacking General [Developers Only]] phhusson:
Erm, I have exactly the same thing, except it's orange instead of ORANGE, and it fails.

Was your device originally with Android 5.1?
[Android Software/Hacking General [Developers Only]] Boosik:
It had Android 6 when I bought it. It was still sealed in original box. It is not a second hand device.

AFAIK Huawei Mate 8 never had Android 5.
[Android Software/Hacking General [Developers Only]] sotoLOTO-:
[MENTION=1915408]phhusson[/MENTION] - as I asked, does your SuperUser app work both on LP and MM?
[Android Software/Hacking General [Developers Only]] asad510:
is there a beta program for your apk
[Android Software/Hacking General [Developers Only]] Captain_Throwback:
I prefer the two lines, but I don't know why you can't move them up a bit to closer to the icon? It seems there's too much space there, especially with the name on two lines. Maybe it's just me?
[Android Software/Hacking General [Developers Only]] rmead01:
I, like others, have that common issue where root stops working but is easily corrected by a reboot. While inconvenient it's not the worst thing in the world to deal with considering the way root/safety net is heading.

My questions is, is there a way to be notified when root access is no longer available? Just realized for the last 2 days I haven't had root access but did not know. I really only use root for basic things like adaway and naptime so it was not apparent to me at all that root needed to be refreshed.
[Android Software/Hacking General [Developers Only]] sotoLOTO-:
I like your idea. Since I'm considering trashing SuperSU and switching to phhSU I'd be happy to have the notifications you suggest!
[Android Software/Hacking General [Developers Only]] Pkt_Lnt:
In the SuperUser app, you can turn them on, either toast or notification. That will show you failures, but downside is you see every root access request. An option to only show failures would be nice. [MENTION=5444464]PunchUp[/MENTION] possible?
[Android Software/Hacking General [Developers Only]] schizophrenia:
Let's hope it's just a bug

SafetyNet API fails on some Android phones with unlocked bootloaders, Android Pay affected

http://www.androidpolice.com/2016/1...unlocked-android-phones-android-pay-affected/
[Android Software/Hacking General [Developers Only]] rmead01:
I currently have the toast message pop up when something require root access so i'm aware, even when i've granted access. For me, I either trigger adaway which then shows, or naptime goes into effect with the screen off. Neither of those will show a toast unless I go into them on my own.

If the toast showed a failure I fear I would still miss it, unless during an adaway update attempt. Possibly a notification when an app that has been granted root requests it but is denied?
[Android Software/Hacking General [Developers Only]] PunchUp:
Yes. I'll add a setting
[Android Software/Hacking General [Developers Only]] :
Hi PunchUp, which one is the latest version of the app? I'm not concerned about POGO. Shoud I be using superuser-r275.zip; superuser-r259.zip or superuser.zip?

Also when you get a chance fix this in the apk. In About section when you touch "+" and the box expands it should change to "-". I know it's a small issue but just wanted to make the app look more professional. See attachment.
[Android Software/Hacking General [Developers Only]] cocchiararo:
can 7.1.1 be rooted with this ? XD

I know, too soon to ask, but i just flashed it (pre nandroid), and i was happy on 7.0 and rooted, but i could not stop myself
[Android Software/Hacking General [Developers Only]] rmead01:
I'm rooted with it. But stock kernel so only systemless and cant edit boot.prop or install system apps
[Android Software/Hacking General [Developers Only]] cocchiararo:
Pardon my ignorance, but what's the relation between stock kernel, editing boot.prop and system apps?

Enviado desde mi Nexus 6P mediante Tapatalk
[Android Software/Hacking General [Developers Only]] rmead01:
I believe they enable the modification of the system somehow. Hope I'm wrong but that's the only difference for me from before and I can't now
[Android Software/Hacking General [Developers Only]] PunchUp:
I did try some things. But it's quite complicated.

First I tried to set a negative top margin when app name covers more than 1 line. But it doesn't work. I guess negative margins only work for child views and not child view groups.

Another option is to set a layout weight for the ImageView. This works. But the catch is that it tries to maintain the ratio of top and bottom padding and keep the icon centered. So as a result, the icon will not be horizontally aligned with icons of other apps which only use 1 line. Will you be okay with that?

Edit - I figured out a way to reduce that blank space. A bit dirty but I think it's fine overall. Please wait for next build

App and superuser zip are two different things by the way. I'm not exactly sure for which one do you want the latest version.

You can use either 275 or 259. You don't care about PoGO, so it doesn't matter.

Meh, can't be bothered to add extra code for that. Maybe later :p
[Android Software/Hacking General [Developers Only]] headcheese:
amplify says im not rooted. any suggestions? i am on the new preview for 6p. i rooted by flashing r259 zip.
[Android Software/Hacking General [Developers Only]] Pkt_Lnt:
Amplify needs Xposed. There is not Xposed for Nougat. That is probably why.
[Android Software/Hacking General [Developers Only]] benlm72:
Feedback

Hi pphusson,

As you ask for testers, this post just to let you know that I've used your superuser solution with my galaxy s4 running optcm13 and optcm14 without any problem up to know. I've used your moded version for magisk6 and optcm13 to bypass SafetyNet up to the last week too, it was working for me.

Thanks for the job !

EDIT : tried to with optcm14 and magisk 8, it works fine but I can't bypass SafetyNet.
[Android Software/Hacking General [Developers Only]] PunchUp:
- Added a new "Smart mode" for notifications (shows a toast when screen is in use and notification when it's off)

- Added a setting to notify only when access is denied

- Removing an app from the list will require PIN (if it's set)

(I haven't tested these new additions much. So, please let me know if something's wrong)

- [MENTION=1162986]Captain_Throwback[/MENTION] some blank space will be removed now
[Android Software/Hacking General [Developers Only]] kryzeK:
Please guys, any method to AdAway works?

I already tried method with ADB Shell on this thread, another method with Terminal Emulator I found on GitHub, systemless zip and others in AdAway thread but nothing works for me.

AdAway until shows that this enabled but ads still are evident.
[Android Software/Hacking General [Developers Only]] matust:
Have you flashed magisk?
[Android Software/Hacking General [Developers Only]] kryzeK:
No. But when I wore Magisk, it worked
[Android Software/Hacking General [Developers Only]] cocchiararo:
with phh, i made adaway work by downloading the hosts file to /data/hosts, and when it failed to create the symlink, i took note of the command, rebooted to recovery and executed it there after mounting system as read/write.

ps: the command offered was for /data/data/hosts i believe, i corrected the path
[Android Software/Hacking General [Developers Only]] kryzeK:
So I download the hosts file to /data/data/hosts, reboot to recovery, mount /system and flash the systemlesshostv2 zip?
[Android Software/Hacking General [Developers Only]] cocchiararo:
Nope

Download there, adaways says that there is no symlink, offers to make it, fails and suggedt you do it.

You go to recovery, terminal, delete the /system/etc/hosts file and create the symlink

Enviado desde mi Nexus 6P mediante Tapatalk
[Android Software/Hacking General [Developers Only]] kryzeK:
I did exactly what you said. AdAway says it is turned on and successfully applied, but I still see ads :(
[Android Software/Hacking General [Developers Only]] talkaboom:
Well, Adaway can only block what is in the list in the host file. That is why for apps, some get through (at least for me, but I have pretty much stopped using apps that throw ads at me). For your browser, it is also possible that the ads you are seeing are embedded into the website's code.

You can add to the host files. Check the Adaway thread for more.
[Android Software/Hacking General [Developers Only]] Natakranta:
AdAway works fine for me on N ROM with PHH superuser 259. The trick to let it write newly built host file to system is to remount system r/w before opening AdAway. I use Material Terminal from Play, type "su", grant root to terminal, type remount command:

Here AdAway can't apply host file

Run in terminal

Successfully applied

The Answer to The Ultimate Question of Life, the Universe, and Everything is: CLEAN FLASH.
[Android Software/Hacking General [Developers Only]] deadcatsrule:
Im running a nexus 6 with purenexus7 and pph superuser I've tried terminal comands and still no luck in terminal it says access not granted
[Android Software/Hacking General [Developers Only]] Pkt_Lnt:
Try this using adb. It works for me on three different Nougat installs on my N6. PN, Nutty, Stock

http://xdaforums.com/showpost.php?p=69022330&postcount=1367
[Android Software/Hacking General [Developers Only]] deadcatsrule:
Thanks I'll give it try when I have time
[Android Software/Hacking General [Developers Only]] acts4:12:
Hey guys. I'm on a Nexus 6p. I'd like to try the new 7.1 Developer Preview. Has anybody on here been able to get phh superuser working on 7.1?
[Android Software/Hacking General [Developers Only]] mitchdickson:
Yes.
[Android Software/Hacking General [Developers Only]] acts4:12:
Thanks Mitch. I've only used SuperSU in the past. I usually just flash the latest zip in TWRP. I'm assuming it's the same procedure with phh, correct? If so, can you confirm which zip you flashed for 7.1?
[Android Software/Hacking General [Developers Only]] mitchdickson:
Coming from stock 7.0, I dirty flashed 7.1.1 system.img, vendor.img, and boot.img. Without rebooting, I then flashed Flash kernel and r266.zip, a PixelXL systemui/build.prop zip, wiped caches, and rebooted.

ETA: I had already flashed the 7.1.1 bootloader and radio a day or two ago.
[Android Software/Hacking General [Developers Only]] acts4:12:
Nice! I was hoping to maintain the stock kernel, but I guess I might have to flash a custom kernel to be able get root using phh. I think SuperSU has a script that patches the stock boot.img, but I'm assuming phh probably doesn't do that.
[Android Software/Hacking General [Developers Only]] mitchdickson:
My understanding is that you can use the stock kernel and obtain root, as phh does indeed patch the stock kernel, but that you will have difficulty editing the system partition.

You will also want to use the apk posted by [MENTION=5444464]PunchUp[/MENTION] here: http://xdaforums.com/showpost.php?p=69224582&postcount=1896
[Android Software/Hacking General [Developers Only]] acts4:12:
OK excellent. I may just flash the custom kernel and call it a day since I plan to get Google Assistant up and running and I know I'll have to modify the build.prop to do that.
[Android Software/Hacking General [Developers Only]] casley79:
I ve problem with Titanium Backup app... I can t restore any app and it stuck to 0%,maybe because of outdated binary files. Any fix?
[Android Software/Hacking General [Developers Only]] acts4:12:
Hey which version of Flash kernel are you running on the dev preview? I read some people on dev preview with flash kernel were having some issues with their camera.
[Android Software/Hacking General [Developers Only]] Aziziamran:
I'm running cm12.1 with magisk v8 and phh superuser r259.. running well but I can't install phh app via play store or via apk download.. Additional info, I've free storage around 3gb.. [IMG="screenshot_22oct"]http://imgur.com/5zs9gLj[/IMG]
[Android Software/Hacking General [Developers Only]] Sam Nakamura:
What's the error message when you install the apk?
[Android Software/Hacking General [Developers Only]] woolmonkey:
Can't get this working on the Pixel C with 7.0 Just get the red exclamation mark when rebooting.
[Android Software/Hacking General [Developers Only]] ragnarokx:
Didn't see anything in 1st post or search — is it not possible to get SafetyNet to pass with phh superuser atm?
[Android Software/Hacking General [Developers Only]] heslo.rb26:
I got SafetyNet to pass with phhSU on my HTC10, but I couldn't hide root (which is more important to me currently) so I've switched to SuperSU and Root Switch. But yes, it is possible to pass... I also had Magisk and xposed installed (although xposed needs to be disabled to pass)
[Android Software/Hacking General [Developers Only]] Pkt_Lnt:
This is all over the Internet. XDA, Reddit, Andoid _________ fan sites.

http://www.xda-developers.com/android-safetynet-now-reportedly-tripped-by-unlocked-bootloaders/
[Android Software/Hacking General [Developers Only]] alexpower:
Unlocked or locked bootloader

Gesendet von meinem HTC 10 mit Tapatalk
[Android Software/Hacking General [Developers Only]] 3dawg:
What is the best method of removing phh superuser? Flash boot.img?
[Android Software/Hacking General [Developers Only]] ridobe:
Precisely
[Android Software/Hacking General [Developers Only]] heslo.rb26:
Unlocked and S-OFF, but had to use the xSetProp module in Magisk to get it to pass
[Android Software/Hacking General [Developers Only]] :
I found something that solves a lot of AdAway & Titanium Backup issues that are returning errors of "No Root Access" when run.

Turns out I had SuperSU and phh installed. When I typed "which su" in a terminal emulator, I figured out that SuperSU was still being used as the primary superuser in /sbin/su (apps like TiBu/AdAway were designed in the code to do this) rather than the modified boot image with phh's superuser pointing to its su command.

I tried reinstalling SuperSU's ZIP in recovery and trying the "Full Unroot" and "Switch Superuser" again -- they didn't do anything. I restored a Nandroid backup of my system.img file (disclaimer: I dirty flashed using FlashFire), and it was corrupt because of the SuperSU installation in the /system directory.

I googled "superuser binary in sbin su" and found a GitHub issue which was referring to Koush's superuser (which phh is a fork of). I deleted /sbin/su, the directory /supersu, /system/bin/su, /system/xbin/su, /system/xbin/supolicy, /system/etc/install-recovery.sh, and /system/etc/.installed_su_daemon in recovery (the supersu directory with rm -rf /supersu).

You can also reflash the FACTORY system.img & boot.img or ones without SuperSU installed already (e.g. modified build.prop).

Now I don't see "access denied" when I type in /system/bin/su in a terminal, or have 2 conflicting superuser installations. I can't believe there isn't an official uninstaller ZIP that accomplishes this in case of errors, and the only method that is widely used doesn't work.

Now TiBu works just fine and phh superuser correctly displays root prompts and works like expected.

[MENTION=5444464]PunchUp[/MENTION] I also noticed something strange in the unofficial Superuser beta app (beta v9): when I scroll down to "Titanium Backup", the app crashes. Will there be a fix for this?
[Android Software/Hacking General [Developers Only]] Pkt_Lnt:
Most of us did all those steps to remove all SuperSU traces *before* flashing phh SuperUser. Glad you got it solved, I can see where not being diligent in removing SuperSU first would create a mess.

The issue with TiBu section crashing the beta 9 app does not happen for me, and I have seen no other reports. Please post a logcat of the crash for PunchUp. It seems to be only you so no need for an overall fix it seems. It might be an app you are running that I do not use. Either way, a locgat of the crash will identify WHY it crashes.
[Android Software/Hacking General [Developers Only]] :
I looked at the logcat, it might be a coding error. It might be related to the way Titanium Backup works when a function (getting icon or logs?) is called inside of the app.

Attached is the full logcat.

Below is a snippet of the full logcat where the error occurs.

10-22 23:16:54.576 1018 3353 I ActivityManager: START u0 {act=com.android.systemui.recents.SHOW_RECENTS flg=0x10804000 cmp=com.android.systemui/.recents.RecentsActivity} from uid 10027 on display 0
10-22 23:16:58.884 1018 4405 I ActivityManager: START u0 {cmp=com.keramidas.TitaniumBackup/o.ᐹ} from uid 10081 on display 0
10-22 23:17:00.706 1018 18222 I ActivityManager: START u0 {act=com.android.systemui.recents.SHOW_RECENTS flg=0x10804000 cmp=com.android.systemui/.recents.RecentsActivity} from uid 10027 on display 0
10-22 23:17:01.490 1018 4405 I ActivityManager: Killing 26852:com.keramidas.TitaniumBackup/u0a81 (adj 9): remove task
10-22 23:17:01.491 1018 4405 I libprocessgroup: Killing pid 27478 in uid 10081 as part of process group 26852
10-22 23:17:01.491 1018 4405 I libprocessgroup: Killing pid 27768 in uid 10081 as part of process group 26852
10-22 23:17:01.537 1018 3353 I WindowState: WIN DEATH: Window{be485b5 u0 com.keramidas.TitaniumBackup/com.keramidas.TitaniumBackup.MainActivity}
10-22 23:17:03.003 28613 28613 E AndroidRuntime: FATAL EXCEPTION: main
10-22 23:17:03.003 28613 28613 E AndroidRuntime: Process: me.phh.superuser, PID: 28613
10-22 23:17:03.003 28613 28613 E AndroidRuntime: java.lang.NullPointerException: Attempt to invoke virtual method 'android.graphics.Bitmap android.graphics.drawable.BitmapDrawable.getBitmap()' on a null object reference
[Android Software/Hacking General [Developers Only]] Sam Nakamura:
Sultan xda already found a patch for this, it's yet to be implemented on his cm13 for oneplus3..

http://www.xda-developers.com/sulta...otloader-check-on-latest-cm13-builds-for-op3/
[Android Software/Hacking General [Developers Only]] PunchUp:
He has already released a build with this. But it probably won't last too long :p
[Android Software/Hacking General [Developers Only]] Sam Nakamura:
Ye' ol' cat & mouse game.. :cyclops:
[Android Software/Hacking General [Developers Only]] adrman:
The latest Franco Kernel has the CTS commits and I'm running it with r266 hidesu, but still not passing Safetynet. I don't really care anymore though, as AP just isn't worth this amount of trouble to me.
[Android Software/Hacking General [Developers Only]] Pkt_Lnt:
I'm Nexus die hard fan.
[Android Software/Hacking General [Developers Only]] Sam Nakamura:
Yeah, I understand :) but as I understand other people already included this commit in their rom, have a look at the comment section of the linked article, a guy implemented that already in his s5 rom, means it's a matter of days when it will hit the nexus roms.. By the way :angel: may the nexus line rest in peace, I'm suspicious if a pixel phone can stand up to it - I mean even pricing, Verizon, ohhh my God..

Enough off topic & sorry..
[Android Software/Hacking General [Developers Only]] Pkt_Lnt:
I have some background in security in a previous life, and this is a loosing battle. People think it is Google, but they are just responding to the pressure of the financial institutions for security, and they don't want to loose to the security of the Apple security model. That is why the Nexus line is gone and with the Pixel, you can choose to modify, loose security, and be blocked or keep it bone stock.

^^^^^ This. I'm done with battle, and will get a 6P soon, along with my N6, knowing it is the last Nexus. :(
[Android Software/Hacking General [Developers Only]] craigacgomez:
I've got it working with Franco's kernel with the CTS patch on my Nexus 5X running 7.1.1 (preview), but not using hidesu. Here's what I did.

1. Flashed stock boot image (because I was using the hidesu seSuperuser)

2. Flashed Franco's kernel with the CTS patch

3. Flashed Magisk v8

4. Flashed Magisk phh seSuperuser (in the Magisk thread)

5. Rebooted and selected Hide Magisk from the Magisk Manager

6. Rebooted and the SafetyNet check passed!
[Android Software/Hacking General [Developers Only]] adrman:
Thanks. I might try it for fun. I was having some issues with Magisk in previous iterations, but haven't used 8 yet.
[Android Software/Hacking General [Developers Only]] Falitheman:
So is it just me or is hidesu not working anymore? I haven't been able to get on pogo for like 3 days. Is there a better solution out now?
[Android Software/Hacking General [Developers Only]] Pkt_Lnt:
Google now detects an unlocked bootloader and blocks you. There is a workaround for the OP3 running CM. This info is literally all over the web with every android related site, even XDA Developers, if you search a little.

http://www.xda-developers.com/android-safetynet-now-reportedly-tripped-by-unlocked-bootloaders/

http://www.xda-developers.com/sulta...otloader-check-on-latest-cm13-builds-for-op3/
[Android Software/Hacking General [Developers Only]] Captain_Throwback:
You have to use Magisk (with magiskhide enabled) + the xSetProp module if your device is one of the ones where the bootloader status is detected. Then you'll pass SafetyNet (for now). You'll also have to use the Magisk module version of phh's Superuser.
[Android Software/Hacking General [Developers Only]] snke:
Where i can find xsetprop? I have magisk v8 + phhsuperuser, but I can't find this module on magisk..
[Android Software/Hacking General [Developers Only]] Captain_Throwback:
http://xdaforums.com/apps/magisk/mod-magisk-v1-universal-systemless-t3432382/post69254095
[Android Software/Hacking General [Developers Only]] snke:
Thanks :good: it works on 6P?
[Android Software/Hacking General [Developers Only]] Captain_Throwback:
How would I know that?

Try it, and report back.
[Android Software/Hacking General [Developers Only]] snke:
But I need to write something in terminal? I don't know how it works this module
[Android Software/Hacking General [Developers Only]] Captain_Throwback:
No, you just install it.
[Android Software/Hacking General [Developers Only]] snke:
OK installed, reboot, still doesn't pass SN...but I need hidesu?
[Android Software/Hacking General [Developers Only]] Captain_Throwback:
No, you need to enable magiskhide if it isn't already, and you probably also have to do this: http://xdaforums.com/apps/magisk/mod-magisk-v1-universal-systemless-t3432382/post69254197
[Android Software/Hacking General [Developers Only]] snke:
I followed the instructions, it works! All green! Thanks again ;)
[Android Software/Hacking General [Developers Only]] yochananmarqos:
You forgot to mention installing Magisk Manager and the phh superuser app.

Are you able to use Android Pay?