yashsingh1/xdaforums huggingface dataset:
[Magisk] tmviet:
So if I've understood for play service It isn't possibile Hide magisk and root too and Will be not possible use e.g. now tv, Netflix apk ......

Inviato dal mio ONEPLUS A5000 utilizzando Tapatalk
[Magisk] Didgeridoohan:
Magisk can still hide itself just fine. What can't be hidden anymore is the unlocked bootloader, and that triggers the CTS profile check in SafetyNet.
[Magisk] biikman:
So far with ctsfail Netflix is still available to me.
[Magisk] HippoMan:
​

Given that Android is built on top of linux, I'm wondering of there is a way to set up a chroot jail on top of a pristine-looking environment within which apps could optionally be set up to run. This might still allow us to be rooted, with those apps not being able to detect that.

I'm going to investigate this possibility, although due to my having a day job, I probably won't make any quick progress.

.​
[Magisk] tmviet:
What's ctsfail Netflix, work with root ?

Inviato dal mio ONEPLUS A5000 utilizzando Tapatalk
[Magisk] wangdaning:
Double post
[Magisk] biikman:
I can still download Netflix with ctsprofile failing in magisk.
[Magisk] wangdaning:
It is checking at the hardware level, so that is not going to get into there and fix that. It is not detecting root, it is detecting a bootloader state.
[Magisk] hyborian:
Now someone wants to sue because his cts is failing, crazy

https://github.com/topjohnwu/Magisk/issues/2534
[Magisk] tmviet:
Ok so with root , Magisk can't do anything about Netflix, infinity from playstore.

Inviato dal mio ONEPLUS A5000 utilizzando Tapatalk
[Magisk] HippoMan:
As far as I know (and I might be mistaken), the bootloader state is checked by means of accessing something in the device's filesystem and inspecting or running it. A chroot jail sets up a fake filesystem from root on down, and any software entities that any program accesses from within this jail will be the ones that are resident in the fake filesystem, and not the real ones.

PS: The procedure I'm thinking about might look something like the following ...

(1) Before unlocking the bootloader, run some kind of utility to take a snapshot of the entire filesystem of the device.

(2) Unlock the bootloader, root the device, etc.

(3) Create a directory on the device called, for example, /origroot, or any name you want.

(4) Copy the entire originally saved filesystem into /origroot.

(5) Set up a chroot jail with /origroot as the root.

(6) Copy various apk's into the appropriate subdirectories of /origroot.

(7) Write some sort of utility to invoke programs and apk's from within the chroot jail.

(8) Use that utility to run the apk's that you put into the chroot jail.

I have no idea if this would actually be possible, and I don't currently know how steps 7 and 8 could work ... or even if these steps could be implemented in the first place. The devil is in the details. But perhaps something like this could work as a new way to manage SafetyNet on rooted devices.

.​
[Magisk] xunholyx:
All of a sudden starting this morning, CTS passes again. ?
[Magisk] josdehaes:
I did not check in magisk, but was able to use gpay this morning. Op7t, omnirom with March updates.
[Magisk] garylawwd:
Same as [MENTION=4987085]xunholyx[/MENTION]

Stock mi A3, android 10, just magisk installed no system mods and safetynet just started passing today again out of nowhere.

I'm sure it will fail again within the next few days but strange behaviour
[Magisk] Exokan:
Same... do you think it's because of the potential lawsuit ;)
[Magisk] pndwal:
Interestingly (apart from these sudden passes just now) a solution (of sorts) has been found to restore CTS pass on Pocophone (Pocophone telegram channel).

Simply by flashing a different version stock persist.img - apparently one supporting the lower Widevine DRM certification level, L3 (disabling L1, ie. certification required to stream HD content in Netflix etc), and by using props to change device fingerprint, CTS passed and relevent apps work again after clearing storage and cache.

Seems this has to do with L3 certification not using TEE cryptology allowing CTS to pass.

https://www.google.com/amp/s/www.androidauthority.com/widevine-explained-821935/amp/

This makes me wonder not only if flashing such a persist.img will work for other devices, but more importantly:

Is CTS fail being tripped only during a Widevine L1 certification authentication process? Also, are many older devices (that presumably are only L3 certified) passing simply because they never try to authenticate DRM certification through TEE? And would requesting only L3 status confirmation (IE, settling for low definition Netflix etc) allow CTS to pass university?

Comments? PW

---------- Post added at 03:24 PM ---------- Previous post was at 03:14 PM ----------

HaHa!

Passing just now on my MiPad4 also.

Don't think it's the lawsuit - That guy has no leg to stand on and now knows it from a number of people incl. John Wu.

I think Google's reading these threads (and Twitter ones of course, where they've even made helpful comments on this Saga), and are now pulling the strings to see us dance! ... At least, that's what I'd be doing. ;) :D PW
[Magisk] tmviet:
Me too pass the safety check on Playstore with old S4 rooted with rom Lineage 14.1

OT: problem Is with root, magisk and apk from playstore like Netflix, infinity...

Inviato dal mio ONEPLUS A5000 utilizzando Tapatalk
[Magisk] curiousrom:
Read the XDA portal article Magisk may no longer be able to hide bootloader unlocking:

"...This is because all devices that launched with Android 8.0 Oreo or higher are required to have a hardware keystore implemented in a TEE."

***
[Magisk] tmviet:
It isn't for me because Lineage 14.1 Is based on Nougat 7.1 and beelink gt1 ultimate has Marshmallow 6.0.1

Inviato dal mio ONEPLUS A5000 utilizzando Tapatalk
[Magisk] radii:
...but we lose the simple toggle?

will we have to do some command line/ terminal command to hide apps (aka more complicated)...
[Magisk] Citizen_Snips:
Yes, here.

http://xdaforums.com/showpost.php?p=68916597&postcount=3706
[Magisk] Captain_Throwback:
It's the last thing in the v7 changelog.

http://xdaforums.com/apps/magisk/official-magisk-v7-universal-systemless-t3473445/post68966755

EDIT: But more directly stated in the post quoted above ;)

Look at the suhide thread for information. For just hiding SafetyNet apps, nothing is needed besides flashing the suhide zip. The toggle was removed because with the new methods, toggling root is unnecessary.
[Magisk] ELGeeRo:
Which I dont think is accurate.

The problem is that Magisk had the toggleable option to unmount the /su so that the phone had the wanted unroot status, if im not mistaken.

The new methods (aka suhide) just hide the root from other apps which is in short terms ofcourse the better option.

But like chainfire rightfully wrote in Hiding root: a losing game - rant du jour, this option is a race with the SaftyNet-Devs while the former Magisk option seems like a reasonable compromise for both parties involved.
[Magisk] JudgeDread11:
I agree with what you're saying but I think it's something for root developers to implement, not in magisk. Also because if its part of magisk, magisk itself will not be just a modding platform anymore and will be targeted as a security threat. So eventually safety net would be set to check for magisk itself rather then root.
[Magisk] Mancala:
Hi,

I have a LG V10 VS990, which does not have TWRP. Where would I find TWRP for this VS990? Please and thank you!

Am I able to put my VS990 to download mode then flash Magisk v.6 & phh's SuperUser 17 (Magisk Version) to my VS990 using my PC LGUP, RSD Lite, or something else, however, I'm not sure whether LGUP nor RSD will flash a direct file that is .zip? Please and thank you! How else am I able to install Magisk v.6 & phh's SuperUser 17 (Magisk Version) to my VS990 without TWRP? Please and thank you!

Thanks,

Mancala
[Magisk] knpk13:
Yay v7 released!

[MENTION=4470081]topjohnwu[/MENTION]

The installation instructions say if SuperSU is already installed then I should install magisk from the app. Instead of that, Can I flash the magisk zip after flashing SuperSU zip?

I updated using magisk manager, with SuperSU and system xposed already installed. It seems to have converted my system xposed install into systemless xposed, am i right? (That's what the xposed installer app says)

Also, I assume systemless xposed and all other magisk mods meant for v6 still work on v7?
[Magisk] RusherDude:
Thanks :(

Terrible move. Magisk was gaining popularity due to this, why the need to remove it? If people can end up getting it on phh's root or even supersu with suhide (not sure how all that works honestly.. magisk was a simple toggle for f*** sake...), Magisk is no needed anymore for most of people. This is going to damage the suddently increasing number of Magisk users.

Where is all that? suhide was a veery alpha mod released by Chainfire with not even an UI (or I missed lsomething ately?) for it.... and phh is working on a feature but nothing yet .......... and yet this was a damn easy toggle!!!!! (or not even that, with AutoMagisk!!!)

Seriously, you guys can't say that the dev removed the feature because he didn't want to bypass SafetyNet when in his main post about Magisk he exlpained how to bypass it and that you had to use phh's because SuperSu wasn't compatible until Chainfire fixed the app_process problem (and explained why).

So the op either got pressured by Google or anything, but Magisk is losing a ton of users with this. Bad move.

EDIT: Also the dev isn't letting anyone download previous version (v6) because "closed source binaries". Sure.......

Download Magisk v6 from here guys:

http://xdaforums.com/devdb/project/dl/?id=19960&task=get

phh-superuser-17-magisk.zip from here:

http://xdaforums.com/attachment.php?attachmentid=3847928&stc=1&d=1471642336

Magisk Manager v1.2 here:

http://xdaforums.com/devdb/project/dl/?id=19924&task=get

With all this, v6 works.

Guys, this dev got pushed by Google lawyers or something. We lost this. Share v6 however you can for those that are interested in it. The dev didn't care much about it being closed source when he posted the link for months after all.

[MENTION=4470081]topjohnwu[/MENTION] You can as well remove Magisk from XDA after this.
[Magisk] Didgeridoohan:
Wow... Magisk was never about bypassing SafetyNet, that was just a side effect. topjohnwu even stated quite early on that he regretted working on getting Android Pay to work with a rooted system because it was such a hassle.

Just, wow...
[Magisk] garthybarthy:
Regardless of if it was made for bypassing safetynet or not, the fact is most users use magisk to bypass safetynet. That's the only reason it gained so much popularity.

There's nothing wrong with the way it's now going though.
[Magisk] skidaway:
Overreact much?
[Magisk] wabicek:
So far I'm pretty disappointed with the new release...
[Magisk] Captain_Throwback:
What are you using it for?
[Magisk] Shockz:
You can always go make your own solution to this. topjohnwu didnt have to work on this project at all, but he did and he spent many hours on it. He has repeatedly said that getting around safetynet was not the focus of this project and it makes sense because it will ALWAYS be a battle eventually lost and it's just not worth the time. This project is still amazing at what it is intended for and I will support topjohnwu all the way with this decision because now he will be able to focus directly on intended and new features.
[Magisk] :
Came by to post my success with version 6 only to find out v7 lost its root toggle.

Thanks for your work, it will be missed.

Edit: I hadn't seen your response as to why or the backlash it would cause. But I wasn't being mean and I truely do appreciate your work. And I realize the uphill battle against safetynet is not a winning battle.

To be honest I loved the toggle and it introduced me to magisk which I plan to continue using. I'll just wait a bit until I find a replacement toggle.

V6 was easy to install on a smg900w8.

I wasn't able to get the viper module working as it kept asking for drivers but i will attempt it again with my phones stock rom soon.

Thanks again ?
[Magisk] Aakash Kaushal:
Just Installed v7 now..pokemon go again not working with latest xposed (v86.6)..so whats the purpose of v7 then??.

Sorry im not complaining but i thought that pokemon go will work with latest xposed in magisk v7..
[Magisk] Captain_Throwback:
Are you using SuperSU & suhide?

Magisk itself does not hide anything.
[Magisk] Aakash Kaushal:
No im not using any suhide or supersu...

My configuration

Phhsupersu

Xposed 86.6 module systemless

Magisk v7

Magisk manager v2

Note-rbc wallet app working fine though in v7 but pokemon go stuck at loading screen..maybe latest xposed is causing this issue like in the previous v6...
[Magisk] westeight:
Apologies for the cross post, but [Magisk] [2016.10.4] phh's SuperUser r259 won't flash in TWRP.

Tried it on both my phones (HTC 10) ... same error on each:
[Magisk] topjohnwu:
Before raging about the root toggle be removed, please take a look at my announcement, you'll know why I made this decision

Announcements for Magisk v7
[Magisk] phelite2015:
i think google updated there server

everybody now passes CTS profile and phone is certified in playstore..

check yours..
[Magisk] mochamoo:
Good here too. Pixel 4xl. Magisk stable. Yay!
[Magisk] dettofatto:
Also mine passed now!!!

S10, with android 10 rooted and exposed!
[Magisk] Lughnasadh:
Can also report that as of this morning ctsProfile is also passing on my Pixel 2XL stock, Magisk 20.3, Caseium kernel, where it wasn't before on same setup.
[Magisk] dswwong:
Can someone advise how to use the font changer in magisk.

Is there a tutorial on this?
[Magisk] darkbahamut:
My ctsProfile now passes too, but no apps that check for root work anymore so it doesn't seem to have really changed anything.
[Magisk] Exokan:
I dunno what you mean... all of my apps that require root work fine (Adaway, Terminal Emulator,MiX, etc.).
[Magisk] darkbahamut:
I mean apps that are blocked when root is detected (banking, PoGo, etc) all still detect the phone is rooted even though they are still hidden. They stopping working when the cts check failed but now that it passes the apps haven't started working again.

Basically the devices are 'passing' but they don't really seem to unless something else has started happening.
[Magisk] badaas:
Google got Corona, .. normal service is resumed
[Magisk] Exokan:
Gotcha, misread your post. I don't really use any apps that respond to that check (yet). I suppose that my Play Store is not certified but that seems to happen randomly anyway (at least I never gave it much thought).
[Magisk] Frostbiter:
Clear the app cache, if that doesn't work clear the app data and then they should work fine.
[Magisk] darkbahamut:
Tried that. Cache+data cleared, double checked Magisk hide, app still detects rooted device.
[Magisk] ooonea:
Magisk test is not reliable. John Wu say that.

Inviato dal mio MI 9 utilizzando Tapatalk
[Magisk] CSX321:
My banking apps are still working on my Pixel 3. Although actually they were still working through this whole thing, even when CTS was failing. Play has always said certified, as well.
[Magisk] aleMarvel:
but i not understand.. mario kart and mc donald don't work with magisk BUT

if i hide magisk folder and hide these app -> works

if remove magisk (lose root) -> app works

the problem is magisk ? google safety check only if image boot is pached with magisk ? rom and recovery ?
[Magisk] Philnicolls89:
You can't fix it

*edit* my cts profile is also passing again this morning! Count that as a win (for now)!
[Magisk] zgfg:
We were actually discussing for days here the CTS failure due to detecting unlocked Bootloader, not because of detecting root or Magisk.

Although, even rooting is not that naive

Before releasing, every phone model must be attested by GCF to conform to the 3GPP standards.

In the old days of 2G it was only calls and SMS and baseband was in hardware

By now, things have changed - modems are software configurable and everything is data centric and controlled by IMS - even the VoLTE calls

Hence, the tampered phone is no more the same mobile device that was originally attested - its behavior on the mobile network can be affected by simply editing build.props on the rooted phone, not to think about custom ROMs

You or me can argue that we rooted our phones only to get rid of ads and to enhence audio or so.

However, once we unlocked our Bootloaders we could have also installed custom ROMs but faking device fingerprints.

If such a day (ever) comes, are you going to pay for attestation of your custom mobile device, to prove that it still confirms to the standards and requirements ???

But forget and enjoy for now, Google has reverted the SafetyNet backend side, and by help of Magisk, CTS Profile attestation does not fail due to detecting an unlocked Bootloader (just like it worked before the previous Friday, i.e. opposite to how it worked during the last seven days)
[Magisk] ZellZoy:
Randomly passing again too. Pogo never stopped working but mario Kart still doesn't work even after uninstalling and reinstalling it
[Magisk] tmviet:
Better clear cache and reboot device.

Inviato dal mio ONEPLUS A5000 utilizzando Tapatalk
[Magisk] imsaguy:
Gah, I relocked my bootloader too soon. Do I dare go through another wipe? ?
[Magisk] Philnicolls89:
Damn rookie mistake! But now that you know what your doing, the procedure shouldn't take to long. Just back up data and apps to an SD card, wipe and reroot. It might take a few hours to set up your rom how you like it though but definitely worth it imo.

Seems Google has temporarily backflipped on it's roll out so we could still have moths before the decided to do it again.
[Magisk] imsaguy:
When I installed March Security update, my data partition got screwed up and I had to factory reset to fix. Then I factory reset to relock. This would be my third reset in a week. I don't know if I can stomach it at this point. Especially given that this reprieve could be very short term.
[Magisk] Keiuran:
Will it even be possible to install apps that require root to run without an unlocked bootloader? Can stock pixel android get root and then run rooted apps? If they can I'll start transferring over to stock because I don't think Google is gonna back down on this in the long run. Still ridiculous they let apps that don't need that kind of security like Pokemon Go and Netflix use the SafetyNet API so this essentially forces everyone back to locked bootloaders and all that entails.
[Magisk] zgfg:
API is free and any developer can use it - although they must register for a quota on the Google backend

You can develop a tic-tac-tou game, putting that players must first attest for SafetyNet
[Magisk] imsaguy:
No. The whole point of this is that they don't want users running as root. As root, you can do anything, fake anything (minus some hardware attestation) so they're closing that as best as they can.
[Magisk] pndwal:
Just to air some dirty laundry:

This is reminiscent of the time Google hit Steve Kondik with a cease-and-desist order for including proprietary GApps with his ROM (when Cyanogenmod was pretty much a one man operation). He thought and posted that CM was dead and almost ditched the project.

Google of course had a perfect right to do this, but seemed to realise they were SHOOTING THEMSELVES IN THE FOOT pretty quickly and issued clarifications that they would still allow GApps to be sideloaded by end custom ROM users (but not packaged with custom ROMs) in short order.

Thence OpenGapps.Org was born, Cyanogenmod flourished, LineageOS and other custom ROMs followed, and all was well in the land of Custom Customers... And Steve Kondik went to work for Samsung...

Sure hope Google is looking to reverse or mitigate damage from what could prove to be a bad stain on their symbiotic (some would say vital) relationship with the custom Android community at this time too.

Meanwhile, they're putting us through the old wringer guessing at the possible repercussions. My guess is that it will all come out in the next wash cycle however.

At least John Wu's not washed up - he's got a bright new career with Apple if he wants it (did Google miss the boat there?)... Seems Google now has a lot to prove... to everyone! Hope we (MagiskSU users) get a clean start too. (- I'm not holding my breath, but I keep getting a whiff of something in here.) PW
[Magisk] robertb45:
I'm using latest stable, I tried uninstalling and reinstalling but didn't do any difference
[Magisk] bharod:
Magisk Hide now didn't work for banking apps.

Banking apps now detect the package name

Please solve this, Thanks
[Magisk] Philnicolls89:
You can't generalise like that, your specific banking app is using a specific method to detect root that is Making it not work. Without detailed information it is impossible to determine the cause of your issue. It could be magisk or a million other things that it is detecting.

For example my banking app works and worked even when I failed safety need, so it obviously doesn't use that method of detecting root, hiding it with magisk was enough to bypass it's security features.
[Magisk] ktmom:
Lots of help in: https://www.didgeridoohan.com/magisk/MagiskHideHidingRoot
[Magisk] zgfg:
Maybe check the post #38591 and try to do it manually:

https://xdaforums.com/showpost.php?p=81928487&postcount=38591
[Magisk] bharod:
Cause when I change the package name my banking apps works well.

And the problem is when I change the package name my phone got bootloop
[Magisk] imsaguy:
:eek:

Repackaging Magisk under a random name is part of magiskhide.

Disable all Magisk modules and rename to something random. If that works, then turn on modules 1 by 1 to figure out the offender.
[Magisk] dswwong:
Can any expert advise how to change font after downloaded the font changer in magisk.

I can't find any instructions or tutorial to do this.
[Magisk] robertb45:
Thank you, I'll try to do that
[Magisk] pndwal:
No idea, but clicking the module in Magisk Manager, Downloads, usually brings up mod Dev's notes, references and links. PW
[Magisk] Krosa:
I can also confirm as of today, cts is passing correctly and device shows as certified

Pixel 4 Xl March update
[Magisk] Dylan Hameleers:
Well.. This was it boys.. My oneplus 7 pro no longer passes safetynet ;-;
[Magisk] Didgeridoohan:
You're failing both CTS and basic integrity, which means you've likely got something else going on. The basic integrity check is an on-device check that Magisk shouldn't have any issues dealing with.

First thing to try: toggle MagiskHide off and on again.

Second thing to do: https://didgeridoohan.com/magisk/MagiskHide
[Magisk] Dylan Hameleers:
oh wow you're right.. Just rebooted and its good again? lol
[Magisk] @ayahfachri:
Ha! Same thing with my Mi8 using PixelRom. It is now cts passed and device certified. :good:
[Magisk] pndwal:
It may be no coincidence this occured on this device, and sadly it seems this is actually an indication we shouldn't expect this reprieve from Google to last (as it is apparently due to false fails on OnePlus 7 Pro - nothing to do with Fri 13th!).

Twitter users report Google reverted it because OnePlus [messed up] their Key Attestation (apparently on OnePlus 7 Pro specifically) so Google is waiting for them. Nb. I have no idea about the validity of this claim.

John Wu (_@topjohnwu) earlier commented:

--------------------------------

More positively (relevently but possibly OT), Shawn Willden (_@shawnwillden), 'Tech Lead for Android hardware-backed security subsystems' commented:

Luca Stefani (_@luca020400), 'Director _@LineageAndroid, Developer _@strongapp' responded:

Shawn Willden (_@shawnwillden) replied:

Could this be One Small Step for a Custom ROM Director/Developer, One Giant Leap for a Custom Mod Community? ... Custom ROMs certified to pass Compatibility Test Suite natively!

--------------------------------

Also FWIW, other conversations with Shawn are equally interesting. Eg: Amine Izumi (_@Amineizumi) wrote:

Shawn Willden (_@shawnwillden) replied:

Of course, SafetyNet pass could still be achieved with Magisk root.

Food for thought? PW