yashsingh1/xdaforums huggingface dataset:
[Magisk] BenDavid:
What's the worst possible implications of this change in terms of the custom ROM scene?

Edit: Nvm I just read the updated SafetyNET doc. It's bad.
[Magisk] Piniata7:
If you need to use apps that won't pass safetynet, or if more apps implement safetynet now that it works, it means you're going to have to lock bootloader meaning no current way of booting custom ROMs afaik.
[Magisk] JudgeDread11:
Custom roms, unlocked boot loaders, and rooted devices will not be able to run apps that use safety net. So you need to make a choice.

That's it.

Magisk will still root your phone and offer the convenience of running mods.

But a big part of the work in it was too hide these.

Magisk hide will be useless and where mods are systemless or not won't make a difference anymore. (Although this might not be true since with Android 10 the system is not writable)

I just hope this doesn't take the fun out of it for topjohnwu and he will keep developing magisk.
[Magisk] zgfg:
Take a look to the screenshot table in yesterday's post #38709: https://xdaforums.com/showpost.php?p=81982197&postcount=38709

Edit: Seems you read that
[Magisk] aariss:
Now ok aldy

Tq
[Magisk] hyborian:
Why do I see some posts about Android 10 system (as root) not being writable ? I can still write to /system - .e.g. change my boot animations in /system/media, modify google.xml in /system/product (Naptime can also do the same thing), etc
[Magisk] badaas:
Huawei here we come...
[Magisk] rodken:
Disadvantages of Telegram:

When you bind to a phone number, This offers an opportunity to find out all your contacts information and send them to the server, The main drawback is not just showing your contacts, almost any state security service can add all the telephone numbers in the country to their contacts, so, you can find out what people are registered on the social network, and when they last visited it.

When the messages are sent via an ordinary, rather than a secret chat, then formally, they are not encrypted, you should not think that your provider can read any of your messages easily, because all the dialogues have a closed protocol, Although, all messages are on a special Telegram server, When you re-enter your account, they go there.

The contact list is based on phone numbers & it requires contact permissions on mobile devices, Telegram for PC version either has not been fully developed yet, or its development has stopped, as there are no secret chats in it, This feature is available exclusively on mobile devices, When you upload a new profile picture, the old one stays there as well, so, you have to delete it manually.
[Magisk] hyborian:
lol ... no Google stuff. But we still won't be able to use the apps that check Google's safety net; unless, they also show up in Huawei's store.

---------- Post added at 02:31 PM ---------- Previous post was at 02:25 PM ----------

Noted, thanks. I'm fine with all that. There really is some good information about custom roms, kernels, etc on Telegram for my devices at least. Sometimes, it's overwhelming when there are so many members since it's hard to keep up. Here, everything is at a leisurely pace. Where we can have 10 posts a day in this thread for example, one can get 10x that over there; one has to sift through for the quality posts.
[Magisk] ScottIsMyName:
Just to confirm, rolling back to February patches won't fix this right? It's a play services thing?
[Magisk] hyborian:
Only fix is to relock your bootloader ...
[Magisk] ktmom:
How many bricked devices are going to show up because people locked their bootloader without fully returning to stock? [emoji56]
[Magisk] GTMoraes:
So far, everything seems to be working here on my side, even with CTS fail. I could add cards to gpay, verify on all my banking apps, Netflix's on play store, could get my McDonald's coupons lol

I wonder how far app devs will block it, seeing that Huawei is still huge and active, and they'll seemingly also fail CTS.

We might be covered by the google-huawei issue for a while, while you guys don't find out a way to hide bootloader status (c'mon, we had a head start, changing fingerprint was too easy lol).

If nothing, let's just hope devs won't be that tight with CTS failures.

Enviado de meu MI 9 usando o Tapatalk
[Magisk] crakos:
Hey man, I have tpwr with magisk and bootloader unlocked, If I LOCK de bootloader now, what happen? I lost root? I can unlock again bootloader easyly or can't unlock anymore?

and how lock bootloader with magisk without brick?

thanks in advace
[Magisk] Peter the Great:
Wait, the only solution is to lock the bootloader? Is there no way to "hide" an unlocked bootloader? I'm not an Android dev, this is a genuine question. Obviously there's currently no method of hiding it, but is it certain that there is absolutely no way of achieving this? Like in the future, after lots of hard work, is it guaranteed to not be able to spoof this condition? I'd like to know if the answer is known. I still have hope.
[Magisk] Pkt_Lnt:
https://xdaforums.com/showpost.php?p=81989143&postcount=38751
[Magisk] pndwal:
Yeah, that seems to be G's objective.

I think we've all previously wondered why app devs needed to use their own methods to detect customised setups and quickly realised that SafetyNet has simply not been implemented properly. Whiie good for custom modders it has therefore obviously been unusable for developers with serious security concerns.

Seems G is now simply making SN & CTS reliable for these developers and in so doing, making Android a more competitive platform. Happily for MagiskSU users this has really been too long coming, but inevitable I guess.

Now, what John Wu says makes a lot of sense (sadly): "So here we go, after years of fun messing around using Magisk, it seems that Google FINALLY decided to "fix" SafetyNet to something useful, and that is to use key attestation to verify device status (after 3 years since introduced to Android's platform!)...

We might be able to hack around temporarily by forcing key attestation failure, fake report keymaster version, manipulate cached check results etc, but all of them is meaningless after this change is fully deployed AND properly implemented. Let's face it. Fun is over guys."

https://mobile.twitter.com/topjohnwu/status/1237656703929180160

Maybe they feel there is more to prove since they let John W slip through their fingers to work for Apple too. (...sigh.)

Long live MagiskSU and the Magisk Module.

RIP MagiskHide. PW
[Magisk] Philnicolls89:
:crying::crying::crying: I absolutely hate stock roms! I will not be moving to Apple EVER but androids appeal has always been it's open source and customizability (if that's even a word!) I get why Google have done this and hopefully phone makers e.g. samsung etc will make there stock roms for heavily customizable in the future (wishful thinking I know). Anyway for now RIP to all you hard working developers out there and good luck.
[Magisk] H4rl0ck71:
Pixel 3xl safety net issue

Hi, Im having the same issue after the march update, also noticed that on Play Store it says device not certified. Not sure if both are related, bit according to what i have learn it might be related to the bootloader status. If anyone have knowledge of what going on please let me know. Thanks.
[Magisk] ktmom:
Uhmmm, it would be quicker if you just read the last few pages of this thread. This has been under discussion for a day+
[Magisk] crakos:
Yes, I know read..... my question is some tutorial for lock bootloader without brick the phone and still root with magisk.
[Magisk] Pkt_Lnt:
Not possible, period.

If you lock the bootloader WITHOUT the phone 100% STOCK. IT WILL

BRICK

,.
[Magisk] zgfg:
Everyday XDA looks more and more like Telegram group.

Many juniors do not read except for the very last previous post (or hardly even that)

If there is a longer guide or something, many cannot concentrate to read but ask instead tens of sub-questions.

And cannot search for simple things but ask the others to search for them and give them links

Also, for many is too complicated to break questions into particular forums and threads but ask everything together (e.g., how to root, flash custom ROM, about compatibility of modules and XPosed stuff) - like on Twitter or Telegram where one group fits all

Somebody recently asked about the difference between XDA and Telegram - unfortunately, less and less ?

PS: Unlike on Social Media where everybody likes for nothing, here many take for granted that others should answer their questions without even clicking that thank icon for the valuable help
[Magisk] Schroeder09:
What should be selected under Google play services for magisk hide? This is not in regards to the recent CTS profile failure (I have that too). I checked everything under Google play services in magisk hide, and now I have massive battery drain. There were like 3 things checked under the okay services but I don't know what they were. I have Snapchat but that's the only thing I can think of that I use that sometimes cares about being rooted. What portions of Google play services need to get magisk hide?
[Magisk] hfam:
What an awful development. :(

Indeed, it sounds like last call, and the bar's closing for good. So sad. At the moment it's not affecting anything here, but if there's a sudden bonanza rush by devs to start implementing this **** on every app, it's going to really screw everything that uses root because nothing else will work.

This really is a sad day. I hope TJW or some other supergenius develops a means to defeat this crap, but I have a feeling that train has left the station.

I'll be around, still rooting with Magisk until I can't anymore, but super heartfelt thanks to the dozen or so superstars here in this thread who offered selfless help to all of us. Too many to call out, but all who helped know who they are and have my undying gratitude.

One more for the road....F you Google. Safetynet is ****.
[Magisk] wilsonhlacerda:
The standard Magisk selection is only the "unstable" of Play Services. Nothing more, no other part of it or any other app.
[Magisk] Archangel:
It could be the conspiracy side of me but I can see workers at Google laughing saying "wait til they get a load of this muuuaahhhh" LOL. As long as Magisk works I will use it until such point that a large majority of my apps deploy the new safety net checks.
[Magisk] joeo10:
Must read: https://www.xda-developers.com/magisk-no-longer-hide-bootloader-unlock-status/
[Magisk] pndwal:
Haha. Interestingly, [MENTION=4470081]topjohnwu[/MENTION] also said:

"I actually had a nice conversation with some engineers directly working on Android platform security a few weeks ago. They are well aware of this "proper fix". In fact, many people, including myself, already knew about this stuff for quite a while."

At least it's becoming affordable to keep two devices (one rooted, one not). But a pain to keep both in your pocket! With the extra memory available these days (esp with a/b devices) perhaps dual-boot may become practical at least on devices that can be rooted with locked bootloader. Or may dual bootloaders be possible someday? ... There's still scope for imaginative modding I think. PW
[Magisk] mochamoo:
Wasn't it the Google Store that sold us phones with unlockable bootloaders just a few months ago? Hmpf!
[Magisk] Archangel:
I have to say, I only purchased Pixel devices because the bootloader is easily unlocked and I can root it for Substratum only. Now, that there is rootless substratum on Samsung devices I guess that will be my daily driver. No pixel 4a for me unless there are very few apps that utilize this newer safety net check. I have never used gpay, pokemon, or any other app that relies on checking safety net so no big deal to me unless they all start going to this as a new standard.
[Magisk] zgfg:
Unlocked Bootloader/CTS Profile/SafetyNet - Google had to close the door since Corona virus marching

Vendor has announced new models for the end of the year: Covid-20 and Covid-20 Pro

?
[Magisk] pndwal:
My bet is that they will, and that seems to be G's objective.

It seems clear that developers with serious security concerns have been using their own methods to detect customised setups simply because SafetyNet has been unusable for them due to never having been implemented properly. However, with Google now making SafetyNet & Compatibility Test Suite results reliable, most, if not all developers of security-centric apps are bound to adopt it. PW
[Magisk] JudgeDread11:
That is device specific. Most device can relock the boot loader, but it might be different for every device.

Better check on your device forum.

---------- Post added at 09:54 AM ---------- Previous post was at 09:51 AM ----------

If you have the CTS failure then there is no point anymore in hiding root from Google services.

Hiding from apps that don't use safety net (for as long as that will be the case) is still useful.
[Magisk] lilbrat:
I fine it funny that some folks are running around like chicken little... The sky is falling . . lol, it's been doing that for awhile now, so take a deep breath.. First Google has to get their sh*t together, if you look the postings over the last few days where people have been posting their "issues" the playstore/ services updates are all over the place anywhere from February to March and it's only effecting certain folks not everyone and not every device or we would all be in the same boat, safety net fails and uncertified devices..

So it will take a Google awhile to get everyone as we know their not the fastest group at times.. so breath....

Now folks, you should know by now whether you can re-lock your bootloader, you should have known that before you did anything..... If you don't know, it's agood time to figure it out... As this is a Magisk General Support/Discussion thread not a " How a can I/if I can re-lock my bootloader thread." Ok let me get inside as I heard the sky is falling....
[Magisk] zgfg:
Although spoofing SafetyNet for many now goes to history, Magisk is still a great solution for e.g.:

- Those not using GApps and affected apps

- Those not using GPay and affected apps (although Device might be already listed as not certified in Playstore)

- Some users report they can even install Netflix from Playstore and use it although Device is listed as not certified

- Those on devices where Google cannot detect the unlocked Bootloader

- Those on some old devices who can relock Bootloader but keep the Magisk

Various devices, firmwsres, set-ups, users, apps and use cases - various results

Therefore, you can vote, TJW is asking about our willingness to continue using Magisk (probably his willingness to continue development will depend on):

https://twitter.com/topjohnwu/status/1237998444800663553
[Magisk] eliezerjk90:
Have some weird experience. Tried to add cards to my Google pay account yesterday but it's not working. This morning I tried once again and now it is working. I notice that I received a Google play service update overnight (use swift installer and have to update the theme every time the app updated)
[Magisk] hyborian:
I was having failed CTS on my Pocophone, and after flashing this from Telegram Pocophone channel :

https://t.me/PocophoneGlobalOfficial/1362371

It can now pass cts ... I don't know why ...
[Magisk] wilsonhlacerda:
I have an old device (S4 Active) and it pass with Lineage OS 16. My girlfriend with exactly same device but running Lineage OS 14.1 do not.

I'm trying to understand this also.

---------- Post added at 05:32 PM ---------- Previous post was at 05:28 PM ----------

My vote is YES! But I don't have Twitter and I don't want to do so. Just like me + ones that even don't know TJW's request are tons of other Magisk users. So please alert him about that!
[Magisk] zgfg:
Btw, I also don't have Twitter accoumt - you can read by browser, but not vote, without the accpunt
[Magisk] vandyman:
Keep Magisk alive.

I only use Magisk for Titanium Backup, AdAway, CX Explorer, and etc.

I do not use Google Pay, Poktheman hoe, or any social media BS.

So the bottom line is, Magisk will continue to work for people like me.

Thank you, TW
[Magisk] mochamoo:
Those aren't working for me on pixel 4xl. Have I missed a setting?
[Magisk] vandyman:
I don't know what to tell you. I never had a problem with Titanium, etc.

I only use the Magisk system less module on my Pixel 3a XL. I would get rid of all the unnecessary modules and mods and stick with the stock rom.
[Magisk] mochamoo:
OK, got some things to work by unchecking all of the advanced magisk settings. Adaway still broke even after enabling systemless hosts. Will do some digging. Thanks.
[Magisk] lilbrat:
I would have to argue just for a minute, as I stated a few pages back .. for me everything is fine my rooted OP 6T, 5 odd ball modules but I don't have any Magisk mods for GPay and it works fine... Just thinking out loud..
[Magisk] vandyman:
I can not say if Magisk modules or custom rom cause more harm than good, because I do not use them.

My point is, use the basics. Do you really need a mod for a blooming onion coming out of your phone. [emoji6]
[Magisk] palmbeach05:
What i can say is this, i've been using custom roms for ages. I do not see a reason to spend 700+ us dollars on a phone to get the latest and greatest when i can flash a custom rom and have the latest and greatest.
[Magisk] vandyman:
I completely understand, my Pixel 3a XL only cost me $349 from the Google store.
[Magisk] Philnicolls89:
I am relatively new to phone rooting, my s10 is the first phone i rooted and ive been on xda since. I also did my research before hand but John woo's announcement came as a massive shock to me. I've never heard anything about the writing being on the wall for magisk or that Google could kill it at any minute if they so wished. I'll still use custom roms until my fav apps don't work but it was still a shock and very disappointing as I thought Google and Android phone makers were fairly relaxed on unlocked bootloaders!
[Magisk] CSX321:
To be clear, rooting and Magisk still work fine. It's only the ability of MagiskHide to hide the fact that your bootloader is unlocked that is probably over. This primarily affects some payment, banking, and a few game apps. For me, the ability to temporarily disable some apps so they don't run in the background all the time, and the ability to use a good ad blocker will keep me rooting my phone, even if I can't use payment and banking apps. I can use my watch to pay, if necessary, and I can use the banks' Web sites. I don't play any games that try to detect root.
[Magisk] Philnicolls89:
I agree that at the moment the failed safety net doesn't actually affect me that much, my fear and I'm sure the fear of a lot of people is that now googles safety net actually works the way it should, if it becomes mainstream for developers to use then we could see any app from the play store not work on a rooted phone. Is this a legitimate concern even if it is a year or 2 down the track? Or am I being a doomsdayer lol.
[Magisk] samep:
I don't use Twitter either but want to voice support for Magisk continuing.
[Magisk] zgfg:
There would be even worse scenario if Google and mobile operators agree (or governments enforce them) that phones must be attested by SafetyNet when attaching to 4G or higher, and periodically thereafter - and banned for access if not passing
[Magisk] wrongway213:
Thank God I live on WiFi.

Serious though.. I don't ever see this happening
[Magisk] hfam:
Oh DEFINITELY keep Magisk alive, please!! As I stated earlier and others have also pointed out, many of us only use the core function for rooting. I don't use my phone for games, I use boldbeast, root explorer, swift backup, and a few other apps that require root to work correctly, but no GPay, no games, no Netflix, etc. (I did note though that even though i fail cts and I'm now not certified in Play Store, I can still install Netflix if I wish, it's there). I have no modules and use the stock ROM on my Pixel 2 and still love this device.

Until a point where damn near everything is using safetynet, Magisk is still VERY important for gaining root and using those apps. I don't see Google going back on their openness to unlock bootloader, so that's also another reason to keep it alive. Magisk is still invaluable if you're using it's core to gain root and don't use modules.

Anyhow, I'd very much like TJW to keep it alive and hope he does. I've donated once but I'd be happy to do it again if needed, and I'm sure others would do it too.

I don't use Twitter though (or Facebook, etc), so I don't have a voice there. Maybe someone who does can mention there many of us who want him to continue and can look here on XDA for some encouragement.
[Magisk] zzz2002:
I think it much more likely that devices that failed will be "effectively destroyed".
[Magisk] lilbrat:
Don't take my message as a doomsday note, Google has been trying to shut down "rooting" since the Chainfire era..they say something , and folks get their panties in a bunch.. granted one day it may happen and we need to be ready for it.. ie: purchasing a phone that you can relock..

I tip my hat to the devs that have made our life easier and have given us back our phones but some manufacturers have listen and made their stock OS better to the point that rooting isn't that big of a deal anymore .. and I applaud the devs working for solutions to get along with an rooted device.. Sorry for the ot stuff...
[Magisk] robertb45:
Hi, I'm having an issue installing modules, the problem is that I install a zip trough magisk manager app and it says that it was successfully installed, but I reboot and It doesn't work, I checked in the root directory of my phone on /data/adb/modules/module_folder and I see that it is empty! The only file that is in there is the module.prop file, I tried to manually copy the files of the downloaded zip and it worked but I tried with some other modules and it doesn't work. What can I do to solve this?
[Magisk] vandyman:
With version of Magisk are you using? Stable or Canary?

It is known issue that the newest Canary Manager (277) is at fault for installing issues.
[Magisk] angiotell:
Hi. How to solve cts profile false? Thanks
[Magisk] zgfg:
Didn't you read, there were tens of posts here about this topic during the last week
[Magisk] JudgeDread11:
Many apps just want as many users as possible and for most security isn't an issue. So I don't expect ordinary apps adding safety net checks.

Only apps where security is an issue like apps through which payments can be made will add these checks apps that use Google in-app payments won't even need it as the payment is taken care of by Google services and not the app itself.

Only other reason to secure apps is to avoid loss of income, like what games do. Cheating creates loss of income.

Only thing that worries me is apps relying on ads. As in an afford to avoid ad-blocking they might start using safety net. And this is the biggest group of Android apps. Then again there are enough ways to block ads without root.

---------- Post added at 09:02 AM ---------- Previous post was at 08:57 AM ----------

Root had as far as I know, no effect on how you can access anything but on your phone. I see no reason therefore why access to days services should be blocked accept for in countries where days access control (like censorship) is already on place.

A scenario that I think is more likely is that checks might be incorporated in lower level device configuration by companies that don't want us to modify our devices.
[Magisk] CBMC:
I also expect sports apps that have blackouts to implement safety net. Really the only way to get around the blackouts is by rooting since these apps don't work with mock locations being allowed. One of the main things I use root for.
[Magisk] curiousrom:
Re: Magisk may no longer be able to hide bootloader unlocking

Considering the XDA portal article Magisk may no longer be able to hide bootloader unlocking and the merged commit GitHub/topjohnwu/Magisk/Disable MagiskHide by default will you be updating your excellent Magisk and MagiskHide Installation and Troubleshooting guide?

***
[Magisk] Didgeridoohan:
I will. Just need some spare time to get it done.