[Magisk] Some_Random_Username:
[MENTION=4275970]sirioo[/MENTION] , [MENTION=4667597]Didgeridoohan[/MENTION] this thing with H2OS fingerprints passing SafetyNet is quite weird, therefore I've decided to run some experiments.

OnePlus/OnePlus5T/OnePlus5T:9/PKQ1.180716.001/2002171214:user/release-keys__2020-02-01 (from last build of H2OS Pie https://otafsc.h2os.com/patch/CHN/O...THydrogen_43_OTA_048_all_2002171231_dd86a.zip) does NOT pass.

OnePlus/OnePlus5T/OnePlus5T:10/QKQ1.191014.012/2005291659:user/release-keys__2020-04-05 (from H2OS 10.0 http://download.h2os.com/5T/MP/OnePlus5THydrogen_43_OTA_062_all_2005291737_04f9b97b5ae84d67.zip ) does NOT pass.

OnePlus/OnePlus6/OnePlus6:10/QKQ1.190716.003/2002220019:user/release-keys__2020-02-01 (extracted from http://download.h2os.com/OnePlus6/MP/OnePlus6Hydrogen_22_OTA_044_all_2004151609_0096a960ae414744.zip ) does pass.

It however has to be noted that it reuses an OxygenOS fingerprint (which was initially added at https://github.com/Magisk-Modules-R...eb7#diff-3f8dc67c2eb490913d8fea426d907c78R119 )

OnePlus/OnePlus6T/OnePlus6T:10/QKQ1.190716.003/2002220019:user/release-keys__2020-02-01 (extracted from http://download.h2os.com/OnePlus6T/...4_OTA_044_all_2004151612_8acea2712bfb4699.zip ) does pass.

However like for above OnePlus 6 fingerprint it has been "stolen" from an OxygenOS release and was added in same commit.

OnePlus/OnePlus7_CH/OnePlus7:10/QKQ1.190716.003/2005132200:user/release-keys__2020-05-01 (extracted from http://download.h2os.com/OnePlus7/M...6_OTA_026_all_2005131921_07ed821de2814cf6.zip ) does pass. It is tied to GM1900.

OnePlus/OnePlus7Pro_CH/OnePlus7Pro:10/QKQ1.190716.003/2005132200:user/release-keys__2020-05-01 (extracted from http://download.h2os.com/OnePlus7Pr...6_OTA_026_all_2005131910_126315831bb246d9.zip ) does pass. It is tied to GM1910.

OnePlus/OnePlus7T_CH/OnePlus7T:10/QKQ1.190716.003/2005131900:user/release-keys__2020-05-01 (extracted from http://download.h2os.com/OnePlus7T/...3_OTA_013_all_2005131949_e0faf0194a4049ba.zip ) does pass. It is tied to HD1900.

OnePlus/OnePlus7TPro_CH/OnePlus7TPro:10/QKQ1.190716.003/2005131900:user/release-keys__2020-05-01 (extracted from http://download.h2os.com/OnePlus7T ...3_OTA_013_all_2005132008_71ff653b558048a0.zip ) does pass. It is tied to HD1910.

OnePlus/OnePlus8_CH/OnePlus8:10/QKQ1.191222.002/2006300106:user/release-keys/release-keys__2020-06-01 (extracted from http://download.h2os.com/OnePlus8/M...6_OTA_016_all_2006300133_8a4ea3ce57c64128.zip ) does pass. It is tied to IN2010.

OnePlus/OnePlus8Pro_CH/OnePlus8Pro:10/QKQ1.191222.002/2007021926:user/release-keys__2020-06-01 (extracted from http://download.h2os.com/OnePlus8Pr...0_OTA_020_all_2007021955_c0be2f16a0bc4be6.zip ) does pass. It is tied to IN2020.

While firmware analysis confirm that H2OS OP8 (I didn't check for other devices) does not have Google Apps such as Gmail, Google Pay, Duo etc in /product.img/app (see https://imgur.com/a/HBO8V8S ) , it however reveals that both have PlayServices APK in GmsCore folder present in /product.img/priv-app, which is quite unexpected for H2OS since as you know Google services are mostly banned in China.

Why is OnePlus now wasting money and time in getting their 7-series and up H2OS releases pass SafetyNet and also reuses OxygenOS fingerprints for OP6 and 6T? This just doesn't make any sense.

On other news, here's a fingerprint update for OnePlus 7 Pro NR GM1920: OnePlus/OnePlus7ProNR_EEA/OnePlus7ProNR:10/QKQ1.190716.003/2007081356:user/release-keys__2020-07-01