yashsingh1/xdaforums huggingface dataset:
[Magisk] DreyX:
[IMG="error"]https://i.imgur.com/seNlqO0.jpg[/IMG]

Seeing the issue on Blind 2.6.4 with Magisk Hide Enabled. Any other suggestions on a workaround?
[Magisk] babelus:
Waited one week, installed Blind 2.5 from a backup and it works fine with Magisk 18.
[Magisk] 1nv1n:
So you uninstalled it & re-installed it after a week?

When you say backup, do you mean an APK that you had backed or a backup taken from TiBackup?
[Magisk] babelus:
Correct, uninstall Blind, wait a week, reinstall from backup of APK (TitaniumBackup). I can share the APK, but you shouldn't trust me.
[Magisk] 1nv1n:
I uninstalled Blind. Uninstalled Xposed. Made sure Magisk was able to pass all SafetyNet checks. Re-installed Blind from the Play Store. Used Magisk to hide it & was able to launch it without issues.
[Magisk] screamingoutlet:
Thanks for sharing, this worked for me

(Rooted stock Moto Z2 Force with Oreo)
[Magisk] 1nv1n:
Looks like it's broken again? I tried following the same process; but even after being hidden through Manager, it's still able to detect either root or bootloader unlock.

Anyone got any ideas?
[Magisk] babelus:
I can confirm my workaround using the old version of Blind stopped working. New version works for a day or two after installation, then it detects root and I have to uninstall and wait for the ban to expire.
[Magisk] 1nv1n:
How many days does the ban last for?
[Magisk] babelus:
I've heard 7 days. I think I usually wait 8 days after uninstalling to be safe. I don't know if attempting to access Blind while banned resets the timer. Please post any findings you come across! Based on my experience I assume Blind devs are reading this forum/thread.
[Magisk] alex hamilton:
same issue repeating for 2022. Any updates?
[Magisk] davidmoore0:
Same. Seems like LIAPP is pretty good at what it does. A general LIAPP bypass mechanism would be quite useful.
[Magisk] Jirachilover:
deleted
[Magisk] Spartacus500:
For me working for Samsung S7 9.0 Pie new Magisk & new Lsposed 👍 App Blind detect root Magisk 'sbin/su' & app Lucky Pacher.
[Magisk] PirateForDaLolz:
Hello everyone,

I use an app called Blind. Overnight, my phone received an update to the app via the Google Play Store, and when I attempted to use the app this morning, I was greeted with a very unfriendly "LIAPP ALERT" popup telling me that I couldn't use the app because my phone is rooted. I have attached a screenshot to this post showing how the popup looks.

I've tried to do some research on my own to see if anyone else has complained about this happening with the latest app update, but I've not turned up anything, so I figured I'd take a shot at asking here. Blind has had root detection for at least as long as I've been using the app, but it was always very trivial to bypass until this update hit my phone.

Here is my setup:

Phone: Pixel 6 Pro

Android Version: Android 13 (June 2023 Update)

Magisk Version: 26.1

Installed Magisk Modules:

App Systemizer v17.3.1

Blobmoji (Emoji 15, Release 2)

Busybox for Android NDK 1.34.1

Pixel 4 2 Button Navigation

Shamiko v0.7.3

Universal SafetyNet Fix v2.4.0-MOD_1.2

Enhanced mode for Storage Isolation (Zygisk) v28.1.0

LSPosed (Zygisk) v1.8.6

Blind is blocked in the Magisk DenyList

Blind is configured with Hide My Applist to only allow it to see system apps

For now, I have "fixed" the problem by reinstalling v3.9.0 and using Hide My Applist to hide the app from the Play Store so that it won't get re-updated, but this is only a short-term fix. I need to find a long-term one. I have an old Pixel 3 XL running the Android 13 (May 2023 Update) release of PixelExperience, and I have been able to reproduce this behavior on it.

If anyone here would be willing to help, I would greatly appreciate it. :)
[Magisk] shadowstep:
@PirateForDaLolz Welcome to XDA! Please note that as per the Forum Rules:

Therefore, I've moved your post in this existing thread. Please search the forum for existing/similar threads before posting a new thread going forward.

Regards,

shadowstep

Senior Moderator
[Magisk] chiteroman:
Also detect Shamiko lib lmaooo
[Magisk] chiteroman:
Hahah with Zygisk turned off it works
[Magisk] PirateForDaLolz:
That's interesting! I haven't received any pop-ups about Shamiko being detected. I read somewhere that some detections can be stopped with @swer45's BootloaderSpoofer Xposed module, but unfortunately, that didn't fix the problem for me. All it did was cause a different error message to show stating that Xposed was detected. Interestingly, this pop-up only seems to show up on the first launch of the app after rebooting the phone. Subsequent attempts to launch the app show the root error that I posted earlier.

Unfortunately, turning off Zygisk does not seem to fix the problem for me, but even if it did, it's not feasible for me to run my phone with Zygisk off. When I try to do it, the app closes immediately and displays this toast notification.

This toast isn't new though. Prior to the v3.9.1 update, this toast would show if you didn't take any steps to hide root from Blind, but if you used the configuration I described earlier, it solved the problem.

I do not understand what has changed with the release of v3.9.1 to cause this, but apparently this pop-up isn't completely new to the app. I found a post on Twitter from April of 2022 complaining about the same thing (Tweet link). I wonder if it would be worth trying to get in touch with him to see if he could provide some insight.

Perhaps it would also be useful to try to get in touch with the Shamiko developers to ask about this? I believe @Dr-TSNG is the person to contact for help with that, but they do not seem to be very active on XDA.
[Magisk] skr1p7k1dd:
Thank God this happened to others, so now we can get to the bottom of it.

I have no idea how it detects /system/bin/su even with no permission and it being blacklisted. I tested out that su was not reachable by blacklisting a terminal app and running "stat /bin/su" to verify it's not found. So uhhhh, even with the big fat hint they're giving us I am out of ideas. Thoughts?

OnePlus 8 pro, OOS 11 latest update

Magisk 25.2

Shamiko 0.7.3

Universal safety net fix 2.4.0 (default) (( <--- EDIT: THIS WAS BREAKING IT))

Blind is in denylist and denylist is not enforced by magisk
[Magisk] PirateForDaLolz:
Unfortunately, I haven't managed to get it working. I've posted a reply to the guy on Twitter asking for help. If he knows anything, hopefully he'll be willing to join our discussion.

https://twitter.com/i/web/status/1669545946441723904
[Magisk] skr1p7k1dd:
Its kind of ironic how their website has all these banners for "use the app!" then prevent you from using the app if you're rooted.
[Magisk] PirateForDaLolz:
I haven't tried it yet, but I wonder if adding all apps that don't require root to the Magisk DenyList would take care of the problem. It's evident that something, somewhere is leaking that information to Blind.

Since I can't find a place to ask for help with Shamiko, I have opted to open a discussion thread on the GitHub repo for LSposed since it is built by the same developers.

Root is detected even when using Shamiko and HideMyApplist. (LIAPP) · LSPosed · Discussion #2566

I apologize in advance if I am posting this in the wrong place, but I cannot figure out where to go for getting help with Shamiko. It seems that LIAPP has found a way to detect root even when using...

github.com

Sad news from the Twitter guy. :(

https://twitter.com/i/web/status/1669574171964350465
[Magisk] skr1p7k1dd:
@PirateForDaLolz

I fixed it. It turns out Unversal SafetyNet Fix v2.4.0 by kDrag0n was causing LIAPP to trip up and throw that warning, in one way or another. I disabled that magisk module and I can use the Blind app just fine now.

Im not really clear on if USNF is required anymore but Ill try leaving it off and see if anything pops up. RootBeer app still says I'm fine and my 2 safenet checking apps didn't really change (meets only basic integrity)

Full info for anyone else debugging this

Oneplus 8 Pro 11.0.11.11 (pretty sure version doesnt matter)

Magisk 26102 (although Im pretty sure 26100 would work just fine)

Possibly required mods: Shamiko 0.7.3 (with usual setup)

Unrelated mods: Smali Patcher, Systemless Hosts, De-bloater
[Magisk] uodii:
I'll have to try that out soon, but for now I rolled back to 3.8.1. Blind works perfectly lol. I'll just have to remember to not update it until I try your method
[Magisk] PirateForDaLolz:
Unfortunately, this doesn't seem to fix the problem for me.

Once you try it, please let me know what the outcome is. As I mentioned above, disabling it didn't fix things for me.
[Magisk] PirateForDaLolz:
I just tried an experiment. On Android, each app has a dedicated user created for it. Using Termux, I found the user for Blind on my phone and then checked to see if I could see /system/bin/su as that user. Sure enough, I could.

.../data/com.teamblind.blind # pwd
/data/data/com.teamblind.blind
.../data/com.teamblind.blind # ls -lh
total 49K
drwxrwx--x 2 u0_a332 u0_a332 3.4K Jun 18 16:47 app_MixpanelAPI.Images.DecideChecker
drwxrwx--x 2 u0_a332 u0_a332 3.4K Jun 18 16:47 app_textures
drwx------ 3 u0_a332 u0_a332 3.4K Jun 18 19:05 app_webview
drwxrws--x 5 u0_a332 u0_a332_cache 3.4K Jun 18 19:05 cache
drwxrws--x 2 u0_a332 u0_a332_cache 3.4K Jun 18 16:47 code_cache
drwxrwx--x 2 u0_a332 u0_a332 3.4K Jun 18 16:47 databases
drwx------ 5 u0_a332 u0_a332 3.4K Jun 18 19:05 files
dr-x------ 2 u0_a332 u0_a332 3.4K Jun 18 16:47 lib-0
drwx------ 2 u0_a332 u0_a332 3.4K Jun 18 16:47 lib-1
drwx------ 2 u0_a332 u0_a332 3.4K Jun 18 16:47 lib-2
drwx------ 2 u0_a332 u0_a332 3.4K Jun 18 16:47 lib-main
drwxrwx--x 2 u0_a332 u0_a332 3.4K Jun 18 16:47 no_backup
drwx------ 3 u0_a332 u0_a332 3.4K Jun 18 16:47 oat
drwxrwx--x 2 u0_a332 u0_a332 3.4K Jun 18 19:05 shared_prefs
.../data/com.teamblind.blind # sudo -u u0_a332 sh
:/data/data/com.teamblind.blind $ whoami
u0_a332
:/data/data/com.teamblind.blind $ ls -lh /sys
sys/ system/ system_dlkm/ system_ext/
:/data/data/com.teamblind.blind $ ls -lh /system/bin/su
lrwxrwxrwx 1 root root 8 2023-06-18 17:23 /system/bin/su -> ./magisk

I also ran exec /system/bin/su as the Blind user and sure enough, Magisk asked for root permissions to be granted.

Out of curiosity, I granted root access, but as I expected, this did not stop the error. Unfortunately, I do not know what to do with this information.

I also tried doing this test on an app intended for checking if a phone is rooted. I added it to the DenyList and when I tried to check if I was rooted, it reported that I was not rooted, but running ls -lh /system/bin/su as the user for the app returned the same result as what I saw for Blind. Running ls -lh /system/bin/su also showed a message indicating that root access was granted!

Based on this, I'm pretty sure that all it takes for an app to bypass Shamiko is for it to spawn a shell, run ls -lh /system/bin/su and check what the result of that is.
[Magisk] skr1p7k1dd:
@PirateForDaLolz Interesting... I did that exact same test and I was also able to get the magisk prompt to appear like you, but alas I am still able to use the blind app ever since removing Universal SafetyNet Fix. Not sure what the reason for this is but my guess is that your approach of using the apps user account is somehow bypassing shamiko. I cant vouch for that, but it would explain whats going on

EDIT: nm, you said the exact same things in the end of your post :p I would delete this post but I cant figure out how

At the very least my post should confirm that Blind is not doing what you said (spawning a shell to reliably check for su) because if that were the case then my app wouldn't work either
[Magisk] PirateForDaLolz:
Aside from USNF, do you have any other modules that use Zygisk? The reason I ask is because it seems to work when I disable Zygisk. Unfortunately, I need Zygisk, so turning it off isn't an option for me.
[Magisk] skr1p7k1dd:
Shamiko uses zygisk, so I need that too.

Anyways heres a dump of all my magisk info. Not really sure why this doesnt work in your situation, but if you basically copied this and it still doesn't work then I'm out of ideas
[Magisk] PirateForDaLolz:
I figured out which two modules are causing it. In addition to USNF, I also use LSPosed and Enhanced mode for Storage Isolation. It seems that if I disable USNF and either LSPosed or the Storage Isolation module, the error does not occur. I can use either just LSPosed or just Storage Isolation, but not both at the same time.

By the way, there's something rather interesting I came across on the Google Play Store. There are two recent reviews from Blind users who claim that after the latest update, they are prevented from using the app because they're being told that root is being detected. Both users claim that they are not rooted! If this is true, it means that LIAPP's detection mechanisms are so aggressive that they throw false positives and probably shouldn't be used. Hopefully this is a big enough problem that whatever was introduced in 3.9.1 will be pulled in a future release.

I'm still going to reach out to the LSPosed and USNF devs and see what can be done about this.
[Magisk] uodii:
Yeah, didn't work for me either. It detects api hooking with my typical setup and su(alpha) with a barebones setup. Can't figure it out, but even the older version of blind I reverted back to (3.8.1) is effected now
[Magisk] PirateForDaLolz:
Another update: It looks like aside from Shamiko, I can only run one Zygisk module other than Shamiko at one time or the error occurs.
[Magisk] Quantumrabbit:
I ran into this same issue with a new app. Tailed Demon Slayer Rise throws the same LIAPP error.

I did get a new OnePlus 10 Pro update to the June 5 security patch recently, so my expectation is something involving that.

The other thing I notice is that with AppList detector, the Magisk module is found regardless of the name it gives itself. (I've re installed the app and reverted hiding numerous times)

So it seems without any other change, the Magisk app itself is also findable now.

I'll be checking back for updates, but I've been unable to work around this.
[Magisk] KRou705:
same thing happens with this game

Super Cat Idle - Apps on Google Play

Cat Action Idle RPG

play.google.com
[Magisk] PirateForDaLolz:
Wow. So the issue is more widespread than just Blind. That's good to know but also really sad. On the other hand, if it is such a widespread problem, then perhaps there is hope that it will be fixed by a Shamiko update very soon!

There's also a post on r/Magisk where people are talking about a new detection method:

https://www.reddit.com/r/Magisk/comments/14cyz2m

The idiots who make LIAPP also have a blog post about it: https://dev.to/teamliapp/new-liapp-website-is-coming-1h9j
[Magisk] KRou705:
I already got TDS: Rise working, remove magisk 26.1 and install magisk delta.

The Blind app also goes
[Magisk] PirateForDaLolz:
@KRou705 How long have you been using this setup? Apparently some people are seeing root detection kick in again after about 3 to 4 hours after they think they've managed to get it to pass.

https://www.reddit.com/r/Magisk/comments/149nood/_/jp06ubc
[Magisk] KRou705:
I just installed Delta, I'll try and comment if the problem happens again or if it's solved
[Magisk] KRou705:
For the moment the app is still working
[Magisk] PirateForDaLolz:
Interesting! Could you please list what other modules you have installed?
[Magisk] KRou705:
Only the one from Host and the one from revanced, the ones shown in the video. Do not install the LSposed module
[Magisk] PirateForDaLolz:
Dang. Unfortunately, not being able to run LSPosed is deal-breaker for me. Thanks for confirming!
[Magisk] KRou705:
Do not install LSposed as I do not use it. But you can try to install the module using magisk delta, it is possible that everything will work for you.
[Magisk] PirateForDaLolz:
I'm sorry but I think your message got a little messed up when posting, as I do not understand what you meant by what you wrote?
[Magisk] KRou705:
Corrected, I hope. My native language is Spanish, so I use translator. That may have affected what I wanted to write.
[Magisk] PirateForDaLolz:
Got it. That's okay! I appreciate your help. Thank you!
[Magisk] PirateForDaLolz:
Blind v3.10.0 is out and the detection still happens, so it looks like the complaints on Google Play about faulty detections are going to remain unresolved. :(
[Magisk] PirateForDaLolz:
I tried migrating to KernelSU to fix it, but with the Zygisk module enabled, it still happens.
[Magisk] PirateForDaLolz:
Finally got it working! Someone on Telegram suggested that I try installing this module. I did, and problem solved! As part of the process of trying to figure this out, I migrated to KernelSU, but I've been told that it works on Magisk as well.

GitHub - Magisk-Modules-Alt-Repo/sensitive_props: Reset sensitive properties to safe state, take from MagiskHide code

Reset sensitive properties to safe state, take from MagiskHide code - Magisk-Modules-Alt-Repo/sensitive_props

github.com
[Magisk] TheoCGaming:
I found that another app, Legend Slime has Liapp, but this time it's saying I tampered with "classes.jar". I'm not sure if this is because of Mistplay, LineageOS, or Waydroid. (I have this all sandboxed because I DO NOT TRUST MISTPLAY with ANYTHING that pertains to me.)

Interestingly, when Mistplay isn't running, it says that "a threat has been detected". This makes me wonder if Mistplay is messing with Legend slime in a way it doesn't like, which would make this reply entirely irrelevant.

Note: This is entirely stock Waydroid with GApps and Google Play Protect certification.
[Magisk] uodii:
Thank you! Just tried it and it's working for now
[Magisk] PirateForDaLolz:
You're welcome!

Does the fix I posted work for you with Blind? And if it does, what happens when you try to replicate it for Legend Slime?

Also, what root approach are you using?
[Magisk] Jessondi:
In the application Hypper Sandbox also has Liapp. I installed a large number of modules for Magisk, but it did not help. Those workarounds that you wrote above also did not help. I don't know how to get around this
[Magisk] PirateForDaLolz:
Unfortunately, I am not sure what else to suggest. The error message that you're showing in this screenshot is different from anything I saw. It looks like it's detecting Magisk itself. I assume there's no point in asking if you've already taken steps to hide Magisk?
[Magisk] Jessondi:
I understood what the problem is. Magisk was discovered due to other modules. I removed all modules and left only the one you suggested. As a result, the error message has changed slightly .

After that, I did an experiment. Deleted the file su. As a result, such an error appeared.In the end, I realized that Liapp detects the sbin folder. I don't know how to hide it.
[Magisk] PirateForDaLolz:
@Jessondi Have you tried resetting the app after making changes? LIAPP will often persist error messages even after it no longer detects something unless you reset the app.
[Magisk] Jessondi:
I did it. The error still remains
[Magisk] sawdoctor:
Sometimes Google play services remembers root and you have to delete play services data. Not saying this is the issue but might be worth a try
[Magisk] Jessondi:
I cleared google play services data. Still detects root
[Magisk] xiaomantou:
I use latst Magisk Alpha and only use enforce denylist, works with the last game version.
[Magisk] Jessondi:
It does not work for me. Here is such an error
[Magisk] Spartacus500:
@Jessondi

Blind app work for You 🤔

Game Hypper Sandbox work for me, not detect any. Magisk 26.1 zygisk on, Magisk renamed, + Lsposed 1.8.6 + HMA to hide renamed Magisk, then remove Hyper Sandbox data.
[Magisk] xiaomantou:
Alpha 26105 add game to the list and enable enforce denylist without hide module, game works fine.

Today I switched to delta 26105, enable whitelist mode which delta support, game still works.
[Magisk] simpleatom7:
Did u fix this? I'm having the same issue in app list detector! + I once installed xprivacylua & then uninstalled however ALD still detects it with an eye meaning sus even though it isn't installed. I restored image & then complete delete magisk & installed version 23 as it has magisk hide however ALD still detects magisk. Any fix?
[Magisk] simpleatom7:
So can i run apps which want Lsposed now run by magisk delta.....?
[Magisk] Quantumrabbit:
I didn't. I tried Magisk Delta, Alpha, a few other replacement modules for the integrity fix. I couldn't get it to work.

It's possible setting up isolation would have worked, but I just don't have the drive or time to figure that out just to fark around in a game I don't really care about.

I do keep checking for anti LIAA fixes here occasionally (this forum, not just the thread) but I haven't seen any updates.
[Magisk] White_Gentle.Jake:
I think and hopely I found a solution to run blind "su(hidden)"

my modules

Shamiko v0.7.3

Sensitive Probs v3 by huskydg

USFN Mod v2.4.0

Lsposed

here's the app i installed to run the app and follow the other procedures in app

Storage Isolation - Apps on Google Play

Control the storage usage for each app, keep the storage clean and organized.

play.google.com
[Moto G4 Plus Questions & Answers] TechNubb:
Can Someone tell me way to modify build prop of moto g4 plus to moto z force or some samsung galaxy device like s7/s8

Tried to edit with build.prop app from playstore and manually from es root explorer file with R/W checked up

No matter brand/device/model changed whenever system check app is used its still official one

Please guide me , Saw most of devices like xiaomi are able to change to samsung then why is moto limited and whats causing this problem despite of root
[Moto G4 Plus Questions & Answers] strongst:
You want to play Fortnite? Also you didn't mention if you have root at all, nothing about your software side setup you provide :rolleyes:

Nevertheless, if you want Fortnite running, we'll, check out the requirements hardware side and some tests like here https://www.xda-developers.com/fortnite-mobile-android-testing-performance/

If it's not about the game, please tell why you want to spoof the manufacturer/model.
[Moto G4 Plus Questions & Answers] TechNubb:
Yah, need it for fortnite , bought gltools for it :p

I'm running 64 bit unofficial pixel experience custom rom

Yah, my phone is rooted with magisk installed

App, I used for checking system info was DevCheck from playstore
[Moto G4 Plus Questions & Answers] strongst:
Adreno 530 is minimum requirement and Adreno 405 is in your device.

I guess you tried that method https://xdaforums.com/android/general/fortnite-root-device-t3827880 ?
[Moto G4 Plus Questions & Answers] TechNubb:
Yah, actually i saw these ytber run on adreno 306 ,2gb ram

Galaxy A5 https://www.youtube.com/watch?v=ystVcsFjJaE
[Moto G4 Plus Questions & Answers] TechNubb:
Why tho, I cant change build prop of moto g4 plus!

changing it still doesnt reflect in any system check app nor in fortnite installer

whereas xiaomi was able to spoof it
[Windows Mobile Development and Hacking General] uniqueboy:
You are one busy guy. Much respect to you Mollusc.
[Windows Mobile Development and Hacking General] xd1936:
Absolutely fantastic! Do you think you could add 240x240 support on the list? :o
[Windows Mobile Development and Hacking General] byrnsey88:
wont close

this wont close for me when I click on the x

and if I close it another way it still is showing on my top bar along with doubleskill
[Windows Mobile Development and Hacking General] Mollusk:
Yes. The game zone is max 240x240, and same goes for the menu, so it will fit on 240x240 screens once I finish it :)

Well, the people who had that problem before figured out it was a screen calibration error. I'll put a bigger button in the next release and it should work better in the screen corners :) (or a real menu with an exit button ^^)
[Windows Mobile Development and Hacking General] xd1936:
Great news! I looks forward to seeing the completed project
[Windows Mobile Development and Hacking General] Trekvogel:
Great game, I really enjoy it so far. I do have the problem that it won't close.
[Windows Mobile Development and Hacking General] knytphal:
Looks like a pretty cool game, thanks!