yashsingh1/xdaforums huggingface dataset:
[Android Software Development] cantenna:
Thanks mate, im sorted on that front know, here is the update;

So to confirm, I pass Intergretity Checker (except MEETS_STRONG_INTEGRITY), YASNAC passes and as of recent, RootBeer Sampler Does not detect root)

The only modules im running are;

- Shamiko (latest)

- Universale SafteyNet Fix (mod) (also tried no mod as well, seems to have the same effect.)

No issue at all in setting up Pay/Wallet and all other apps seems to not be able to detect root.

Also, I must use Hide Props in order to pass Integrity test, so I am using this module as well

Spoiler content hidden.
[Android Software Development] LedgendaryEpics:
Spoiler content hidden.
[Android Software Development] zgfg:
Make sure you have updated GMS= Google Play Services installed - API is part of the GMS
[Android Software Development] pndwal:
He must have gms for S/N pass...

YASNAC is showing version 21.45.16... PW
[Android Software Development] pndwal:
YASNAC is showing version 21.45.16... seems pretty old. Must be before PI API... I have very. 31.xx...

Update Play Services / Play Store... PW
[Android Software Development] pndwal:
This is interesting...

If you are sure you need MHPC module for MEETS_DEVICE_INTEGRITY with USNF-mod enabled, please say what props you configured... 🙂 PW
[Android Software Development] zgfg:
Btw, I have GMS 22.26.15 and PI API works fine (ie, BASIC and DEVICE Integrity ok, not STRONG)
[Android Software Development] pndwal:
21.45.16 = Dec 12th, 2021

Play Integrity API announcement June 2022

22.26.15 = Jul 19th, 2022

👀 PW
[Android Software Development] LedgendaryEpics:
OMG!!! "gms S/N pass" 'pw" "pi api" all these abbreviated terms! I know what most of these mean now, but people looking back at this is gonna get confused how often y'all use this...
[Android Software Development] LedgendaryEpics:
What is that?
[Android Software Development] LedgendaryEpics:
And what does pw mean?
[Android Software Development] zgfg:
What?

Google Play Services - as the name says, core part of GApps= Google Apps

PI API = Play Services API, what you are supposedly testing

API- Google can help
[Android Software Development] zgfg:
=pndwal (signature of the one who answered you)
[Android Software Development] LedgendaryEpics:
No, I meant what is gms? Is that a zip or an apk I can download?
[Android Software Development] zgfg:
I answered you what is GMS in my post #2029 today:

Google Play services - Apps on Google Play

Google Play services - Google services for Android apps

play.google.com

(not sure if link will open for you and would it let you to update)

I never manually installed/updated GMS - Google does that in background

You could try to install newer GMS from APK Mirror (no experience from my side)

Download Google Play services APKs for Android - APKMirror

Download Google Play services APKs for Android - APKMirror Free and safe Android APK downloads

www.apkmirror.com

but do not download/install Beta version
[Android Software Development] LedgendaryEpics:
He mentioned that I'm on an old version of yasnac but the one I see on GitHub is from April, is there an updated repo I can search for the updated apk?
[Android Software Development] LedgendaryEpics:
I have the latest version of Google play store installed
[Android Software Development] LedgendaryEpics:
Do I need to update Google too? Or should I flash a new Gapps zip?
[Android Software Development] zgfg:
(Google Play) SERVICES is not (Google Play) STORE

Different words (!) and hence different things

Store is an app (you need to buy/download apps and games from the Google store) but Services is the background service, with various Google APIs

Store cannot work without Services, but Services do not need Store.

Similarly, Maps need Services (but not vice versa), etc

Again, Services are kind of a core for GApps, used by various other Google apps (but not limited to apps from Google, since open APIs can be called by any other app)
[Android Software Development] pndwal:
No, not old Yet Another SafetyNet Attestation Checker, but that showed old Google Play Services (pre Play Integrity Application Programming Interface) who's processes are based on Google Mobile Services in your Screenshot, so you need to update this ...

I said update Google Play Store simply because this may have been preventing use of latest Google Mobile Services, A(lso) K(nown) A(s) Google Play Services... I don't know if this necessarily results... But I'm Past Wondering... 😜

BTW, FWIW these are common / good acronyms here, and we use 'em for economy like you use OMG... 🙂 PW
[Android Software Development] zgfg:
Duplicate
[Android Software Development] zgfg:
We are only talking about Google Play Services - not Google app, not Google Maps, etc
[Android Software Development] 13Sullo80:
Thx for the zip. Basic check and CTS still fails. Not sure what to configure to hide root.

Magisk is hidden. Have configured deny list to check all Google play services. Not sure what I did is right.
[Android Software Development] ipdev:
Hi all. :)

Quick PSA.

[Public Service Announcement.]

API is short for "Application Programming Interface".

GMS is short for "Google Mobile Services".

SN (S/N) in this thread has become shorthand for "SafetyNet".

I am not sure if/when PI became shorthand for "Play Integrity".

pw (PW ) is @pndwal's signature. 🙃

Cheers all. :cowboy:
[Android Software Development] ipdev:
Let Google (PlayStore) update them to the current versions.

GMS, YASNAC, ...

Google will update them to the newest version that is set to your account(s).

Might be newer or older than another account.

Normally based off of the version Google set to the primary account you used to set up the device.

Cheers. :cowboy:
[Android Software Development] pndwal:
Thought I'd spelt it out too... Praps I hadn't. 😜

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87257633 P(ast) W(ondering) 🙃
[Android Software Development] casabel:
latest magisk (zygisk)

I have google play services 22.26.15

playstore 31.7.27-21 (0) PR

the safetynetfix (last 2.3.1) does not certify the playstore

tried force stop , clear data etc
[Android Software Development] LedgendaryEpics:
Sorry my frustration was kinda like this --> [omg ttyl ymbf itww and btw lmk if yk me to send you my ffl to csi lol] It's confusing using it all at once is what I was getting at not passively.
[Android Software Development] hulyahulya:
im using mi10t magisk 20.4 android 10. i tried all safetyfix didnt pass. is there and moddded version for solve ?
[Android Software Development] Displax:
Some useless statistics:

My MOD was downloaded over 2k times.

1,5k from XDA

800 from GitHub

I'm glad i made 2000+ people happier :) Thank you!
[Android Software Development] zgfg:
There is and it was posted in this thread. Practically all posts during the last two weeks are about the same things

However, the mod version was made for Zygisk, hence it requires Magisk v25
[Android Software Development] hulyahulya:
For android 10 last version magisk 20.4. if flash high magish than 20.4. android 10 bootloop
[Android Software Development] zgfg:
Update Magisk
[Android Software Development] hulyahulya:
if update system bootloop . Android 10 support last magisk 20.4
[Android Software Development] zgfg:
Where do you see in Magisk Documentation on GitHub that Magisk v25 requires A11 or higher?

The other thing is if your particular (maybe custom) ROM has issues with newer Magisk (specially if it was released pre-rooted with some old version of Magisk - bad practice and long ago TJW documented on GitHub that developers should not do that) or if you use some modules that are not compatible with Magisk v25 (you can always disable/uninstall modules before updating)

Anyway, old Magisk is deprecated and you can hardly expect that anybody will continue developing modules, etc for those versions

Btw, I even think that I saw a modded version for Riru (in that case it could work for you) but you will need to look in this thread or in GPay thread. No guarantee

Eg, in Magisk v24 support for A12 was added but it doesn't mean that it is limited to A12
[Android Software Development] hulyahulya:
Sorry my bad i did something wrong. i install system now magisk 25.2 and safetynet-fix-v2.3.1 . But i dont see in magisk safetnet check button and hidemagisk and hide program part
[Android Software Development] hulyahulya:
View attachment 5681737

There no check safetynet and no hide program for root. i downloaded safetynetcheck app . its say its passed. Google play say its have certificate. But bank app say its rooted
[Android Software Development] zgfg:
There are LOT OF changes since Magisk v24. Please read the CHANGELOG

And there is a new thread with very good OP posts covering the important changes and the needed know-how for new users in Magisk v24/v25.

Just search for Magisk Zygisk thread on XDA and please read
[Android Software Development] hulyahulya:
i have a quesiton. right now i can pass safetynet 2 diffirent way. magisk 20.4 safetyfix 1.2.0 . and magisk 25.2 zygisk safetiyfix 2.3.1 . one is old method another is new method . For android 10 which one is better ?

is it effect battery life old version or new version ?

@zgfg
[Android Software Development] zgfg:
I've never seen a discussion about Magisk battery consumption and don't recall complaints about

Google is switching from SafetyNet to Play Integrity and USNF 2.3.1-mod was developed to pass (testing app can be also found in this thread)

As of today, detection of the old MagiskHide (present in Magisk up-to v23) has been made public (detection code and how-to description)

Hence you should better keep up with the new stuff
[Android Software Development] hulyahulya:
im using android 10 because better battery life with my test.

For sytem stability old method or new method maybe was better question. Because after safetyfix v1.1.1 for android 11 and later. İts still support android 10 but anything still new in that updates ?
[Android Software Development] zgfg:
Don't understand your question or it is out-of-topic

I answered about Msgisk v25 and new stuff like USNF 2.3.1-mod, etc

They all work with your Android 10 or newer Android versions

---

Usually, new Android versions eat more battery, and old devices may work more fluid with the original/older Android

But what is your device, how the new Android versions (stock or custom) would work and consume battery - sorry it is totally out-of-topic here, and you should better discuss on the (sub)forum for your device, with peers having the same phone who can better tell you their experience
[Android Software Development] hulyahulya:
My english not very good.

I guess I didn't explain exactly what I wanted. So let me ask you this briefly. Is there any system change in terms of using magisk 20.4-safetfix v1.2.0 and magisk 2.5.2 safetyfix v2.3.1? Does it make a difference to the system no matter which one I use? Either way I pass safetynet

i have mi10t android 10 miui 12.0.4
[Android Software Development] zgfg:
Sorry, it goes nowhere

What is "safetyfix" - there is SafetyNet API and Universal SafetyNet Fix (USNF) module

Of course there is substantial difference between the old USNF 1 2 and 2.3 - the new one utilizes Zygisk to target spoofed props exclusively to GMS=Google Play Services (the old one spoofed props for everybody and that way it might affect the other apps and services that rely on reading/knowing the correct/not spoofed props for your device and ROM)

And AGAIN, Goggle is switching from SafetyNet API to Play Integrity API (already used in eg Wallet), and to pass, you need USNF 2.3.1-mod (hence not even the 2.3 1 version from OP post)

Of course, if the old Magisk with the old USNF works fine for you and you don't see a reasons to update, you can continue using the old - your choice

Good night
[Android Software Development] wugga3:
USNF 2.3.1-mod seemed to get me Netflix back into the Google Play store finally... Either that or registering my device online restored device certification. Funny how I've 2 major bank accounts with zero past or current problems yet Netflix is the only one complaining about device compatibility????

Sent from my ONEPLUS 7T HD1900

Stock OOS11.0.9.1 global

Magisk/App 25.2

Thanks everyone for everything.... Your all the best
[Android Software Development] ipdev:
What can I say ... I skip over your posts. 😜

Actually I did not see there was another page in the thread last night.

My two posts were added to the bottom of the screen and then xda went offline for maintenance.

Once xda was back up, I continued catching up in other threads.

I see I missed 8-9 posts last night. 🙃​

Cheers. :cowboy:
[Android Software Development] ipdev:
Interesting.. when did this start showing up after replying to a post when not in the last page of the thread? :unsure:

View attachment 5681817

I do not remember seeing that last night.

Cheers. :cowboy:
[Android Software Development] theincognito:
Can confirm that this worked on my Xiaomi 12 Pro with MIUI 13 (A12). Google Wallet is working now again. Thanks a lot!!!
[Android Software Development] ipdev:
Need a bit more information.

What is you device and setup?

Are you passing SafetyNet?

Did you force stop and clear cache and data for both Play Store and Play Services?

Cheers. :cowboy:
[Android Software Development] LedgendaryEpics:
I got you now, before the edits your posts seemed kinda vague to me. I understand now, hopefully I will be able to use contactless payments again soon.
[Android Software Development] pndwal:
Seen it for a while now... can be we see own post but not other new ones w/o refresh, and mileage varies between app and browser too... 😛 PW
[Android Software Development] hulyahulya:
i have installed new fresh system from twrp . i have only whatsapp. nothing else more. first i nstalled old magisk and tested brattery drain and today tried last magisk. im %100 sure magisk versions effect battery life. last version drain battery faster
[Android Software Development] rodken:
I also noticed that feature a couple of weeks ago when I was in between replying to posts.
[Android Software Development] bishoy ashraf:
shouldn't this bring back Netflix to google play🤔
[Android Software Development] CSX321:
It took about 3 days for it to show up again for me.
[Android Software Development] pndwal:
Should happen instantly if you clear Google Play Services and Google Play Store data... BTW, do you see Play Protect, Device is certified in Play Store, Settings? PW
[Android Software Development] PiXinCreate:
I've Nokia 6.1 Plus A.K.A DRG running Android 12L (LineageOS 19.1 Official).

- Rooted with Magisk v25101.

- For spoofing, I've used Shamiko and USNF v2.3.1-Mod by @Displax. (GMS(unstable and gms) and Momo is selected in Denylist which is not enforced)

- Device is repartitioned to 4.5GB System and 1GB vendor as the device by default support only 2GB which is extremely less than expected.

It passes YASNAC. But Problem for me here is, on PIA checker, I'm getting all red and none of them seem to pass.

Also, Google Play displays the device as certified.

Also, Momo detects the abnormality within the device as shown below:

- Found files modified by Magisk modules.

- Device is running a custom ROM.

- Found Zygisk.

- Zygote is injected.

- Debugging mode is enabled.

- TEE broken.

Surpiresely, when I asked the ROM dev about the TEE, he claimed that if TEE is broken the device itself fails to boot, however, my device is currently turned on and running.

FYI, it has a finger print of A10 QKQ1.190828.002

I feel like it's the issue with the kernel. Any thoughts on this? Any fixes possible with "another" magisk module? How can I get this fixed?

@pndwal
[Android Software Development] CSX321:
FWIW, on my Pixel 6 I never stopped seeing "Device is certified", but Netflix and Hulu still took some time before they showed up again. I wanted to avoid clearing Play Services data, because it requires setting up my watch again, and it's kind of a pain.
[Android Software Development] 73sydney:
i feel you, as a Watch 4 user :)
[Android Software Development] Vision:
My phone Xiaomi Poco X3 NFC MIUI EEA GLOBAL 12.0.8 stable android 10. So if want relock my bootloader can't get back the hardware Attestation ?
[Android Software Development] pndwal:
X2

I have Redmi Note 8.

For which models is this confirmed? PW
[Android Software Development] LedgendaryEpics:
There's this old app I was just reminded about existing called "island", there's also a Samsung counterpoint of this app, but the purpose of this app is to isolate other apps from files and other privacy purposes... I wonder if someone could experiment with it with certain apps and check back on their findings...?
[Android Software Development] rcbjr2:
This worked great and as soon as I installed it I was able to add my credit cards to Google Pay Wallet. Thanks!
[Android Software Development] bishoy ashraf:
can i do anything to hide it any better?!

-does data encryption mess with any root detection (is encryption required by any app🥲)?!
[Android Software Development] zgfg:
Data encryption is enforced by GOOGLE. Although at least three years old (Android 9/10) there are still people coming from the old devices for whom FBE is kind of 'mistery' - recently posted a longer post to Magisk thread how it works and WHY is it actually GOOD for users, not anything bad

Also, custom recoveries (up to Android 11) support FBE, hence no problem there either. Official TWRP.me does not support FBE for A12 yet but there are (beta stage) unofficial custom recoveries (for various devices) that already do support

Back to your question. No particular app requires - FBE is seamless to apps, Android kernel takes care of

However, if you have new Android without FBE, than it makes obvious that your phone is not stock. And that's what Momo warns about - actually, it warns that device without FBE is not secure

Eg, a thief reboots your phone to custom recovery, he does not need to know your unlock pin/password (bcs data are not encrypted) and he can freely copy your files (personal photos, documents, etc) to his PC and open them.

And that's what banking apps (their developers) might be also concerned about

Why some custom ROMs do not use FBE, maybe ask developer(s)
[Android Software Development] cantenna:
@pndwal

...sooo my issues were totally rom related.... Switched to a different rom and all is well now!

Thanks for trying to help me out.

Cheers!
[Android Software Development] pndwal:
I'm guessing bank apps, like Momo, may not distinguish between FDE and FBE, and it seems it would be simple to combine encryption detection with device information available in a number of props to deduce if a device (most since A6 Marshmallow in fact, and all since A10 Q) was required to be encrypted and thus may be 'rooted' or modified...

It also seems likely that a bank might simply disqualify all unencrypted devices and state 'device does not meet security requirements' instead of 'device has been modified'...

Technical:

Full Disk Encryption (FDE, like hard-drive protection) has been around since Android 4.4.

Encryption and secure boot became mandatory out-of-the-box for all but low memory Google certified devices and those not supporting AES crypto performance above 50MiB/sec, basically devices w/ processors based on ARM Cortex-A7,

with Android 6.

Android 7.0 and later versions support file-based encryption (FBE, like iPhone), but OEMs could implement either FDE or FBE till Android 9 with Android 10 mandating FBE.

The exemption for low-end devices also ended with Android 10 (which introduced the new Adiantum encryption mode targeting ARM Cortex-A7 and improving encryption speeds 5 fold over AES) and the Android Compatibility Definition Document requirement that all new Android devices now be encrypted.

🤠 PW
[Android Software Development] zgfg:
You can read fileencryption tags for /userdata filesystem from vendor/etc/fstab.* file.but it requires root

However, without root, you can read from:

getprop ro.crypto.type

If it returns file it refers to FBE, block refers to FDE (and empty to no encryption)

----

Now also a link to Full Disk Encryption doc:

Full-Disk Encryption | Android Open Source Project

source.android.com

----

Regarding my Xiaomi Mi 9T - phone was originally released with MIUI 10/A9, hence with FDE

When upgraded to A10 or A11, Data (Internal storage) was reformatted to FBE Adiantum encryption (recently I checked its /userdata filesystem definition, FBE encryption, in the fstab file and been surprised finding it looking 'strange', but then realized it actually corresponds to the Adiantum tags)
[Android Software Development] Velfess:
Anyone able to edit props when using this modded safetynet fix?

Using this mod made wallet work (many thanks). But now I'm unable to run `props qemu.hw.mainkeys 1` command in termux, to hide navbar.

(I get `/system/bin/sh: props: inaccessible or not found` error)

Sorry, my bad, I accidentally deleted MagiskHideProps mod. Question no longer relevant.
[Android Software Development] pndwal:
Yup, so bank apps can see if a device is encrypted or not irrespective of whether FDE or FBE type, and disqualify these either simply as not meeting security requirements, or as modified where device information is also evaluated... PW
[Android Software Development] zgfg:
Maybe, by using eg MHCP and late_start service mode and by setting ro.crypto.type to eg block or file, it could be possible to trick Momo to prevent detecting that Data is not encrypted.

However, it might affect other apps and services (thus suggesting late_start service mode as maybe less risky)
[Android Software Development] eyalsa:
It does not works for my Samsung S22 Ultra. So it only 1999.

Any case thank you for the effort.
[Android Software Development] triggerhappy_:
Seems to be working fine on the latest A13.0.0 - Pixel 6 Pro

(raven-tp1a.220624.021-factory-d8ddfdca+Kirisakura_Raven-4.1.0_A13_stable).

Spoiler content hidden.
[Android Software Development] pershoot:
I just upgraded to Android 13; Bramble. No issues (USNF 2.3.1-MOD, Latest Magisk + Zygisk, new Wallet app.).
[Android Software Development] mingkee:
Now we need a new variation

Universal Play Integrity Fix

If not, root is dead
[Android Software Development] osm0sis:
Root will always be just fine actually.
[Android Software Development] wugga3:
So I rooted my brick??? If apps fail to run with root then what good is root???
[Android Software Development] osm0sis:
Be as dramatic as you want, you're still rooted.
[Android Software Development] pndwal:
Root won't die! 🤪 ...

Please see this pull request:

Play Integrity Api bypass

#207 opened 22 days ago by Displax

... You can test it already, but this fixes / will fix / close several issues incl.:

- Please make 'Universal Play Integrity Fix' ... #204

also

- New Google Integrity API update breaks universal safetynet fix #203

- Google Pay #201

- OnePlus Nord #196

- SafetyNet fails on C.20 update for OnePlus 8 Pro #188

- CTS fails #171

- CTS profile failed, unlocked bootloader still detected #170

👀 PW