yashsingh1/xdaforums huggingface dataset:
[Android Software Development] rodken:
The short list of people that I know that own a Pixel have tested the theory on the unlocked bootloader and locked bootloader theory sans MHPC.
[Android Software Development] V0latyle:
I'm not sure I understand. If the bootloader is locked, and firmware is presumably factory, why would you have any issues with Play Store or anything else? That seems like a moot point.
[Android Software Development] rodken:
On other devices other than the Pixel - installing Hulu from the Play Store or from a previous APK version has never been an issue with an unlocked bootloader.
[Android Software Development] Slim2none4u:
This works for me.

Download File(s)

Universal SafetyNet Fix · v2.1.3 (Riru) v2.3.1 (Zygisk)

Note(s):

If this is your

first time

installing SafetyNet Fix (Zygisk) Magisk module: Install Displax's safetynet-fix-v2.3.1-MOD_2.0.zip

If you have kdrag0n's SafetyNet Fix v2.3.1 Magisk module installed you don't have to remove it to install (Displax's safetynet-fix-v2.3.1-MOD_2.0.zip) Magisk module. Just install Displax's module via Magisk.

URL="https://github.com/Displax/safetynet-fix/releases/"]Displax/safetynet-fix forked from kdrag0n/safetynet-fix[/URL]

https://github.com/Fox2Code/Fox Magisk Module Manager

(This is the new Magisk Module repository.)

Install Displax/safetynet-fix-v2.3.1-MOD_2.0.zip

Open Magisk

Tap Modules icon

Tap Install from storage

Navigate to the Displax/safetynet-fix-v2.3.1-MOD_2.0.zip file you downloaded

Tap the Displax/safetynet-fix-v2.3.1-MOD_2.0.zip file

Tap the check mark (✓ at the bottom) to start the installation.

Note: You do not have to disable/remove SafetyNet Fix.

After it installs tap the Save icon to save the log

Tap Reboot.

Settings for Magisk

Open Magisk App

Tap the Setup icon.

Scroll down to App and set the

Update Channel

to Canary.

Scroll down to Check Updates and

enable

it.

Scroll down to Magisk and enable

Zygisk

.

Enable Denylist

Tap

Configure DenyList

=> Tap 3 Dot Menu => Check ✓

Show system apps

=> Check ✓ Google Play Store, Google Pay, Google Wallet etc.

Scroll down to Superuser and enable

Enable Biometric Authentication

.

Get Device Certified Clear Google Play Store, Google Play Services, Google Pay, Google Wallet, etc. data[/B]

Turn Airplane mode on

Open Settings

Tap Apps & notifications

Tap see all...

Tap three dot menu

Tap Show system

Scroll down to Google Play Store

Tap Storage & Cache

Tap Clear storage

Note:

Repeat the 3 steps above

for Google Play Services, Google Pay, Google Wallet, etc.

reboot

Turn Airplane mode off

Check Device Certification, It may take 24 hours for Device Certification

Open Google Play Store app

Tap Menu - Circle top right

Tap Settings

Tap About

Check Play protect certification.
[Android Software Development] V0latyle:
I understand now, and it does seem like there's been more than a few Pixel users who have had a similar problem.

Play Protect says the device is certified. I'm using Zygisk, not Riru. I configured things the exact same way as they are on my Pixel 5, which hasn't had any problems with this.
[Android Software Development] pndwal:
Assuming device is passing both S/N and PI deviceIntegrity now, does it show again in Play Store after clearing both Google Play Services and Google Play Store data and rebooting? PW
[Android Software Development] V0latyle:
Haven't tried with Play Services, but I'll try again when my wife gets home

Just to be clear, this is what's going on:

SafetyNet pass (BASIC evaluationtype)

Play Integrity "pass" (DEVICE+BASIC)

Play Protect pass: "Device is certified"

Hulu isn't available: "This app is not compatible with your device"
[Android Software Development] pndwal:
Some analysis:

Play Store hides apps per the attestation they require...

Previously we could assume they'd show w/ Play Protect certified as it indicated CTS Profile match which most (all?) banks etc used... Still often needed to wipe Play Store data to remove cached fails and again Play Protect indicated this state...

Now we still have this behaviour for apps not updated to PI API, but PI apps are hidden when deviceIntegrity fails since they (all?) require this verdict... We often need to clear PI result w/ Play Store data wipe also, but since Play Protect hasn't been updated to PI (last time I checked) it can be passing when deviceIntegrity is failing so this is not indicator for PI...

Your initial results:

seem unusual however... PI deviceIntegrity requires that device meets Google certification requirements which means Compatibility Test Suite (still current: https://source.android.com/docs/compatibility/cts ), and I've never seen this passing w/o S/N CTS Profile match, but seems this is actually passing w/ Basic evaluation type...

So apparently PI hardware verdict enforcement bypasses were working but S/N bypassing was broken (as indicated by evaluation type) by some strange setting in MHPC (I assume you meant you put that on your wife's device but it's not clear)... Perhaps Force Basic key attestation - alters model prop(s) - only? Other?...

So cause of initial issue is unclear but if above guesses are correct it may be that Hulu has not actually migrated to PI and loss of S/N CTS Profile match (especially if Play Protect certification was initially lost; again not clear) is cached in Play Store...

At any rate I'd be surprised if app doesn't show in Play Store if device is passing both S/N and PI deviceIntegrity and you clear both Google Play Services and Google Play Store data and reboot... PW
[Android Software Development] V0latyle:
I have cleared Play Store data but to no avail. I'll have to try clearing Play Services and see if that helps.

I would assume that a Google branded device would be CTS approved.

Also I forgot to mention that everything worked fine before her phone failed and required a mainboard replacement, and the other night she seemed to have lost root so I may need to start over.

Never used MHPC on her device, only mine.

Clearing Play Store data would have fixed this, yes?

I didn't try clearing Play Services so I'll do that.
[Android Software Development] pndwal:
Yup... Loss of root will have triggered fallback and bypass failures... Something else (eg Magisk config in /data/adb) may be messed up...

... Not that then!?...

Yup...

Try clearing data in both and reboot as mentioned...

I can't test Hulu as I get:

View attachment 5767185

... I have no problem with Disney+ app however...

If you want to try clean Magisk, just delete all contents of /data/adb w/ a root explorer and reboot (Magisk config will be rebuilt clean), then set up modules, Superuser permissions, denylist and other settings fresh... PW
[Android Software Development] V0latyle:
Force stopped and cleared all data for Play Services, Play Store, and Play Protect. Rebooted and everything looks to be good now.
[Android Software Development] badabing2003:
Is it possible that the device is identified something other than Pixel5a and the app is not compatible with that specific device.

I have seen people complain that with the SNF sometimes Three device is recognized as Nexus or something really old.

Somehow it does not happen to all.

Check your device at Google and see if it sees it correctly?

Perhaps uninstall SNF, reboot, and reinstall.

Just an idea.

Update, somehow I missed the last few responses,

All good then
[Android Software Development] pndwal:
Well wadoyakmnow?! 😃

... How did you 'clear all data for ... Play Protect'? PW
[Android Software Development] V0latyle:
Settings > Apps > Google Play Protect Service
[Android Software Development] pndwal:
That's interesting... I've never seen this... I get:

View attachment 5767295

View attachment 5767327

View attachment 5767297

but don't appear to have Google Play Protect Service app... 🤔

What Play Store version do you have? PW
[Android Software Development] casouzaj:
All Apps > 3 dots > Show System
[Android Software Development] pndwal:
Well that's too simple...

View attachment 5767361

... Google Play Protect Service app simply doesn't appear...

Can anyone w/ MIUI see this?... PW
[Android Software Development] zgfg:
Xiaomi, A12

I have five apps and services containing the word Play in the name (including system ones - otherwise Google Play Services will not show), but none with the name Google Play Protect Service - screenshot(s)

And I've never seen that one

Please provide its package name?

However, I've found something about:

Google publishes Play Protect as separate app for quicker updates

Google is de-coupling its Play Protect service from Google Play Services, as evidenced by a new Play Store listing. Read more about it here.

www.xda-developers.com

and accordingly, the package name seems should be:

com.google.android.odad

but I don't have a package with that name installed

Actually, I've searched in the Terminal emulator for all similar packages by:

su

pm list packages -f | grep protect

pm list packages -f | grep play

pm list packages -f | grep services

pm list packages -f | grep odad

...

and it finds Google Play Store app, Google Play Services app, etc, but nothing like Google Play Protect Services

Btw, do you happen to have Pixel (and maybe Android 13)?

PS: Google Play Protect Service can be found on ApkMirror
[Android Software Development] pndwal:
Good share! 👍

The XDA article indicates it's still rolling out seperated Google Play Protect Service and reportedly it has only hit A12+ devices to date (I have only A10 + A11 devices at present)... It'll be one to watch...

Old integrated Play Protect seems to be still using S/N API... I'm wondering if Play Protect calls new PI deviceIntegrity for device certification... If so, I'm guessing (as I've indicated previously) Google will probably wait for banks to pre-empt any move to strongIntegrity...

No doubt if this service does use PI API, both the Device intgrity and the additional available PI payload responses (Application integrity and Account details) will be useful in combination with scans for harmful software / malware... Nb. The additional responses were a major reason for overhauling the original S/N API... PW
[Android Software Development] Slim2none4u:
Pixel 7 pro Android 13
[Android Software Development] zgfg:
Still, can you pls post what is the package name of that Google Play Protect Service
[Android Software Development] Slim2none4u:
"com. google. android. odad."
[Android Software Development] cbomb1337:
I get a weird issue like that when installing the universal safetynet fix I lose my google wallet and it reverts to gpay. I wonder why. I'm using Pixel 6 I have yet to test if the tap and go g pay if it works ill try it today.
[Android Software Development] pndwal:
Looks like your enquiry may have fallen through the cracks here... Sorry!

Did you get it sorted?

Nb. Clearing cache is usually not enough for such a scenario... always clear data, or do so if cache clearing fails...

Clear data for the three apps you mentioned (but may incl. Google Wallet now instead of Google Pay) and reboot before first trying G Play/Wallet again (nb. rebooting first is critical or you may have persistent issues w/ Activity list/other later)...

I put details on this here:

https://xdaforums.com/t/discussion-google-pay-magisk-discussion-thread.3906703/post-87481637

If this doesn't help it may be a P7 or P7 series / A13 launch version specific issue with latest prop mismatch based hardware verdict enforcement bypass added in @Displax's USNF mod 2... I haven't seen such an issue mentioned, but users / OP in this thread will likely have the best advice:

https://xdaforums.com/t/unlock-bootloader-root-pixel-7-pro-cheetah-safetynet.4502805/

🤠 PW
[Android Software Development] pndwal:
Please see response above and first link... I think it'll fix your issue... 🙂 PW
[Android Software Development] pp085ster:
Issue turned out to be due to a custom font I was using. Here's what ended up working for me to be able to continue using a custom font as well as get gpay working simultaneously. Thanks!
[Android Software Development] cbomb1337:
I noticed the safety net modules seem to make my play services use alot more cpu is that normal. I tested it by removing the module and clearing play services data and it fixed it.
[Android Software Development] 73sydney:
i dont see that here, Pixel 6 Pro

had you tested and were you passing Integrity Test

because i could see if you hadnt and play services was banging around in the background failing that *might* explain it - if that were true, id do the perennial advice...put the device in airplane mode, clear data for Google Play Services and Store, reboot, toggle airplane mode off and test again
[Android Software Development] cbomb1337:
All good
[Android Software Development] cbomb1337:
After testing for a week this module by displax and husky dg on my p6 it eats my battery up. Google play services gms goes crazy. It sometimes stops draining when I was tinkering with components of the app but ended up going back to draining heavy I remove module and draining stops. I reflashed rom and flashed module and drain comes back. It also removed my google wallet and brings gpay app back. Not sure if it works I tried it days ago using zip pay and it worked and tried my bank card yesterday and it failed.
[Android Software Development] Atharkhan101:
Did not work on my Redmi Note 9 Pro Max (Rooted-Android 11-Miui 12.5.5).

UPDATE: It worked!
[Android Software Development] lupastro82:
Installed in pixel 7pro.

CTS fail here

View attachment 5776587

-----

Edit: ok fixed now (add with this fork module, and this in denylist)

View attachment 5776605

View attachment 5776609

View attachment 5776611

View attachment 5776613
[Android Software Development] Atharkhan101:
SafetyNet fix worked for me and it shows my device is certified in PlayStore. However there are problems:

1. Some apps like RTO says my device is rooted and my bank app is not working. Both apps use to work on Magisk 22.1 with SafetyNet fail.

2. I forgot what this was.

Do watch the screen record I've attached.

May be its latest Magisk 25.2 issue.
[Android Software Development] zgfg:
Applications use various other methods to look for the root (actually, to look if Bootloader is unlocked, if LSPosed is installed, Magisk app installed, if TWRP app is installed, etc - all that is NOT COVERED by SafetyNet)

You have to enable your banking apps in DenyList. You may need to install Shamiko, you may need to use Hide My Apps (HMA)

There are lot of instructions on XDA:

- search for the thread about Magisk Zygisk, read OP posts there

- search for the thread about using HMA and read the OP posts there with instructions about

- search for the Magisk general thread and the mentionef Magisk Zygisk thread, maybe somebody already commented what exact steps are required to hide 'root' for the same app you need
[Android Software Development] Atharkhan101:
Please watch the screen record I've posted (Edited post by adding video). I know zygisk in Magisk and already hide root for these 2 apps and other. Still not success.

I wish there should be a separate flashable zip to spoof Bootloader to 'locked' when it's already Unlocked.

Following your advice now checking Kao post etc.
[Android Software Development] Atharkhan101:
Could you please send me the links. I couldn't find them In looking for what Kao said.

I looked for Shamiko but it is not available on github (Genuine source)

There are so many apps labelled as Hide Apps, Hide an app, not the one you mentioned HMA. Will appreciate if you give direct links.
[Android Software Development] zgfg:
I watched your video. Btw, I also edited my previous post

I don't use you RTO app and developers do not publish how they look for the 'root'. Hence no way that I can tell you what steps are needed to hide 'root' from that app - it can be ONLY found by experimenting

I gave you the hints: put it to DenyList and reboot, install Shamiko and reboot, try with HMA and reboot...

Even worse, things may differ between the phones, ROMs, Android versions. A method to hide 'root' for one particular app, that works on eg Samsung with A11 (telling arbitrary) may not be enough for Xiaomi with A12, or for the custom ROMs like LOS, etc

Usually, before retesting, clear Data for your RTO app BCS it may remember that the previous time it found the 'root', hence your new hiding will not help

Btw, this is out of topic for this thread (this thread is about passing SafetyNet and its new successor Play Integrity API).

There is also a thread about hiding the 'root' with some instructions there (but not man posts following)

Generally, search on XDA about your RTA app, maybe somebody posted.

Maybe you will need Magisk Delta fork (it hides better than the official Magisk)

Sorry, too many variables, but maybe the answer is very simple and straightforward if you find that somebody else already tweaked that app
[Android Software Development] zgfg:
It was typo, it should have been "OP posts" - posts by the original poster who opened the thread (a particular thread eg with the guide for using HMA)

Please use Google. Eg, Google for:

XDA Magisk general

and

XDA Magisk Zygisk

and

XDA Hides my apps guide

and

XDA Magisk Delta

etc

Btw, on XDA, top-right of the pages, there is also Search

Sorry, I really don't have time and (and don't see any need for) to do searches for you and to copy-paste the links (I'm subscribed to a dozen of interesting threads, I don't keep their links to copy/paste the handy URLs)

And sorry, I'm also not interested into the RTO app (don't know what it is and where from to install) to investigate how to hide the root from

Btw, if you post the installation link for your app, ppl with various phones, ROMs, Magisk configurations may test does the app open for them
[Android Software Development] 73sydney:
bookmark this thread, most files, including Shamiko can be found linked from the first page of the thread, and check the last few pages regularly to keep up with any changes

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/

Hide My Applist - theres a guide (not yet linked from that page, perhaps @ipdev wants to separate himself from the (planned) madness its devolving into) can be found here:

Hide My Applist - A Brief Guide

Hide My Applist Guide Hide My Applist is a LSPosed module by Dr-TSNG (nullptr). Often referred to as HMA. In the simplest terms HMA aims to stop one app detecting a list of other installed apps. - It can often help stop your banking app(s) from...

xdaforums.com

But please learn to use the search too, thanks
[Android Software Development] zgfg:
Not sure if this is your app (I looked on Playstore but since I'm not from India, maybe I can't see all the regional apps):

RTO Vehicle Information - Apps on Google Play

Find vehicle owner details and vehicle info from the vehicle number plate.

play.google.com

First I install and opened, it reported the root

I put to DenyList and rebooted - still reported the root

I added to my Hide My Apps, hiding Magisk app, LSPosed and modules, rebooted (and cleared Cache and Data for RTO app) and there was no more root detection popup - it asked me to select language and city (screenshots)

Maybe you don't even need HMA (eg, if you don't have LSPosed installed) but simply hiding Magisk app would work instead. You must test yourself

How to look for instructions on how to use DenyList, HMA, etc - you got info in the previous posts

My config:

Xiaomi, MIUI 12.5/A11, Magisk Canary 25205, Zygisk, DenyList (configured but not enforced), Shamiko and USNF (Display mod, not only for SafetyNet but also for the new Play Integrity), LSPosed + Hide My Apps
[Android Software Development] Atharkhan101:
Wow you have achieved it. Yes that is the right app. However I feel we do not have to take so many steps to make few apps work. I appreciate your will though. I wish there was some simple way like I don't like to install Lsposed and other stuff just for 2 apps.

I wrote on github magisk issue page and the so called magiskbot has closed the issue right after submitting it. Lame!

I have tried hiding magisk app and still the same issue.

I installed HMA, it says not activated. Is it a Lsposed module?
[Android Software Development] Atharkhan101:
I did not get this part. So you went into Lsposed and run Hide My Apps and within HMA you selected RTO app ?
[Android Software Development] zgfg:
HMA is LSPosed module. Please do not ask things that are described in the HMA Guide thread, please take your time and read, learn things - you were even given the link to that thread with extensive OP instructions

I wish many things but they will not materialize

Btw, TJW (author of Magisk), maybe already two years ago, was hired by Google and he clearly distanced himself from any root hiding. Magisk does not provide that option anymore and you can not report hiding issues for your app as a bug.

I'm even pretty sure that on his GitHub, Issues page, it is noted that problems with hiding the root must not be reported (not sure did you read things)

Anyway, steps I made are usually needed for 99% percent of 'banking' apps (apps that seek for 'root') and for most of them no additional steps are needed.

Hence you need to learn on this first example and in the future you will need only five minutes to hide the root from your next banking app when you step on

Again, we gave you hints what to read, study and learn - I'm pretty sure you didn't (hence sorry, I will no more waste time on answering you) because you don't follow and still ask for what is covered in those instructions.

Enough from my side, good luck
[Android Software Development] rg_gapa:
There're some threads at Github and XDA forum about broken fingerprint scanner at OnePlus/Oppo devices, but they seem to be outdated, because (in theory) problem was fixed in recent versions of USNF.

But even with latest v2.3.1 my OnePlus 7T (OxygenOS 12.1, HD1903_11_F.17) can't recognize fingerprints. Disabling module fixes it immediately, but obviously SafetyNet is lost without module enabled.

Do you guys have any idea what might be wrong with my device props or something?

I've tried installing this fix https://github.com/wuxianlin/ColorOSMagisk along with USNF - but with no luck.
[Android Software Development] ipdev:
It is a OnePlus 7T. 😜

It has been a while and I do not remember what props set when/where broke this or that.

I know OnePlus OPPO has had some issues with props being set early or late.

Give Displax's mod version a try.

Displax USNF-Mod - [GitHub] - Releases

Besides the Play Integrity hack, it also included some updates to the props.

---

It has been awhile since the last time I tired 12 (beta 2?) on my 7T, I had major issues.

So I grabbed the fastboot downgrade and went back to 11 and it has been sitting since.

Not even rooted. 🙃

I found a download link for 7T (Global) from 11->12 OTA, currently installing.

Will see what happend on my end once I get it setup and rooted.

Cheers. :cowboy:
[Android Software Development] rg_gapa:
I'll give it a try, but github says that this fork is identical to the original USNF

"There isn’t anything to compare.

kdrag0n:master and Displax:v2.3.1-MOD_2.0 are identical."

Edit:

OMG that worked, thank you! SafetyNet is passed AND fingerprint scanner works :)