yashsingh1/xdaforums huggingface dataset:
[Android Software Development] Lu5ck:
can someone tell me what this module suppose to do?

is it meant to change "Basic" to "hardware"?

if it is not showing as "hardware" in my magisk safetynet test, does it mean is not working?
[Android Software Development] osm0sis:
Quite literally the opposite. Read the OP and/or README.
[Android Software Development] Lu5ck:
i don't understand which is why i ask

can explain it like...erm....i'm 5?
[Android Software Development] ShaDisNX255:
Hardware = bad

Basic = good

:)
[Android Software Development] osm0sis:
Hardware attestation can't be fooled, but kdrag0n figured out how to make it fall back to basic, which can be fooled. That's what this module does.
[Android Software Development] eeeemc:
My Samsung A71 is okay with success passed all requires field and in blue color.

However , on BANKING APPS are kicking me out say detecting device is rooted.

is there a recent solution to that please ? On shopping site in my region used to block me due to safetynet issue is now okay to enter those site but not when using BANKING APPS.

Thank you very much., edmond
[Android Software Development] EViollet:
This may or may not work for you, but with the following modules installed, Samsung Pay is now working again on my watch:

Riru

Riru - Enhanced mode for Magisk hide

Universal Safety net fix

And, of course, hiding the Magisk app.

My phone is still triggering Momo, but at least i can correctly use my phone and watch again

Regards
[Android Software Development] eeeemc:
Thank you so much !!

I have all of them except " Riru - Enhanced mode for Magisk hide "

I can see with-in my Magisk Modules Riru - Enhanced mode for Storage Isolation., I search for it and no result to the one above.

Where I can separately download that Riru - Enhanced mode for Magisk hide ?

Thank you very much., edmond
[Android Software Development] EViollet:
Try here : https://github.com/vvb2060/riru-unshare
[Android Software Development] eeeemc:
Done it ! ( without success )

Installed from internal storage follow by a device restart.

Riru - Enhanced mode for Magisk hide is in the modules list when device restart.

Click Magisk Hide + Hide te Magisk ( given it another apps name ) and yea I've put the BANKING APPS into the hide list.

BANKING APPS remain kicking me out, but safetynet form Magisk all passed.

nevermind as I will looking forward to any updates on safetynet fix.

Thanks again !!!
[Android Software Development] osm0sis:
SafetyNet passes as you said, so that's not what your banking apps are looking for, and that makes it beyond the scope of this thread, unfortunately.
[Android Software Development] pndwal:
Just in case you haven't cleared bank apps data, you need to do this after every failure / new countermeasure (eg added app to hidelist) is introduced.

... Also, you could give Riru-MomoHider a crack:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85125319 PW
[Android Software Development] mwahahaa:
I am now passing safetynet basic but Netflix is still not showing up in the play store. I cleared data for both Netflix and Google Play store. Is there anything else I need to do?

Edit: nvm, Netflix is showing up again after a reboot.
[Android Software Development] sliding_billy:
The instructions have got pretty confused for me since 1.1.1 is working fine for me (every app including GPay) on Pixal 3XL and Pixel 3. I was going to update to 2.1.1 in advance of Android 12, until seeing that RIRU is a hard requirement. So, my questions are: 1) is the module even ready for A12, and is 1.1.1 specifically working with A12? If 1.1.1 is OK with A12, I have no need to upgrade to 2.1.1. If not, is 2.1.1 ready for A12, and what other modules are needed to install. Hopefully. the page 1 instructions will be updated if additional modules need added.
[Android Software Development] osm0sis:
Probably. No. No. Riru is the only requirement.
[Android Software Development] sliding_billy:
So even 2.1.1 is not ready for A12 yet?
[Android Software Development] osm0sis:
I said probably, as in probably ready. Not sure anyone's tested it yet. Feel free and let us know.
[Android Software Development] sliding_billy:
Gotcha. I realized I hadn't finished my numbering, and wanted to be sure you read the breaks the same as I did. Thanks!
[Android Software Development] pndwal:
GitHub link from OP:

https://github.com/kdrag0n/safetynet-fix#universal-safetynet-fix

Releases:

https://github.com/kdrag0n/safetynet-fix/releases

👍 PW
[Android Software Development] Regys:
Hi,

I have a pixel 5 and I have a ctsprofile error. I do not operate install version 2.1.1.

Do you know what to do ?

Regards.
[Android Software Development] AndDiSa:
@Regys I am on a Pixel 3a. I installed Magisk (v23), Riru-module (which is a precondition for USNF 2.1.1) and USNF 2.1.1 and cts-profile is green in this way. For the Pixel 5 it should be the same.
[Android Software Development] pndwal:
https://github.com/kdrag0n/safetynet-fix#universal-safetynet-fix

@kdrag0n, others -

Just a heads up. - GitHub README.md is a bit misleading. 😜

Devices passing basicIntegrity often lack a passing (certified) fingerprint (eg. my Mi Pad 4 w/ unofficial LOS 18.1), therefore 'basic attestation' (basicIntegrity) pass is NOT the only requirement to allow USNF to fix failed ctsProfile (work).

Actually, 'basic attestation' (basicIntegrity) often does NOT require a valid combination including build fingerprints and security patch levels (but apparently such may be required for some devices), but this IS an additional requirement for passing ctsProfile / SafetyNet.

While passing 'basic attestation' (basicIntegrity) is out-of-scope for this module, passing ctsProfile is ALSO out-of-scope when a valid combination including build fingerprints and security patch levels is lacking.

And contrary to the last suggestion above, @Didgeridoohan's MHPC GitHub home page states:

https://github.com/Magisk-Modules-R...ices-fingerprint-to-pass-the-ctsprofile-check

The last statement should therefore read:

"Use MagiskHide Props Config to spoof a certified (passing) fingerprint if you have trouble passing ctsProfile after enabling Riru, this module (USNF) and MagiskHide (in Magisk settings), and have passing basicIntegrity. This is a common issue on custom and uncertified stock (China etc) ROMs."

Hope this helps / README.md can be made clearer. 😃 PW
[Android Software Development] pndwal:
(& @Regys) ... Unless modules or other are causing basicIntegrity to fail, or ROM doesn't include a certified fingerprint... See my post above. 👍 PW
[Android Software Development] Regys:
Perfect, It worked as Anddisa says, and I do not have an imprint probem ;)
[Android Software Development] osm0sis:
You should submit a Pull Request on GitHub to update the README. 👍
[Android Software Development] pndwal:
Would be my first. 😬 ... I'll give it a go when I have a minute as Danny doesn't seem to check this thread... PW
[Android Software Development] pndwal:
Pull request is beyond me ATM, so I submitted as an issue... 😜 PW
[Android Software Development] osm0sis:
Login to GitHub, go to README, press edit, it'll do the rest for you pretty much.
[Android Software Development] prot-:
2.1.1 freezes my pixel 3XL after install and reboot with sytemless hosts enabled on stock Kernel. 2.0.0 works fine. Rolled back
[Android Software Development] sliding_billy:
No issues at all with 2.1.1 on 3XL with systemless hosts and EX kernel.
[Android Software Development] :
Is there anyone can make the "Call Screen" working on pixel 3a after 2.1.1?
[Android Software Development] AndDiSa:
@Androcles what's your issue with the call screen?
[Android Software Development] aenima73:
I have a POCO X3 with AOSP A11. I installed riru 26.1.2 and Universal Safetynet fix 2.1.1 modeules but I am still not passing the Safetynet check (all red).

Whay could I do?
[Android Software Development] zgfg:
For the not certified (custom) ROMs you need to spoof fingerprints

Search for XDA thread about Magisk Hide Props Config
[Android Software Development] prot-:
Yeah ended up going back to EX kernel anyway
[Android Software Development] :
Keep showing "Activating". I have a screenshot attached.View attachment 5427915
[Android Software Development] AndDiSa:
@Androcles hmmm ... sorry, doesn't exist for my region yet, so I cannot check.
[Android Software Development] rodken:
I've been having same the issue for the past 2 weeks and counting along with the 'Hold For Me' feature.
[Android Software Development] :
"Hold for Me" feature seems good for me. But I didn't test it yet.
[Android Software Development] masamunecyrus:
Hello,

I wasn't even aware this thread existed, otherwise I'd have posted here.

Anyways, when enabled together with Google Assistant's "Hey Google" feature, Universal SafetyNet Fix 2.1.1 is causing a microphone bug on Pixel 5s where everything recorded by the microphone is affected by a ~7.5k kHz low pass filter.

See this reddit thread I posted for images and a video.

reddit.com/r/GooglePixel/comments/q5rqrg/psa_universal_safetynet_fix_currently_causes_bad/

This is on a freshly factory reset October 2021 stock ROM with nothing but Magisk v23, Riru, and USNF 2.1.1.
[Android Software Development] pndwal:
Good diagnosis.

Suggest you open an issue on USNF GitHub for @kdrag0n's attention. Link in OP here. 👍 PW
[Android Software Development] masamunecyrus:
Will do! Thanks for the suggestion.
[Android Software Development] Slowking:
Am I supposed to see a difference with this in Magisk's Safetynet check?

With or without it I get:

Success!

---

basicIntegrity: check

ctsProfile: check

evalType: BASIC

Basically everything works but NFC in Google pay doesn't.

So should I be seeing something else and could this be the problem with Google Pay or do I have to look somewhere else?

Edit: I think I understand now that this is actually just meant to force basic authentication instead of hardware authentication. It's quite possible that the rom I'm using has it already included.

What helped me fix google Pay was this post: https://xdaforums.com/t/discussion-...cussion-thread.3906703/page-120#post-85633343
[Android Software Development] archz2:
I flashed this Magisk module on my OnePlus 5T running on Android 10 with Oxygen OS. I'm still not able to pass safetynet check. What should I do?
[Android Software Development] ipdev:
OnePlus 5T and 6T are old enough that they do not need this module.

They do not have the hardware to support hardware attestation

Make sure MagiskHide is running.

If it is on, toggle it off and on to restart it.

Since you are running stock OxygenOS, MagiskHide is enough to pass SafetyNet.

If you still have problems, it would be better to ask in the Magisk General Support / Discussion - xdaThread - Link

Cheers. :cowboy:

PS.

I double checked on my 5T running OOS 10.0.1 ;)
[Android Software Development] eeeemc:
My Samsung A71 get passed all safertynet check also showing "BLUE" pass.

But when going into my Local Bank Apps, apps warn & kick me out saying detected device is rooted.

Needless to say , I made all necessary procedures such as TERMUX su -props choose Nexus 6P ..... Magisk Module Riru and others all installed relate to safetynet stuffs...... every steep between restart device...... finally Magisk Hide , give it another name instead of Magisk Manager .... hide all Banking apps.

Appreciate if any member shed some light on solution.

Thank you very much., edmond.
[Android Software Development] Andrologic:
Are you running on the latest SafetyNet fix? And have you tried adding the banking app(s) itself in LSPosed/Xprivacy and block tracking (important). Some banking apps have become smarter in detecting unlocked/rooted device, it's not enough to have a SafetyNet pass.

Also, some apps have started registering the SSAID assigned to the app and banning your device. The good news is, with root access, you can spoof it and "un-ban" yourself easily.

The above has helped me pass all banking apps that were able to detect me.
[Android Software Development] eeeemc:
Genius !!!

Thank you for solving my problem since several bothering me.

The main causes as I noticed was as you said :

tried adding the banking app(s) itself in LSPosed/Xprivacy and block tracking (important)

My Banking Apps are up & running now right after applying to above procedure.
[Android Software Development] archz2:
Thanks. I have always had magiskhide running. I toggled it off and then on. Still facing the same trouble. Could it be that I have also installed edexposed on my phone?

I'll create a post in the thread link you've posted also.
[Android Software Development] sdkyron:
Poco F3, LineageOS 18.1. Passes safetyNet in Magisk but banking app doesn't work so in my case, it's sadly useless.
[Android Software Development] sliding_billy:
2.1.1 working on final version of A12 GR on Pixel 3XL.
[Android Software Development] Tianhe:
Edxposed causes safety net failure, try using Lsposed instead
[Android Software Development] archz2:
Yes. I'll definitely do it.
[Android Software Development] MoL_82:
Search main Magisk thread. I think people use XPrivacyLua to fix this issue. I don't have this issue myself, so please check at Magisk thread.
[Android Software Development] eeeemc:
see some hints from above #1,291 by Andrologic

My Samsung A71 does not work but solved following to the solution. ( However , many pre-procedures you need to made as well as your device required ROOTED )
[Android Software Development] sdkyron:
I have installed LSPosed and xpricavy, still can't login with bank app using fingerprints
[Android Software Development] eeeemc:
First thing first , your device must be rooted.

From Magisk Manager > Plug-ins > you should have:

Magisk hide Props

Riru

From LSPosed, choose your bank apps > check-marked it so to hide it. ( This was the step I forgot to do until Andrologic told me to )

All my banking apps kicks me out when my Safetynet is passed in Blue. Other website required Safetynet check pass are okay and let me in except banking apps ( as I forgot this step )

Finalize it by Magisk Hide + hide Magisk with new name instead of Magisk Manager.

Every steps require each time restart device. ( so I turn tasker off during fixing safetynet )

Thank you very much., edmond
[Android Software Development] sdkyron:
But, that's the thing, from the lsposed menu i can't select anything. i installed the module xprivacy.lua and in there i could select my bank app.

That didn't help though, i still can't use fingerprints.
[Android Software Development] eeeemc:
Here's mine.............

LSPosed > Modules > XPrivacyLua

From there, you can scroll to seach your Bank Apps Name.

** note : I'm not using any sort of finger print methods for opening Banking Apps. I just open Banking Apps in normal way.

I've seen else where on finger prints fix for safetynet. Try search keyword safetynet and getdroidips

View attachment 5438021
[Android Software Development] sdkyron:
Ahhhh, in that case that makes so much more sense, i never had an issue with normal (pin) login with just magisk hide, i just wanted to enable fingerprints too :D

i'll search for safetynet and getdroidips
[Android Software Development] eeeemc:
getdroidtips Sorry, typo .........
[Android Software Development] Slim2none4u:
Did you toggle the app in Magisk Hide? If not, do so and then clear the app cache and restart your phone.
[Android Software Development] Dark_Eyes_:
Hey @kdrag0n I noticed that your module breaks At a glance on Android 12 and it seems to mess up with Continued conversation and maybe other Google Assistant things. Can you please look into that? Thanks!
[Android Software Development] bradical711:
Pretty sure he's already aware of the issue as it was mentioned on his GitHub issue tracker 3 days ago https://github.com/kdrag0n/safetynet-fix/issues/108. No response from OP yet on GitHub or XDA but I'm sure he's aware and brainstorming possible solutions. We might just need to wait a few more days.
[Android Software Development] sliding_billy:
Running 2.1.1 on a Pixel 3XL. I have Magisk canary (which was updated last night) running currently with Riru module. MagiskHide is turned on. The canary notes mention that (as expected) hide is gone now. I didn't install when the notification showed up, but I suspect Magisk will move to stable without hide very quickly. Ignoring the update, but also wondering if anyone tried it. Did the Safetynet fix break, and does anyone have a method to fix if so. If not, any plans?
[Android Software Development] Qnorsten:
There are a lot of mention about this in the general magisk thread https://xdaforums.com/t/magisk-general-support-discussion.3432382/page-2432#post-85825005

But be aware that you can't use riru and riru modules with newest canary magisk that use zygisk. So you can't use USNF 2.0 with it, until it gets rewritten to use zygisk instead of riru.

For some devices there are still ways to pass saftey net, by using USNF 1 instead.

I am passing saftey net fine with my oneplus 8T and latest magisk canary, but that device was never affected by googles latest server side changes.

The steps I did was

Enable agisk deny list for com.google.android.gms and com.google.android.gms.unstable

Togheter with either

UNSF 1.2.0

or

spoofing magisk hide props with MHPC (https://github.com/Magisk-Modules-R...README.md#setreset-magiskhide-sensitive-props)

But that might not be enough for all devices in that case you might need to stay on stable magisk until this module is rewritten to use zygisk instead of riru.

So either wait or try it out. You can always downgrade magisk again if needed.
[Android Software Development] sliding_billy:
Thanks, @Qnorsten, I will definitely wait it out. Not like there is any reason to upgrade something that has worked fine for me for like 6 months.
[Android Software Development] Qnorsten:
No real need to update until kdrag0n rewrite it for zygisk, which I am sure he will do eventually. I guess there will be a while before there are any other zygisk modules that make it worth while updating. Unless you are like me and just like to live on the edge.
[Android Software Development] j1gga84:
Hello,

Today I installed new Magisk 23010 with removed magisk hide but my banking payment app is still not working..

Also rootbeer fresh shows the device now as rooted after the update...

In magisk I choose Zygisk and enforce deny list and set the same apps like with magisk hide before but it will not work.

I had Universal SafetyNetFix 1.1.1 installed. I removed that and installed newest 2.1.1 together with Riru module but in rootbeer fresh Root is still present as you can see..

What else can I do now?

Regards
[Android Software Development] Qnorsten:
Have you enabled deny list for com.google.android.gms and com.google.android.gms.unstable?

You also can't use Riru or any Riru modules with zygisk. So you need to install V1 universal safety fix. Also might need to use MPHC to reset magisk sensitive props
[Android Software Development] j1gga84:
I have enabled it, also other apps and I uninstalled V2 and install V1.2.0 but still the same.. What do you mean with MPHC?

Regards
[Android Software Development] Slim2none4u:
MagiskHidePropsConf​

Release v6.1.1 · Magisk-Modules-Repo/MagiskHidePropsConf

This tool is now dead... Contribute to Magisk-Modules-Repo/MagiskHidePropsConf development by creating an account on GitHub.

github.com
[Android Software Development] klemi71:
@kdragon: are you planning to offer a Zygisk version of your fantastic module? I don't want to push you or something like that. I just want to know if you're interested at all.

Otherwise I'll have to switch to magisk alpha or have to try SU. Many users trust in you and hope you will help us out as John's job is difficult for this hide and seek game. Your abilities keep Android alive from being different to iOS. We just rely on you.

Best regards.
[Android Software Development] osm0sis:
It's in progress.

Worth noting when @kdrag0n does publish the new Zygisk rewrite of USNF then gms and unstable will actually need to be removed from the DenyList for the module to function correctly, not added like some people are doing now to get previous USNF versions working.
[Android Software Development] _litz:
Well that's just nuts. New version released tonight to Patreon users ...

And Patreon had apparently changed something in their website that breaks Google logins on Pixels.

I had to use Firefox to download the new version *on Google's own phone*.

Anyways, will try it after I update to A12.

Thanks kdrag0n for the quick work!

Yes for those asking, this newest version includes zygote as well.

My question is, with MagiskHide being removed from the Manager app in Canary, how do we manage the apps that are blocked from seeing root without that GUI?
[Android Software Development] pndwal:
Latest kdrag0n

Universal SafetyNet Fix Changelog:

· v 2.2.0

Changes since 2.1.1:

• Ported module to Zygisk

• Fixed screen-off Voice Match in Google Assistant

• Fixed poor microphone quality with Voice Match enabled on Pixel 5

• Fixed At a Glance weather display on Android 12

• Fixed At a Glance settings on Android 12

This version only supports Zygisk (latest Magisk Canary). See v2.1.2 for a Riru version.

Download

This version is currently only available to early access supporters. (Pledge now to get access or purchase one-time access.)

https://kdrag0n.dev/patreon/safetynet-fix/v2.2.0

👍😛 PW
[Android Software Development] pndwal:
Configure in new denylist. PW
[Android Software Development] _litz:
Got a link to details on that?
[Android Software Development] pndwal:
Magisk 23010 Changelog:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85823857

See Medium article linked, eg:

He also said on twitter recently:

On SafetyNet

Some notes re. how to pass:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85825005

New solution for checking:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85765345

🤠 PW
[Android Software Development] _litz:
I think what I'd like is less a "deny list" and more an "allow list" and only allow specified apps to detect and access root. To everything else the system should appear unmodified.

Kind of like a firewall.

But that's just my preference.
[Android Software Development] pndwal:
That simply wasn't practical with hidelist:

GENERAL RULE

Don't put more processes / apps in Hide List than needed

More on timing issues here also:

https://xdaforums.com/t/magisk-the-magic-mask-for-android.3473445/post-70363391

I doubt denylist functions are identical, but unless the 'hiding codebase' works very differently now my guess is that the same caution applies.

It should be noted that many functions are broken by indiscriminate hiding, eg. hiding (denying) Chrome breaks webview.

🤠 PW
[Android Software Development] ipdev:
First time my 4a is passing SafetyNet on Android 12. :)

Stock Pixel 4a [sunfish] on Android 12.

Magisk canary

Universal SafetyNet Fix v2.2.0

Thanks to osm0sis for pointing out NOT to add gms and unstable to the Magisk DenyList. 👍

Post # 85855445 - Link

Cheers all. :cowboy:
[Android Software Development] osm0sis:
We made the module auto-remove gms* from the DenyList, so it's harder for people to **** it up. 😛

If anyone downloaded it before ~4am ADT (GMT-3) make sure you have the v2.2.0 with post-fs-data.sh in it (which is the latest), since that'll work the cleanest in such a situation.
[Android Software Development] badaas:
Universal SafetyNet Fix v2.2.0

To get gpay to work after installing fix, I had to clear gpay storage, uninstall it.

Disable internet wi-fi and data.

Then clear storage of Google Play, Google Play Services and Google Service Framework.

Reboot, turn on internet, fix any warnings.

Install gpay and set up again.