yashsingh1/xdaforums huggingface dataset:
[Android Software Development] zgfg:
General rule:

>>if it ain't broke, don't fix it

But if you have any problem with SafetyNet passing or Device Certified, specially Wallet (former GPay), then take USNF

Btw, you can disable MHPC, install USNF and reboot and if you're happy just uninstall MHPC

If not happy with USNF, uninstall USNF, enable MHPC, reboot and you will have your old MHPC fingerprints in place
[Android Software Development] Lada333:
Did just do that. Didn't clear storage or cache from Wallet or Play Services.

Just rebooted, Wallet says I'm ready to tap to pay with my phone, Netflix also shows up in the Play Store.

So I'm all set, correct?
[Android Software Development] zgfg:
Should be ok.

You can also test Play Integrity - see posts above this morning
[Android Software Development] Displax:
Clear all google play services data. And delete sqlite fix.
[Android Software Development] 73sydney:
Especially that blooming sqlite fix nonsense...

i mean i tell people to visit the support link, in which the first thing i say is you prolly dont need it :)
[Android Software Development] Lada333:
I mean, how about just removing it from your signature?
[Android Software Development] pndwal:
I think cantenna is using @Displax's modded USNF...

That's what the mod does; apply a certified but old print, but targets gms SafetyNet process only unlike MHPC which makes changes seen globally... Please see this above:

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87210043

@kdrag0n is already looking at @Displax's pull request for this

https://github.com/kdrag0n/safetynet-fix/pull/207

and I believe it should be an ideal way to spoof certified on custom ROMs also as altered props should only affect gms (Google Play Services) SafetyNet process (positively of course) due to targeting, and not cause issues in other processes, even dependencies in gsm (eg main process). This is what already occurs with ro.product.model prop changes used to cause the mismatch that results in basic attestation for CTS Profile being accepted...

The old fingerprint used in by the @Displax mod also eliminates the need to set ro.build.version.security_patch to a matching security patch level (which is what MHPC does to get it's listed stock prints to pass even on custom ROMs).

Basically, if any potential issues are ironed out (eg they are looking at proper scoping to Play Integrity code by finding a separate target hook ), this will also be a nice way to reintroduce CTS Profile mismatch fix to USNF (a fix for this that did alter ro.build.version.security_patch was abandoned W/ version 1.1.1) making it both truely universal and a complete fix... Custom ROMs will no longer need to spoof certified using MHPC, and this should already be true for those using the @Displax USNF mod.

😛 PW
[Android Software Development] 73sydney:
i mean, like (since we're apparently talking like that).. its like forked on github etc, its totally not that simple..at least in my sig, people get some sense that me, who created it recommends not to use it...because like, its kinda bogus...
[Android Software Development] cantenna:
I am.

I am able to access Netflix on Play Store.

All other apps don't seem to be able to detect root.

I pass playIntergrity and YetAnotherSafteyTest..... Yet, at post, I get "Bad Card Type'"

I was on Android 10 a week ago and had been paying with my phone for well over a year
[Android Software Development] pndwal:
So no Shamiko?... So why is denylist not enforced? (Do you have another hiding module?) And is Google Pay/Wallet in denylist?... PW
[Android Software Development] pndwal:
Not sure of 'at post'; do you get "Bad card type" when trying to set up a card for contactless? Or other?...

Please give device details... Which Android now?...

Perhaps my post above gives clues too... PW
[Android Software Development] Lada333:
I mean like, I replied to your comment saying something like

but like ok whatever idk >.<

I'm unsure why you think we must talk super formally here, but whatever floats your boat.

The reason I asked you this was because I've seen you in this thread referring to your outdated Magisk Module multiple times, and how you wished people would stop using it.
[Android Software Development] fredapied:
Works like a charm

thank you so much
[Android Software Development] Method47:
Hello!

I also had the issue where Google wallet was not allowing payments.

However after my recent update of OxygenOS and Magisk, this seems to have disappeared and payments are working as usual. Is it something specific that has to do with either oxygen os update or magisk?

Device is Oneplus 7T Pro

OxygenOS version: 11.0.9.1.HD01BA

Magisk 25.2(25200)

Modules:

Magiskhide props

Universal safety net fix original version no edits.

Also magisk hide props has not been used, no fingerprint changed.

Magisk settings is zygisk on and hidden magisk app.
[Android Software Development] cantenna:
Sorry, should say 'Point of Sale' the terminals, they all say the same message, "Bad Card Type'"

Also, my NFC turns of when it is denied.

Android 12i, Lneage OS
[Android Software Development] pndwal:
And this?

👍 PW
[Android Software Development] cantenna:
Should say turns NFC off.

What are the exact steps for me?

Install the universal Safteynet fix mod from this thread

Install magical hide props because I use unofficial rom? Is there a recommend device I should spoof or Android version?

Install GPay sqlite fix?

Install Shamiko module, configure Deny list and not enforce?

Don't use xposed at all for no.

Anything else?
[Android Software Development] pndwal:
mmm - you still have not answered these questions. (Asked twice now)... 🙁

Good.

Don't (with @Displax modded USNF). See usage note:

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87198517

No. (Remove.)

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87212993

Not needed (for GPay/Wallet or Play store) but shouldn't cause issues / may help with other apps... I have it... Enforce if you don't use Shamiko or other root 'hiding' module.

Don't for now. Use LSPosed later...

Depends... PW
[Android Software Development] 73sydney:
Please dont.....
[Android Software Development] switchy85:
So on my P6Pro I updated USNF to the new mod version and I now have to type in my pin every time I use GPay or contactless payments, even after it asks for my fingerprint. Is that a normal side effect of this new version?
[Android Software Development] pndwal:
Is fingerprint sensor (for biometrics) working at all? PW
[Android Software Development] Strephon Alkhalikoi:
Google always requires the unit be unlocked before contactless payments would work; at least it does with me and my P6. Also, some stores are now requiring pins with contactless payments, Yours is more likely one of those, and I don't believe it to be a USNF issue.
[Android Software Development] digger16309:
My bank has been relentless with detecting root. For a long time I had it blocked with USNF 2.3.1 and Shamiko (bank checked off in deny list, cache and data cleared, uninstall, reinstall). As with some other apps (Microsoft, GPay), my bank is now again detecting root as is a corporate app that wasn't detecting root before.

Magisk is hidden.

I upgraded to USNF 2.3.1-Mod and Shamiko 0.5.2 on Magisk 25.2 and no joy. I'm using a Pixel 5 with stock ROM and Kernel, with LSPosed. Play Store Certified. YASNAC passes. I tried going back to Shamiko 0.5.1 and non-modded USNF and no joy there either. I know HMA is abandoned.

Am I missing anything I should be doing?
[Android Software Development] switchy85:
Fingerprint to unlock the phone works just like normal, and when I access apps like capital one my fingerprint gets into it no problem. Only the GPay app and going to use a card requires both a fingerprint and my pin, which it never needed before this new mod version was updated. I use contactless payments every single day, so I just used it before updating USNF.

Edit: Ok, so after rebooting a couple of times it's not doing this anymore. Not a clue what happened at first last night, but it's all good now.
[Android Software Development] cantenna:
I'm using Shamiko and not enforcing deny list.

I removed Hide Props

I just tried again, not working here.

Thanks for the advice though.

Update: and for kicks, I then tried again hide props and spoofed a one plus device (Android 6 that failed too.
[Android Software Development] pndwal:
So you wiped G Play Services and G Pay/Wallet data, rebooted before first start, and set up again after all charges?.... PW
[Android Software Development] cantenna:
Not this specific instance, but wills do and try again.

(I have done this however multiple times last week)
[Android Software Development] pndwal:
After wipes, reboot before first start to avoid issues with Activity list etc. PW
[Android Software Development] jnss98b:
You were right I didn't need to wipe at all. Funnily tho wallet did turn around but I still can't see netflix in the play store still. Also I haven't used tap to pay since so I need to check again when I can
[Android Software Development] cantenna:
I should add, all the while, no apps including my banking app detects root.

Netflix is also available for download.

Google Pay never once complains.

Play integrity and YASNT passes.

I wonder if NFC on my rom is working or not.

NFC test apps state all is working.
[Android Software Development] tha_mechanic:
Worked for me! Thank you for fixing this!
[Android Software Development] LedgendaryEpics:
Running crdroid pixel 3, on android 12, have systemless hosts, Zygisk enabled, Shamiko, deny list not enforcing, usnf mod zip flashed, using nikgapps (akzzycomp) yasnac passing, but still get message from google pay that device is altered or rooted and can't use contactless payments.
[Android Software Development] pndwal:
Please read back a few pages here...

Ref tip: New Play Integrity API... PW
[Android Software Development] Lada333:
https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/page-91#post-87198517
[Android Software Development] Bhargav97:
My work profile (set up using 'Company Intune Portal') apps are now detecting root. I removed work profile and tried setting up again after configuring denylist again. Still detects root. Please find more details below:

Device: OnePlus 6t (fajita)

Magisk version: 25.2

Safety net: passes

Using Zygisk and denylist configured for all work apps

I have been using magisk with work profile for a long time now, it's always worked once I configure denylist but a few days back it started detecting root. Any thoughts?
[Android Software Development] LedgendaryEpics:
I already have usnf mod zip flashed, I still get the same message on gpay about root / altered modification for not allowing me to use contactless payments.
[Android Software Development] LedgendaryEpics:
(Why can't people be direct?)

If you're talking about the usnf 2.3.1 mod zip, I've already flashed it, now does it normally take days to work, or is there something else I need to do given my previous posts?
[Android Software Development] svendsvin:
Error
[Android Software Development] Lada333:
I assume you have removed any fingerprint spoofing and have cleared data and cache of Wallet, Play Store, and Play Services?
[Android Software Development] LedgendaryEpics:
The only fingerprint spoofing I can think of is having Shamiko enabled? Should I disable it?
[Android Software Development] Lada333:
Maybe? I read it either in this thread or the other big one talking about Google Pay being broken is that random Magisk modules can also trigger root detection. One user had to disable a custom font Magisk module to fix all his problems.

Try to disable all Magisk modules except for the new SafetyNet fix, and see if Wallet still says your device doesn't meet security requirements.
[Android Software Development] LedgendaryEpics:
Oh, alright- thanks for your help, I'll update if I notice anything.
[Android Software Development] LedgendaryEpics:
Still a no go, wipe cache and data also, Should I also keep systemless hosts enabled?
[Android Software Development] Lada333:
I have systemless hosts enabled, yes.

As I understand it, this patched safetynet thing is still not 100%, it doesn't work for all users. If you can't get it to work, you can always just revert back to using props to spoof your device's fingerprint until a new universal workaround is found.
[Android Software Development] pndwal:
To confirm; MHPC (if used) disabled, SQLite Fix (if used) disabled, Shamiko shouldn't interfere but might pay to disable all unnecessary modules to test as mentioned... G Pay/Wallet in denylist, denylist enabled or disabled if using Shamiko or other hiding module, Zygisk enabled, wiped Play Services and G Pay/Wallet data and rebooted after any changes, also, after wipes, reboot before opening G Pay/Wallet...

Further, I see you have crdroid, pixel 3, android 12...

If still not working, I'm guessing crdroid ROM may integrate USNF and spoof passing fingerprint and matched security patch date as many custom ROMs do. (Can ROM pass SafetyNet without Magisk?)... If so, integrated mods may be conflicting with Magisk modules, and I'm unsure how this can be resolved... May need to contact crdroid maintainer... PW
[Android Software Development] ChocoboX:
Pixel 4 XL with Android 12 and Magisk 25.2

GPay does not work.
[Android Software Development] pndwal:
Xiaomi RN8T with Android 10 and Magisk 25201

GPay works!

Wallet works!

Everything works!
[Android Software Development] ChocoboX:
The issue seems to be with Android 12 rather than Android 10 or 11. I had it fully working on 11 before I went to 12.
[Android Software Development] zgfg:
And did you try with USNF 2.3.1-mod
[Android Software Development] ChocoboX:
I did't know that there is a mod version. I'm searching for it right now. I'd appreciate if you can provide the link. The first page did not mention it so I'm going through the list.
[Android Software Development] Homeboy76:
This thread, Page 91 - Post 1,820
[Android Software Development] zgfg:
It was posted in GPay thread

BUT, if you read/followed posts right in this thread from the last 4 or so days, you will find posts with the direct link

The whole thing (Wallet, new Play Integrity API, USNF mod version, PI API checker) is the hot topic being discussed here for the last ten days - hard to bi omitted
[Android Software Development] ChocoboX:
I found it and installed and tried it and it did not work. I'm trying to follow the steps mentioned here and see.

[Magisk] Google wallet (pay) with magisk

Saw on reddit that some people have issues with google pay, since the new update added some new checks. So here is what you do: - Update Magisk to 25.2, Update magisk app to 25.2 as well - Rename Magisk app if you havent already - [ OPTIONAL ]...

xdaforums.com
[Android Software Development] ChocoboX:
Looked like it worked with MagiskHidePropsConf I can see my card now without an error. I used Android 11 for Pixel 4 XL just to be safe. I need to try it at McDonald's now to see if it works.
[Android Software Development] pndwal:
Yup, can spoof a different fingerprint to get it working w/ USNF (needed mainly for 11+ devices), but prop is seen globally so may cause issues...

@Displax mod uses Zygisk to target gms SafetyNet process only... Link/info/usage here:

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87198517

See checklist in post before yours (first part) too:

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87226457 PW
[Android Software Development] m0han:
Off-topic for this thread, but...

See screenshot. I noticed it when I went searching for GPay thread. Is this a new layout for XDA forum - sorting posts in a thread by date or by vote? Also, voting up/down for each post a la '4pda'?
[Android Software Development] misiek735:
Hi! Did you figured it out? I am using lsposed with hidemyapplist, all the settings in Magisk are set up properly, I am using Magisk hide module and 2.3.2 universal safetynet fix, but even that Outlook doesn't want to work...
[Android Software Development] swieder711:
Once I installed Shamiko then I was able to run Outlook without it detecting root.

Did you hide all the files under each app in Magisk? That is required
[Android Software Development] LedgendaryEpics:
Thanks for your help man, started working a day later, cheers.
[Android Software Development] LedgendaryEpics:
I guess you really have to wait some time before usnf 2.3.1 mod zip to take affect...
[Android Software Development] jnss98b:
Could you elaborate on why? I distinctly remember you were the same one who told me to use the module at one point a few years back
[Android Software Development] jnss98b:
It should work after a few days. Mine did after 3 days without clearing data of anything
[Android Software Development] CSX321:
This has been interesting. I also didn't clear any data, and for me tap-to-pay worked the next morning, but it took 3 days for Netflix and Hulu to reappear in the store.
[Android Software Development] jnss98b:
Yeah idk why people keep saying to clear data and stuff. Just be patient. Also a lot of the times clearing data doesn't work at all, just look at all the messages saying so. It never worked for me and clearing gps' data is a pain in the ass afterwards I just stopped doing it ever
[Android Software Development] zgfg:
Why don't you Clear Cache and Data from Settings, Apps for Wallet (GPay) and/or Google Play to force re-synch
[Android Software Development] 73sydney:
To be fair clearing data for packages has been a valid fix for app (mis)behaviour since dawn of Android times, and especially for things like getting Google Play Store to reset its certification or get Google Pay working. That now, due to some internal app changes, it *may( not be necessary, doesnt mean its not still a valid process for some (XDA threads should tell you that not everything that works for one, works for all), and cannot hurt...though it might be a pain in the bum when done :)
[Android Software Development] jnss98b:
@73sydney Thanks for the lengthy post. I think I get the gist of it and will remove the aforementioned module. Should I also remove the sqlite 3 universal binaries module too bc I remember it was only for that gpay sqlite fix module
[Android Software Development] 73sydney:
You forgot to add put the phone in airplane mode before clearing the cache and data, which works for me everytime i want @pndwal to tell me im a secret American (for Airplane) and its "not necessary" :)
[Android Software Development] zgfg:
No, I didn't forget, I used to suggest back in 2017:

- put to airplane

- clean cache and data

- reboot

- airplane off

But I'm no more sure is airplane mode really necessary - I don't see what/how could interfere (clearing takes less than a second)

Airplane mode and rebooting is more to make it full proof
[Android Software Development] 73sydney:
The SQLite Binaries module was an expanded package inspired by a smaller SQLite Binaries module that yes most people only ever used for the GPay module, though i myself use it for other modules ive never released. Mostly because im still testing them and easily sidetracked with a million other things, one being the one that optimises/vacuums databases on schedule once/twice a week - essentially what SD Maids core function is but without the possibility of people (without editing the script) of over/mis using it like people do with SD Maid. If theres enough (dis) interest in it i might package it up and release it into the wild, i did have concerns about some peoples inability to sit patiently doing nothing for 5 minutes while it worked to best avoid even a chance of db corruption, but i just turned 51 and ive decided im going to look into embracing chaos, so it may appear.... i started work converting an older init.d script that did the job into a module back in January, when i was talking to @rodken about another module he was toying with and questioning its effectiveness (i havent forgotten Rod, i recently revisted that one too and am close to sorting out an issue with it) if that gives you any idea of my ability to get sidetracked on projects.
[Android Software Development] misiek735:
Yes, I did it. Unfortunately no help.

The only thing which works temporary is to kill both apps (company portal and outlook), clean cache of those apps and then open outlook. It will work for a few min, but then the recognition of root comes back.
[Android Software Development] swieder711:
Have you tried Shamiko? I was having the same experience as you, but the apps stopped detecting root once Shamiko was installed.
[Android Software Development] zgfg:
I don't use Outlook but I have no problem with Teams

However, if you have Intune, then the problem is in Intune, not in Outlook or Teams - it's been discussed in one of the threads here (not sure which one, this, Magisk, or Magisk Zygisk, etc and not sure was it a week or two ago - hence cannot give you the link)
[Android Software Development] kevinthug:
Working like a charm :)

Thanks
[Android Software Development] pndwal:
Your generosity is only exceeded by your good looks mate... bit like your verbosity...

Who's a terrible pendant, you loose-hanging piece of (badly made) jewellery?...

Apart from being a Mrs A. Malaprop you're a neologist; - whats 'ariplane mode'? .... 'airplane mode' is enough for most Americans...

Disambiguation:

He means Pedant...

He means airplane, aeroplane...

At 51 he's having trouble with his eyes and his left arm is partially disconnected from his brain... apparently... What with lysdexia, a mevelopdental disorder affecting com-com-com... talking to people, a range of obsessive compulsive disorders and an inordinate attachment to cuddly toys, it's a wonder he can function at all!

There, I bit... But I coulda had you for dinner... 😋 PW
[Android Software Development] 73sydney:
I knew you couldnt resist the juicy pendant mistype, its like i dropped the bait right in front of you, set the hook and reeled you in :) I'd call you predictable but theres better things id prefer to call you :)

You should be enjoying the new buffer ive created by moving house to Balmain on Monday. I really should buy you a coffee one day, and bring him

But thats all my off topic time spent for the month/year :)

I should be back to getting some projects finished, as im back on my normal setup complete with 32" G7 (if youre going to go curved, go 1000R) after having to spend the last month squinting at my 13" Zenbook....@rodken might actually get a finished module from me he asked about back in January, and i last checked in with him about in March :)
[Android Software Development] huskydg:
@Displax can you explain more this part? Use "6.0" to ensure no one use "same Android version"
[Android Software Development] Lada333:
I used to use props to change fingerprint from a12 to a11. When I switched over to new usnf, I restored default fingerprint, removed props module, then added new usnf module, and only then did I reboot. Luckily, I didn't have to wait at all, the switch from props to the new usnf was flawless.

Strange stuff.
[Android Software Development] triggerhappy_:
Is it safe to install the 2.3.1 being on the latest Kirisakura Kernel?
[Android Software Development] pndwal:
No reason I know of that you shouldn't... You'll want modded (unofficial) version for Play Integrity API however...

Also please can you say what device you have? ... Please detail how you got Magisk installed with Kirisakura if you have 25+ and a late (2SI) device... Thanks, 👍 PW
[Android Software Development] pndwal:
X2...

👍 PW
[Android Software Development] zgfg:
Btw, maybe it would be good to have that configurable through some text file in the module's folder

That user can choose between the options (in a comment/uncomment manner or put the prints himself)

Most of the users would not need (and would not know for, and how/why), but those interested would be able to experiment

Native/Zygisk (compiled) code in the module would read from the conf file and apply the given ones
[Android Software Development] huskydg:
I think the reason should be "use 6.0 to ensure google not enforce the strong check"