yashsingh1/xdaforums huggingface dataset:
[Android Software Development] pndwal:
Good...

Is it failing when 'contacting your bank' or earlier?...

Could be issue with your bank's servers, Google servers, network issues, firewall on home network etc, adblocker etc on device, etc etc... 😬 PW
[Android Software Development] frostyboy_in_aus:
i see the 'add a payment method' for a second before it reverts back .... it is like an endless loop .... and ive tried using mobile data and wifi... its the same thing

no ad blockers
[Android Software Development] frostyboy_in_aus:
I just tried to add the card using another Gmail account (work address) and after doing so, it says:

This phone can't be setup to pay contactless.

Your phone doesn't meet security standards to make contactless payments. It may be rooted or running uncertified software.

BUT IT DOES.!
[Android Software Development] st@this:
Hi

I just want to tell you guys that i just paid my breakfast with the 2.4.0 version. The Google wallet works.

I am on a Mi 9t Pro with a custom ROM (latest Revolution X android 13)
[Android Software Development] Snowblind1991:
Well, I discovered that it's not just from the startup - it's failing to pass after long time not using the device. For example, I blocked the phone screen, left it home and went for 1 hour walk. Then, when I come home and unlock it, first 3-5 YASNAC scans fails (CTS and basic). Then it starts to pass everything again.
[Android Software Development] Snowblind1991:
Btw, right now when I was writing the post above, after doing that I went to YASNAC for check. 5 checks failed, then it started to pass again...🙃

But wallet is working and says that my phone meets all the security standards...😁
[Android Software Development] gj4560:
Yes I noticed this same behaviour too, sometimes both checks randomly fail but then pass again after a bit.
[Android Software Development] inzaghi89:
I

I can confirm on my pixel 5 that this solution works well, just like @Displax said - you need to wait few minutes. Firstly after reboot play integrity checker says that it's unable to download token. After ~2 minutes it pass integrity check.

After passing integrity check I've start gwallet and it seems work too.
[Android Software Development] xabier-bo:
I was wondering, maybe is OT...

Does any of you know why that big circle of light we see in the sky at night, is moving, sometimes missing a piece or even not there at all?

Does it happen to anyone else?

Does anyone know how to fix it?
[Android Software Development] crypticc:
For many thousands of years it was believed to be a moon orbiting our planet, but actually (the CIA) now believe it's been a balloon all along. 🤪
[Android Software Development] KProject:
Thanks sir.

Your save my life 👍
[Android Software Development] crypticc:
Just checking everyone disabled this App Install Optimisation in Google play store. I'd never seen this before. I don't know what data they actually send but there's no sense letting your data go so easily.

This is in play store itself and distinct from the setting in regular android settings page that you can disable while first setting you the phone.

View attachment 5834269
[Android Software Development] crypticc:
There's definitely something happening in the background with Google and apps exchanging data. PI checker reports I pass the device integrity and basic. Yasnc reports all pass, and root beer shows no root. Both play store and wallet report fine. Wallet has kept the cards I already had except the Citi one which has gone.

Citi app doesn't work.

Also cannot add the Citi card to wallet as it reports that 'your bank doesn't support adding card to this device".
[Android Software Development] Snowblind1991:
As far as I understand, YASNAC nowadays is not a reliable source to check the integrity and CTS. Maybe we should use PlayIntegrity check instead?
[Android Software Development] whitewallman:
Same. Seems that no matter how long I wait to check, even several minutes. It will initially fail a few times, then pass eventually. Then will randomly fail, then pass hours later.

v2.4.0-MOD 1.0 by kdragon, modded by Displax

Pixel 7 pro A13 February update
[Android Software Development] badaas:
Everyone is caining the play services API server to check integrity constantly.. probably borking out.
[Android Software Development] gj4560:
I don't think that's the case because why do the tests constantly pass when I'm on 2.3.1 mod 3.0 (even right after boot) :P
[Android Software Development] Ghisy:
Hey, which apps are considered GMS? Is it only Google Play Services and the Play Store?
[Android Software Development] pndwal:
Google Mobile Services (GMS) is a collection of Google applications and APIs... It's what modders know as proprietary GApps as opposed to AOSP, but includes many apps...

However, when members refer to gms in XDA threads, they generally mean only Google Play Services which comprises the background services and libraries used by mobile apps running... PW
[Android Software Development] crypticc:
Hi- while fixing a (temporary) loss of Magisk an looking at some logs when starting it I saw this in the logs.

At this point the Magisk was unhidden but failing, which I've now resolved.

I think this particular error might be play protect stopping failing because I had in airplane mode.

Is "cloudPC" and "enterprise-staging.sandbox" of interest to anyone or standard for every app installed?

Chris

Spoiler content hidden.
[Android Software Development] DartGerion:
Hi!

Sorry for bringing back the same old nonsense. I've tried dirty flashing on the weekend. Unfortunately the problem still persists and no integrity is passed. I haven't read the forum yet, maybe there's now a solution, however as i have mentioned before GWallet works like a clock.
[Android Software Development] lm089:
Strange, I don's see that in my playStore app under Settings >> General.

Play Store version here is 34.3.18-231, and no updates available
[Android Software Development] Displax:
UNSF MOD updated. Fix KeyStore hook desynchronization (tests randomly failing problem).

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-4-0.4217823/post-88132825
[Android Software Development] zalman1:
Now works great!

I added a new credit card to see if it works, and yes, it works great!

Thank you!
[Android Software Development] crypticc:
PS version 34.4.16-21 for me
[Android Software Development] crypticc:
Just installed over 2.3.1 MOD3

PI checker worked.

First check of YASNC checker reported CTS fail even though Play Store before then was okay.

For now it continues to work - thank you

I can say that bank app still won't open. I checked logcat and while there's literally 1000s of "errors" in the log that I take to the app trying to access API to see if rooted

It does use something called T M X Profiling or T M X Device Security Health if that is significant but I believe it's when collecting device data that could well be the step that fails...

Spoiler content hidden.
[Android Software Development] Snowblind1991:
Even with 1.1 version, after waking up the phone after no use (20-30 min) CTS and basic tests still fail. Guess we need to dig deeper 🙃
[Android Software Development] swieder711:
With Mod1, ran SafetyNet test 3 times. With no changes, failed twice than passed.

No upgrade button in Magisk to go from mod1 to mod1.1
[Android Software Development] digger16309:
2.3.1_MOD_3.0 passes API checker for me every time. 2.4 any version, does not. P6P stock A13 on Feb Update.
[Android Software Development] casouzaj:
I'm also back to 2.3.1_3.0. I could pass the PI tests (except for strong integrity, of course) with 2.4.0_1.0, but with it I couldn't connect to my home wifi router. Sony Xperia XZ2 here, running official LineageOS 20.0.
[Android Software Development] pndwal:
Most custom ROMs will wipe system even when dirty flashing, but now that I think about it, your stock ROM may not although I believe they should... You could try wiping /system only and dirty flashing again...

... I have not much more at this point, except that that kernel mod you removed may have left some setting in /data... Like apps, not all modules clean up properly...

You can check nothing unexpected remains in /data/adb/modules, but modules may make changes elsewhere in /data also...

Could be some other mod made changes in /data too... So if you can't put a finger on what's changed your only recourse may be to back up and clean flash ROM...

Another member may have further ideas re. what may failing PI basicIntegrity (hopefully) aside from all the common candidates we've covered... 🙃 PW
[Android Software Development] mrjuniork:
Thx for your continuous work on this fork 👍🏼

Not sure if I asked you before (if so, forgive me my holey memory), but have you ever considered creating your own thread for this fork?

It's not meant as a "get out of this thread" request, but more like having your own space for this work of yours to not get lost in here.

Cheers,

mrjuniork
[Android Software Development] Nightf0x_007:
Anybody here using riru can point me to latest version for riru please, TIA, pixel 6 here failing cts test & device integrity test, i dont want to switch to zygisk as i have some apps that detects root on zygisk but not on riru
[Android Software Development] crypticc:
I got the intermittent fail on device wake too. I know you folks do this more for the enjoyment and challenge but im meantime I've sent a couple of beer/coffees to @kdrag0n and if you have a landing page can do same for you. 👍
[Android Software Development] AusVGM:
I am using v2.4.0-MOD_1.1. Wallet meets security requirements but when I attempt to add a card, it no longer meets security requirements.
[Android Software Development] Exodusnick:
Hide the Google Play services in magisk manager in the deny list.

After that, restart your device.
[Android Software Development] Dave_247:
The other annoying thing I have found is that the play store will keep failing with a error when trying to check for any app updates, even if it reports the device is certified in the settings (I don't think they changes fast enough, as I've seen it flip between certified and no).

Wiping the store data doesn't do anything either, as when it updates it will just go right back to the same error.

Possibly just waiting it out might resolve it, but following a reboot will just go right back to the same error again.

Hopefully we won't have to start using the Aurora Store. 😅

Getting Google Wallet to work seems to be a lot less fiddly then the store.
[Android Software Development] V0latyle:
Shouldn't have to hide anything to get Wallet to work. USNF module removes Play Services from DenyList so there's no point in blocking it.
[Android Software Development] AusVGM:
I originally only had only gms and gms.unstable. Now that I've added them all to the denylist (with Shamiko), it seems to be working again.

Edit: I'll have to see how long it lasts for this time. Last time I got it to work it was back to insecure in a couple of days.
[Android Software Development] Fishawy:
Same, and I've seen similar reports on Telegram.
[Android Software Development] prot-:
Only the mod fixes the device certification issue for me but I can now no longer get updates in the play store...

I have cleared playstore and rebooted but same deal.

Pixel 6 pro

On 2.4.0 mod1.1
[Android Software Development] dewa5227:
Confirmed with me also.

Working for some time after cleared playstore and reboot, but it hit back.

Phone: op8pro , stock A13

On 2.4.0 mod1.1

View attachment 5835033
[Android Software Development] prot-:
After wasting hours today thinking it was cause of root or this mod I've found out it's happening to people everywhere non root stock lol. We've gotta wait for Google to address it by the sounds . False alarm
[Android Software Development] dewa5227:
Yup... Looks like now its google fault.

Google Issue Tracker

issuetracker.google.com

Update:

After further reading, and trying. Looks like when using VPN with USA ( in here i use protonvpn) it works fine and didn't spew error again.
[Android Software Development] Dave_247:
Weird, probably should have realised when wallet was working but the store still wasn't as it's not that sophisticated, but when it comes to Android who really knows anymore.
[Android Software Development] D€INOS:
Using patched EvolutionX rom I got displayx safetynet-fix-v2.3.1-MOD_3.0 working, passed, no errors or root pop-ups in Wallet, nothing hidden as the module does that automatically.

But I didn't get "tap to pay" to work, maybe because of the store where I used a bonus card before testing tap to pay but I switched to safetynet-fix-v2.4.0-MOD_1.1

Passes like 2.3.1 but I haven't tried "tap to pay" yet.

Anyone got "tap to pay" working?
[Android Software Development] mikeshutte:
Your latest update 2.4.0 does not pass CTS profile. I flash 2.2.1 and it works great. So if anyone else is having issues not passing CTS Profile, just flash 2.2.1 and you should pass then.
[Android Software Development] V0latyle:
2.4.0 MOD 1.1 works fine for me, Pixel 5 TQ1A.230305
[Android Software Development] SOCOM-HERO:
I'll have to update to Feb sec patch (I was a little bit behind this month) and noticed today that gpay didn't work (root message). Should I follow my normal process - pull file from AOSP repo into pixel flasher, flash as usual, but update the magisk module to 2.4.0 MOD 1.1 for safety net fix?
[Android Software Development] V0latyle:
Yes, shouldn't have to enable DenyList on anything unless the app specifically detects root even though BASIC and DEVICE integrity pass
[Android Software Development] swieder711:
Upgraded from Mod1 to Mod1.1 and am getting more consistent PASS results. 4 for 4 Pass results on mod1.1 and 1 for 4 on mod1. Play store updates work fine too.

YMMV.

P7P on stock Feb with Kiri kernel.
[Android Software Development] immortalwon:
I wonder if this Play integrity problem is occurring more on google devices rather then all android phones. I am still using safetynet patch 2.4.0 by kdrag0n and is still working perfectly. I am also using shamiko if that makes a big difference for certain bank apps.
[Android Software Development] V0latyle:
Entirely possible - Pixels are literally the standard for CTS proofing so they would ostensibly get updates pushed ahead of everyone else - including Play Services updates.

Depends on the app for sure. None of the apps I use do any specific root checking that I know of; it does not seem that GPay or Wallet do, instead they seem to rely exclusively on Play Integrity responses.
[Android Software Development] emlo16:
After installation 2.4.0_1.1 my wifi doesn't work. Revert to 2.3.1_3.0 and wifi works. Latest EvolutionX for POCO F4.
[Android Software Development] crypticc:
wallet?

I wish I knew how to debug the one that's tripping on mine. Either that or go back to previous app but it's not on any mirrors.

I keep feeling tempted to remove root temporarily by flashing back boot.img and with Magisk app unstalled entirely to see if it's even my device. But then I remember it'll trip anyway even when not rooted because unlocked bootloader.

Any tips from anyone on how to proceed?
[Android Software Development] V0latyle:
Google Wallet

Device, firmware, modules?
[Android Software Development] crypticc:
Device : Pixel 6 Pro

Firmware : Fully stock Feb update flashed as whole image from Google .

Root : No mods except latest Magisk applied to boot.IMG. Magisk Canary 25206 (34)

Modules - Shamilko, USNF 2.3.1 Mod 3 (tried the 2.4.0 MOD 1.1 but I saw google and YASNC both reported lost integrity for a minute after each reboot/device wake so thought I'd sit out and let 2.4.0 settle for a bit. )

Selected deny (inc child processes: Google Play Services, Google Play Store, Wallet

Also in attempt to resolve this added following to Deny : Google Play Protect Service, Android System Intelligence, BetterBug, Device Policy, Security Hub, Work Setup (managed provisioning).

Enforce deny : Disabled as per Shamiko requirements

Root apps : Magisk, Ice Box (to hide Magisk from banking apps), X-plore (added root to delete the duplicated Magisk original and hidden apps a few days ago), Cerberus (lost device/location/activity/wipe app)

Working : Everything except that one banking app. (Wallet etc okay and including several other bank apps that I know usually fail. Outlook, etc.)

Tried: Multiple attempts at wiping app data/cache, reboot, rinse repeat. Do I need to re-do all GMS ?
[Android Software Development] SOCOM-HERO:
updated my Pixel 7 to Feb version, displax mod 2.4.0 mod 1.1

I got the same warning in G wallet, but then merely closing and reopening it fixed the problem. No difference if I have it on the denylist or not.

YASNAC passed, then failed, then passed like 5x in a row. I wonder if there is some minor magisk module process delay going on occasionally? I hardly ever use tap to pay anyway, but it does seem to work like 90% now. Maybe a revision of the kdrag0n branch will solve the displax mod.
[Android Software Development] pndwal:
As I've mentioned a number of times, Play Protect device certification on many (all?) devices still calls old S/N API... Nb in older devices this is a function of Google Play Services, but many A11+ devices now have seperate Play Protect Service app... This may also still use S/N it seems, but I only have anecdotal evidence...

This means that PP 'Device is certified' is not a indication that apps using new Play Integrity API should appear in the Play Store... 🙃 PW
[Android Software Development] crypticc:
Some further information...

I didn't have the root list device/ location installed for some time now so struck through that above.

I've just tried uninstalling the various root verification, icebox, and Magisk apk itself. (Magisk now using configured app DB b4 installation)

Clearing data of the app with issue, uninstall.

Then clear Google play services, Google play, and then reboot. Reopen google play, device still certified, reopen wallet, adding card to wallet is fine.

Reinstall the app with issues, nope. Complained about tampered device.

Pause that app.

Reinstall Magisk app. Check app services and they're all still on deny list.

Uninstall app. Wipe data of app with issue and reboot etc. Still failing.

Thanks
[Android Software Development] pndwal:
Can have this with Shamiko, but shouldn't need.. and only 2 processes, not all!...

and why this?

I'd be trying w/o these...

Have you tried LSPosed W/ Hide My Applist module?... Many need this since many apps still abuse / get around Google's loosely enforced app detection policy...

Add the already obfuscated Magisk stub app and all other root-related apps and XPosed modules to a template set for use by your bank app...

Apart from root traces and applist, some apps detect mod traces such as TWRP folder, OEM unlock setting, USB debugging enabled etc...

🤠 PW
[Android Software Development] Fishawy:
This is not about "play store is certified". This is about not being able to download/update apps from play store, and the error "something went wrong, try again".
[Android Software Development] crypticc:
Yeah, USB debugging is the one that used to trigger that app, but I'd turned off and been happily using until the same day it all started to go wrong on this thread.

Per above I actually fully uninstalled magisk (not hidden).

Never used LSposed and hide module, I thought those were deprecated by Shamiko.

I will try tomorrow with less Google apps selected but this list was hoovered up from this thread at various points.

Aside from Xplore I don't think I have any root apps still. Actually thinking about it Root explorer which is just another file manager that I'll delete tomorrow.
[Android Software Development] pndwal:
Ah, should have replied to user you responded to about seeing reports of same issue. Member said:

... You and I are on the same page then: PP Device is certified is a red herring... PW
[Android Software Development] crypticc:
P.s.. And this app has child process with the where "zygote" in the name. It's the only app that has that I believe, and the only one failing. Coincidence?
[Android Software Development] pndwal:
No... Shamiko hides traces of root mods only, not suspected apps...

Doesn't need to be root app... Some banks detect anything that indicates you may have root incl detectors like ruru, rootbear etc... Add anything root/mod associated to enabled template...

Nb. Using BOTH hidden Magisk stub app and applist hiding is needed for some apps... One or other is not enough for likes of Sparkasse pushTAN... PW
[Android Software Development] pndwal:
Don't know... Which app? Is it added when selecting denylist by default?...

I have seen some apps needing extra processes hidden, eg Microsoft Intune etc... PW
[Android Software Development] cbomb1337:
Hopefully the dev figures out how to fix the battery drain caused by this module. I noticed it b4 on tab s7 and pixel 6. It makes google play services to crazy in cpu usage.
[Android Software Development] dewa5227:
https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-4-0.4217823/post-88140061
[Android Software Development] Fishawy:
Thanks for that, but it fails with & without VPN.

Perhaps I'll give it a couple of days and see if it fixes itself.
[Android Software Development] crypticc:
Everything under intune was already added to sent list. By the way I can see now as of today outlook now also failing. (I believe uses intune)

To access data associated with account....
requires confirmation that your device passes sl Google Play's SafetyNet check. We are unable to verify this. You can remove the account from the app or recheck the SafetyNet status.

This is with 2.3.1 mod 3 because I uninstalled the 2.4.0 MOD 1.1 version which didn't reliably report in Google play or checkers

Edit1: Recheck then worked!

Edit2: Then few minutes later, presumably after a sync, it all failed and kicked me out again.

Wondering if same thing happens in bank app except that doesn't give a retry option.

Was something done recently to stop apps even checking for safety net status? I've seen myself the timing issue for 2.4.0 mod1.1 but is something happening also for 2.3.1?

Outlook app also updated 6 Feb like the banking app by the way.

Thank you Chris
[Android Software Development] bsg411:
I only read about a page of this thread because I was looking for Univeral safetynet fix 2.4. mod 1.1 (if it exists) because I was just curious. I'm running P4XL stock rooted with Feb 2023 Factory image with latest magisk hidden and all the necessary apps in the deny list. Installed USNF 2.4. I cleared the cache and storage of the play store, wallet, and play services apps (in airplane more) rebooted but could not pass CTS profile and get device certified and wallet still detecting root. I tried USNF 2.3.1, 2.3.1-mod, and 2.4.......none of them worked. For the hell of it, I tried my old 2.2.1 using the above procedure and it worked. Now have google wallet working again on latest update.
[Android Software Development] V0latyle:
2.4.0 Mod 1.1 should work on TQ1A.230205. If you've made any previous prop changes, make sure you revert to original. The only apps/processes that may need DenyList are those that specifically detect root, none of the Google ones.
[Android Software Development] pndwal:
Not that I'm aware of... I never moved to the 2.4.0 mods...

Haven't had any further issues with my experimental 2.3.1mod setup:

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-4-0.4217823/post-88105783

No further issues with setup above... PW
[Android Software Development] crypticc:
Weird

I've just gone back to 2.4.0 mod 1.1 and side from teething issues when first boot/check I have certified in play store, yasnc and PI check, and was able to add back my bank card (different bank) into wallet.

But still that other app and outlook fail. It's like they're checking something not caught by either USNF or Shamiko.

Looking at your config what's droidguard? Can't find it.

Which Magisk branch are you? I'm still on Canary from original instructions that Canary has A12 capability, but I guess that may have since been updated into stable