yashsingh1/xdaforums huggingface dataset:
[Android Software Development] Pippolepippa:
Hi guys, Samsung S10 here with stock rom. Discard the below and sorry for the noise. After installing the (paid) 2.0.0 version from @kdrag0n, I now pass both basicIntegrity and ctsProfile (with evalType BASIC).

I have tried both the xprivacylua route and the safetynetfix route (I actually have both at the moment).

I'm passing basicintegrity, have evalType=Basic (yeah!) but I'm failing ctsProfile.
[Android Software Development] F308:
My LSPosed on Galaxy A41, Android 11, said it was not fully activated because it could not modify selinux configuration then xprivacylua neither worked.

BTW:

I observed the same behavior when I tried to change selinux status from terminal about 2 months ago, running command as root of course.

Still seeking for solution, reading XDA forum too.
[Android Software Development] pndwal:
Actually, I wondered if that may fix/help! Thanks for confirming.

I had seen XDA Editor in chiefs response to John Wu here:

www.twitter.com/topjohnwu/status/1433496852054216738

but wasn't sure, and didn't get a response...

Worth $6 USD!... Love to know if this is a universal fix...

Link for any interested:

https://kdrag0n.dev/patreon/safetynet-fix/v2.0.0?utm_source=github PW
[Android Software Development] TheKerevas:
But is there any news if 2.0.0 works? If it really works I'm happy to contribute...
[Android Software Development] pndwal:
Clearly working / fixing current issue for some... whether it's a universal fix was my question too!...

Guess it's a punt at the moment. 😜 PW
[Android Software Development] lordmd:
For my POCO X3 Pro (EEA latest stock rom update) the method with XPrivacyLua worked fine. Showed the device as certified again - in play store.

Only for the safetynet check in Magisk Manager I needed (which I forgot first and it threw me still the failure) to also force stop (to make it restart) the play services.

I only blocked the tracking in XPrivacyLua. Also Netflix showing in play store. (I think I did not even get to see Netflix there - usually not checking this since I do not use Netflix - before ... when weeks ago the safety net check still worked.)

Since I already used Riru and LSPosed for other stuff - this was on big deal for me to add/change ... at my phone. Let's see what Google is trying next. (My banking software though ... did not even check safetynet. Hiding in MagiskHide was enough. So I still have some leeway ... only used 1 other software that made problem. From my public health insurance some app to store personal data about the health. And data protection laws in my country are very strict forcing them to do a lot of checks lol.)
[Android Software Development] Courtrick:
I'm on galaxy a71, magiskhide working until a few days ago but no longer works.

Tried downloading safetynet fix 2.0.0 but it didn't work

Currently passing basicIntegrity but not ctsProfile with eval type basic

does anyone have any idea on how to fix

fixed using device simulation
[Android Software Development] jumpers:
Hi everyone,

i found nothing with the search function, but the search since XDA changed is board system is totaly weird, so i'm asking.

I'm running an Exynos Galaxy S10+ with Android 11 (oneUI 3.0), and i'm getting soft-reboots something like everyday since i have the fix installed.

the fix seems working for "safetynet checking apps", but those reboots are a bit annoying. (notification loss, randomness of those reboots, etc.)

is this a known issue ? and is there a workaround ? (it seems something that 2.0.0 fixes, because it's supporting heavy modified systems, but i'm not sure it's related to my reboots)

have a nice day.
[Android Software Development] Lord Sithek:
Most probably I was facing the same on my Tab S5e. You need the variant with shiming keystore: https://github.com/kdrag0n/safetynet-fix/pull/13#issuecomment-767863635
[Android Software Development] rolandyip:
I'm not sure if it found the right way but still failed.

anyway thanks.
[Android Software Development] Philnicolls89:
Here is the shim variant that I use for my s10+, is working fine with no random reboots or other issues.
[Android Software Development] Lord Sithek:
Right, I forgot we need a modded version to pass SN right now
[Android Software Development] Twistedlayers:
Yes me tooo
[Android Software Development] InsaneMF:
Redmi 9T (lime), Android 11, Miui 12.6 (xiaomi.eu 21.9.1)

Unfortunately, SafetyNet doesn't go through (API error).

Both the safetynet-fix-shim-MOD.zip method and the Telegram method do not work. The only thing that remains is waiting.
[Android Software Development] pndwal:
To be precise however, seems 'we' don't.

Some (like me; RN8T, & Mi Pad 4,) are still unaffected with previous measures only.

Those with the issue report a number of fixes incl XPrivacyLua method, latest 'early release' USNF module (weeks or so old now, and not created specifically for this Google change) and various methods of altering one or more of the several model props to cause the fallback to basic attestation (the modded USNF modules were simply created as a convenient single-fix solution for many, but old USNF still works when combined with old HardwareOff module, MHPC module configured to Force Basic attestation (seems that's actually what's needed despite it being "under-the-hood" use of Hardware attestation that occurs despite evalType = Basic) or for Device Simulation or simply set to 'delete' ro.product.model prop, or a simple boot script applied.

So really there's a arsenal of fixes aside from modded versions of this (USNF) module. 😜

Various alternatives (w/ links) here:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85582201 🤠 PW
[Android Software Development] pndwal:
Are you insane?

Thats not a fail...

If evalType = N/A, check your internet / network access, firewalls, adblocker etc. 😜 PW
[Android Software Development] jumpers:
thanks for your replies, i'm trying the file attached to Philnicolls89's reply.
[Android Software Development] InsaneMF:
I do not know what's wrong.

Installs a fresh ROM (clean install). I enable developer options and install Magisk. Nothing seems to be blocking.

Access to WiFi and GSM network is available, I do not use firewall and adblocker. Nothing else is installed on the system so far, even no configured accounts.

I will keep trying .... Thanks a lot for the response (y)
[Android Software Development] pndwal:
Have you tried w/ WiFi off to use mobile network data? (Could be a WiFi network setting.) PW
[Android Software Development] Phil21185:
logged in from an ancient account to say that the paid version of kdrag0n's module worked fine for me, when other methods didnt (xprivacylua, etc)

S10e, android 9, unlokced bootload, magisk.

Edit: Scratch that - removed riru and xprivacylua and SN reverts to hardware and fails CTS. funny how it wouldnt pass without USNF though.

EDIT edit: Thats because im dumb and it needs riru to work. Facepalm...

Edit #3: now my Hlaifax app wont work. All other banking apps are fine, and this one was before I started, wiht MagiskHide active on the Halifax app, but Manager itself not hidden. I did update manager to the latest version though...?
[Android Software Development] Promx:
Also tried the paid fix from kdrag0n and it didn't seem to work for me on my Poco F1 with rooted Pixel Experience 11+.
[Android Software Development] InsaneMF:
Reinstalled (clean install) rom Xiaomi.eu build 21.9.1 without wifi setup (LTE only).

Unfortunately, still the method of three files (riru, lsposed, xprivacylua) and the method of one file (safetynet-fix-shim-MOD), for me it does not work - "This device isn't Play Protect certified" and in Magisk "API error". I can't help it, I'll wait :cry:

Thanks for your support and tips (y)
[Android Software Development] amit_coolcampus:
Xprivacylua method works for me. SAMSUNG note 9.
[Android Software Development] pndwal:
Not sure what you mean by no 'wifi setup' on ROM...

You're not still using Magisk 22.1 are you? It had similar issue, but due to regression w/ snet extension causing SafetyNet API errors. Fixed in 23.0.

https://topjohnwu.github.io/Magisk/releases/23000.html

If you have full ctsProfile pass, PlayProtect certification is fixed by wiping PlayStore and Play Services data.

You can always use a different SafetyNet checker from PlayStore to check ctsProfile.

As there are positive reports re. latest early release USNF 2.0.0, also from Danny (@kdrag0n), I'd be parting with $6 USD to give that a whirl... But no guarantees, so please don't blame me if it fails... Good cause anyway even if it does. 😜 PW
[Android Software Development] pndwal:
Little confusing... Can I take it USNF 2.0.0 and Riru modules only are needed to fix recent ctsProfile issues (after Googles server end changes) for you, and that you now have ctsProfile pass in Magisk App - Check SafetyNet?

Confusing here too...

Check:

- Magisk App Check SafetyNet ctsProfile is passing.

- Have PlayProtect Device is certified in PlayStore settings (clear PlayStore and Play Services data if not).

- Hidden Magisk App.

- Bank app checked in MagiskHide list.

- Toggled MagiskHide off then on again.

- Cleared Bank app data.

If app still detects 'root' (ie. non-trusted execution environment), app is likely using Momo methods to detect isolated processes or other custom methods since banks are well aware that current implementation of SafetyNet API is patently unreliable... Come back for more tips. 👍 PW
[Android Software Development] InsaneMF:
"... without wifi setup .." I meant that I did not connect to the home network and disconnected the wifi on the phone panel. Only cellular data was turned on and connected.

I am using "Magisk 23.0 (23000) (21)" which says "Ramdisk YES", "A / B NO", "SAR YES". SafetyNet Check indicates "API Error", "basicIntegrity ⛔", "ctsProfile ⛔", "evalType N/A".

In "Settings" Magisk, apart from its factory settings, has: "MagiskHide ✅", "Hide Magisk App" - changed name/application repackaged.

In "Modules", "Riru v26.1.2.r505.c20529bced from Rikka" and "Riru - LSPosed v1.5.3 (5984) from LSPosed Developers are installed and enabled."

LSPosed is active and has the XPrivacyLua module enabled, with three items checked in it: "System Framework", "Settings storage" and "Google Play services".

XPrivacyLua has only one item selected: in Google Play services "Use Tracking".

The system, or actually Google Play Services, pops up on the screen with a double message "This device isn't Play Protect certified", which does not allow you to connect to the play store or synchronize, for example, contacts to the phone application.

First of all, I always assume the user's own error, i.e. mine (e.g. a slight oversight, wrong order, etc.). But since, along with a clean ROM installation, I am doing this SafetyNet bypass procedure (step by step reading) for the fourth time, I am starting to lose faith in my intelligence. :unsure:

Well, in the meantime I'm going to fix my car. Maybe I can do better with him. 🚗

Thanks for all past and future advice. 👍 See you later. 🤝
[Android Software Development] charlessxavier:
Currently my SN passes with Riru+RiruLSposed+XprivacyLua. Now with USFN 2.0, should that work with just Riru+USFN 2.0 ?
[Android Software Development] ilyabauer:
I've managed to pass SafetyNet with Universal SafetyNet Fix 2.1.0 but good 'ol Google Pay detects root. Device: Pixel 4a, any ideas?
[Android Software Development] F308:
Same for me after clean reinstall of Riru+RiruLSposed+XprivacyLua.

Phone - Galaxy A41.

Android 11 XEO.
[Android Software Development] pndwal:
Should if it works. Seems it does for many. Reportedly doesn't for some custom ROMs probably because of this:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85580011

Nb. USNF 2.1.0 (paid) is out now:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85591571

And USNF 2.0.0 is now public on GitHub:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85591591

🤠 PW
[Android Software Development] pndwal:
This:

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-1-1-0.4217823/post-85412511

If this doesn't fix, Nb point 4 (re old SQLite fix) here:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85582201 PW
[Android Software Development] ilyabauer:
Hmm Weird, I've done all of it. Device is certified, SafetyNet passing, did that SQLite database thing (installed mysqlite binary before running the script) rebooted of course, don't work, deleted the card, run the script again but added the card before restarting, still nothing. Maybe I should downgrade Google Pay app
[Android Software Development] osm0sis:
You need to clear Google Play Services and Pay app data to remove the cached SafetyNet failure. The SQLite hack doesn't always do the trick, but fully wiping Play Services definitely does.

That should probably be added to the instructions here somewhere.
[Android Software Development] ilyabauer:
Well that seems to work. Was worried about needing to log into everything after wipe but uhm.. no? Accounts are still there and card glows with "google's colors". Sooo thanks!
[Android Software Development] osm0sis:
Still good to go through Google in your Android Settings and make sure Backups and everything are set up again, but yup!
[Android Software Development] pndwal:
Well, seems you hadn't! 😜

Glad you got there anyhow... 🙂 PW
[Android Software Development] ilyabauer:
Btw what's with "PW" everywhere? Am I that behind on the acronyms? haha
[Android Software Development] klemi71:
2.0.0 doesn't work. As 2.1.0 is paid, I'll just stay with the free and working modded 1.2.0 🤷🏻‍♂️. It doesn't require right, either. No need to pay for that. Always thought Linux is a different world...
[Android Software Development] osm0sis:
PW is just a signoff for "pndwal" 😛

On the other hand, someone willing to step up and devote the time and energy to maintain a universal SafetyNet mod effectively actually probably deserves your patronage and donations... 🙂

He's actually quite generous since it's only paid for the early access and he eventually makes it all public. 👍
[Android Software Development] pndwal:
Thanks.

The fact it has fixed new ctsProfile failure for some is clearly unintentional since it was released before that began.

New 2.1.0 has proper fix added as per release notes, no doubt a model prop change which causes the mismatch triggering fallback to basic attestation (Nb. we are talking "under the hood" hardware attestation that occurs despite evalType = Basic. 😜 )

FWIW, 2.1.0 also adds changes to duplicate MagiskHide functions that John Wu is presently removing from code in preparation for his next release. PW
[Android Software Development] hellrokr:
Earlier posted fix did not work.

2.0.0 did not work.

2.1.0 confirmed working.

Universal SafetyNet Fix · 2.1.0

Xiaomi POCO x3 NFC.
[Android Software Development] Slim2none4u:
Can also confirm.

Fix 2.0.0 did not work for me.

Fix 2.1.0 CONFIRMED working.

Universal SafetyNet Fix · 2.1.0

Pixel 4a latest A11 build (Aug)
[Android Software Development] morfikov:
For my Xiaomi Redmi 9, the 2.0.0 version doesn't work (Android10/MIUI12.0.1). I don't know whether the v2.1.0 will work.
[Android Software Development] Homeboy76:
Deleted.
[Android Software Development] Homeboy76:
Thanks for the info. :)
[Android Software Development] patrikos23:
I paid and it cannot be charged. This page is a scam
[Android Software Development] patrikos23:
ok, I got it by e-mail. No and safety net passes but gpay doesn't work
[Android Software Development] howpathetic:
For me it is not working as well sadly. Maybe it has to do something with Pixel Experience and it's prebuilded utils :( V2.1.0
[Android Software Development] conmaxanhle:
USNF v2.1.0 confirmed not working on Poco F2 Pro Custom Rom ( Cherish OS and Spark OS A11 August Build)

P/s: Have receive refund
[Android Software Development] Ranger2060:
For me it is working with:

- Magisk 23.0

- enable Magisk Hide in Settings

- Module SafetyNetFix v2.1.0 -> https://kdrag0n.dev/patreon/safetynet-fix/v2.1.0

- Module Sui v12.1.4 -> https://github.com/RikkaApps/Sui

View attachment 5403773

SafetyNet Check

View attachment 5403775

PlayStore is certified

View attachment 5403777

Google Pay is working

If it' not working with these settings, you have to delete Datastore of following Apps:

- Google Play Service

- Google Play Store

- Google Pay

and reboot.
[Android Software Development] fly.dvorkin:
POCO X3 Pro stock firmware, magisk, paid safetynet-fix-2.1.0

With this module and setuped screen lock graphical key do not work Google Backup (bmgr)

Any ideas?
[Android Software Development] LeMaki:
Thanks, confirmed working great on Mi 10T Lite, I can pay with google Pay again. I had a little trouble with finding Play Services in Lsposed, I had to check, uncheck, and recheck system apps for it to show I don't know why. After that don't forget to clear Play Services AND google play store data

The full post is there, much more detailed than here : https://telegra.ph/Pass-Safetynet-on-Rooted-Device-09-02-2
[Android Software Development] elong7681:
How do we install the safetynet 2.1 module in Riru
[Android Software Development] patrikos23:
work fine :) thanks
[Android Software Development] blackReaper001:
you need to use magisk hide ,riru ,kdragon 2.0.0and then Ls posed , xprivacy and to pass safety net. just confirmed in right now on my rn8p

reboot after each step

1 after magisk hide

2 after riru

3 reboot after kdragon

4 then Lsposed

5 install xprivacy enable it tick 3 things and reboot

6 after reboot open xprivacy and select playservices and tick tracking and clear all data of play store and play services and reboot

7 open magisk and check safety net

saying what worked for me check time on the images no lies
[Android Software Development] JcGabrie:
Safetynet Fix 2.1.0 working in Galaxy S21 SM-G991B.
[Android Software Development] elong7681:
@JcGabrie is there a guy how to install the safetynet module with Riru?
[Android Software Development] JcGabrie:
Not really... Just install Riru first (you can find it in the Magisk repository) restart your phone.

Then download Safetynet Fix, open Magisk and tick "install from storage" select the file you just downloaded (Safetynet Fix) and install it.

Then restart your phone

If you got a boot loop make a hard restart by Pressing and holding the volume down key and the power key for seven seconds.
[Android Software Development] elong7681:
@JcGabrie thank you for your help.
[Android Software Development] JcGabrie:
you're welcome, let me know if it works for you.
[Android Software Development] elong7681:
@JcGabrie It worked thanks!
[Android Software Development] pimp2308:
hello,

perhaps someone can please help me.

i rooted my galaxy s21, but now the google store says my device is not zerficited, and magisk says under safetynet its not working.

can please someone say me what i had to do?
[Android Software Development] pndwal:
Not really enough information.

Have you installed this module? On stock Android 11 or other? MagiskHide is on? Riru installed?

Nb, even with above, last public fix doesn't address latest September Google server end changes causing ctsProfile attestation failure.

You need to read back here and in Magisk General Discussion thread to choose one of several additional solutions (Magisk modules) for that, or pay for latest 'early release' version 2.1.0 of this USNF solution on Devs Patreon, which does include a fix for this. PW
[Android Software Development] pimp2308:
You Are right.

With the latest fix IT works well.
[Android Software Development] eiric:
Hi,

Could someone with a Samsung S9 make the XPrivacyLua method working to pass the Safetynet check?

I followed this tutorial but the check still fails in Magisk: https://telegra.ph/Pass-Safetynet-on-Rooted-Device-09-02-2
[Android Software Development] Rockel:
I don't understand...

I got this working on my rooted Huawei Mediapad T5 running Android 8.

I got it working with the "safetynet-fix-v1.2.0.zip" module.

Tried this too on my rooted Moto G8 Plus running android 10, but did not managed to get it working so far.

- Magisk is installed ofcourse

- Magisk hide is enabled

- I've hided all the Google Play Services with Magisk hide

- Installed the "safetynet-fix-v2.0.0.zip" module in Magisk. (with Riru ofcourse)

But I'm still not able to pass ctsProfile attestation. Annyone anny idea where to look?
[Android Software Development] pndwal:
New Google server end changes in September. Several options for fixing. USNF early release 2.1.0 includes streamlined fix. Read back. PW
[Android Software Development] Rockel:
Thanks for your help!

But what I don't understand is that my tab with android 8 and Saftenet 1.2.0 is still passing ctsProfile attestation. All apps, also the google apps, are completely updated.

Only diffrence is somewhat the Android version. So not sure if this is the problem?
[Android Software Development] simbin:
Was on my device when Google forced a reset, despite it being EOL with no future updating supported. 🤔 After a few boot loops, ctsProfile now fails. Strangely enough, Device is still certified in Play Store.

Going to wait a bit and see how things shake out. Looks like the community already has its best people working on multiple fixes.

View attachment 5405227View attachment 5405229
[Android Software Development] _litz:
riru + SNfix 2.1.0 installed atop a Pixel 4 (with magiskhide), CTS failure. Did google change things again?

Are there other modules required beyond just Riru and SNfix 2.1.0 ?

(and is there any kind of management interface for either riru or SNfix ?)

Edit: silly me ... I mistakenly installed 1.2.0 instead of 2.1.0. (head-smack!)

After installing 2.1.0 it does indeed pass the SafetyNet check in Magisk Manager.
[Android Software Development] pndwal:
Don't think so, but who knows? 🤪

Custom or stock ROM? If Stock, certified or uncertified China ROM?

Depends on answer above...

Yes; Magisk App! 😜 PW
[Android Software Development] pndwal:
Play Protect will catch up and fail soon. 😕

...yup. PW
[Android Software Development] pndwal:
Both my devices, RN8T and Mi Pad 4, are unaffected by September change too... seems to be a selective / targeted Hardware attestation implementation...

Not sure if Android version affects mileage... PW
[Android Software Development] _litz:
So, an update ... after fixing my apparent attempt at dyslexia (v2.1.0 != 1.2.0) I do get safety net passing in Manager.

However, I can't add cards in G-Pay ... what has y'all's experience been here?
[Android Software Development] pndwal:
... So paid version w/ fix?! now; And yup, Riru need from 2.0.0.

Fix Play Protect 'Device is not certified' in Play Store settings; Wiping Play Services and Play Services normally does the trick.

Next, w/ Google Pay in MagiskHide list, toggle MagiskHide Off then On again, wipe it's data and try again.

Some are reporting needing SQLite fix again also. PW
[Android Software Development] pimp2308:
Because you made the certification before September 2 ?
[Android Software Development] Rockel:
Yes I did, on my rooted tab (android 8). Because ctsProdile was failing. And I had no netflix on it etc.

On my rooted phone (android 10) however, ctsProfile was passing dispite rooted.

So I left it untouched until now. Not messing up domething that works as needed :) It was still passing banking apps an netflix showed up in the google play store. I used the phone for a couple of months like this.

I had to check my contactless payments (which wasn't working yet though) yesterday. And this is when first gave me the message that it's rooted.

I checked ctsProfile after this, and showed me a fail now. Also Netflix dissapeared from Playstore. So I thought it was strange that it dissapeared somehow. I already thought I must had triggered someting going deeper into the google pay settings. But probably it's this sept update people are talking about I suppose...