yashsingh1/xdaforums huggingface dataset:
[Android Software Development] zgfg:
Using Denylist and HMA, and Ruru does not detect anything
[Android Software Development] 73sydney:
No one like a bragger @zgfg :)

If the kiddie has no luck, ill send him your way :)
[Android Software Development] bombadier:
Only thing is the Halifax Banking app needs an account as it lets you put the username and password in before it fails, have tried using the Adaway DNS logging and there is no unusual outgoing requests( I know the lloyds banking app seems to need some things blocked to work)

Never used TWRP and I know to check for things like that, tried disabling usb debugging but no difference,

I had uninstalled the banking app so no local data, installed it fresh after rebooting my phone and added it to the deny list before opening, this latest update mentions in the changelog something about security updates, as I said google wallet and Netflix are both still working so its something with the app,

yeah me changing the fingerprint was only meant to be a short term thing, at least the fingerprint is fixed cheers
[Android Software Development] 73sydney:
Needing a username and password before failing is new, and makes it impossible to test here :(
[Android Software Development] bombadier:
Thanks anyways after seeing the previous comments about HMA I found your write up about using it might give that a go ........
[Android Software Development] 73sydney:
worth a crack, otherwise you might want to give Magisk Delta a go

@zgfg will guide you if needed, smugly :)
[Android Software Development] bombadier:
Magisk delta might be the way to go. HMA has too many moving parts if you know what I mean, other as Magisk Delta's page any other good resources to check out ? I struggle with Telegram, seems to be too much nonsense floating about
[Android Software Development] 73sydney:
HMA is easier to setup than it used to be (you used ot have to rtemember to hit a Save icon on each step, which of course most people failed all the time)

If you change to Delta, remember to disable Shamiko, if youre going to enable Zygisk mode in Delta, you can use the same USNF module or you can use HuskyDG's own Riru/Zygisk version here that covers both options:

Release Safetynet Fix v2.3.1 MOD 2 (Riru/Zygisk) · HuskyDG/safetynet-integrity-fix

A workarround to pass SafetyNet / Play Integrity API on rooted devices with unlocked bootloader - Release Safetynet Fix v2.3.1 MOD 2 (Riru/Zygisk) · HuskyDG/safetynet-integrity-fix

github.com
[Android Software Development] zgfg:
I pass Ruru both with Delta and official Magisk, hence Delta not needed for
[Android Software Development] bombadier:
Aye so are you using official magisk with HMA or Delta with the updated built in hide functions ? so whats the best way for me to go ? or are you saying you pass with official magisk and nothing extra running ?
[Android Software Development] bombadier:
HMA has managed to hide root from the Halifax app
[Android Software Development] varunpilankar:
Thank you for your brief explanation and support. Really appreciate it.

Most of the points were covered already by me. Finally I tried lsposed - hide my applist with its proper configuration.

Finally it's worked!

I have tested it this weekend with 5+ payments using Paytm Tap to pay.

Just to keep a notes of while using lsposed hide my applist. It started breaking my app license for couple of apps like Tasker, Kustom apps, etc which mainly has root access and were added into the list. I fixed that issue by removing them from the list (fingers crossed, for not breaking them again) while keeping take tap to pay working.
[Android Software Development] Arealhooman:
I tried hide my app list on android 13 and I almost got a boot loo (triggered boot loop protection)
[Android Software Development] pndwal:
Not sure why you're posting this here; there's an HMA thread on XDA now. (Nb. It's a lot of fun too, if you like cats, smartwatches and other unrelated stuff! 😝)... But since it may benefit users here:

For A13 you need HMA 3.x... Some of us have been using 3.x beta... The first stable build, 3.0.6, arrived just 9 hrs ago:

https://github.com/Dr-TSNG/Hide-My-Applist/releases

... If you are using 3.x already, you may not have read release notes... It does pay to... Note this:

3. No longer need the Magisk module, make sure to uninstall it, or you will bootloop

Hope this does it... 😃 PW
[Android Software Development] 73sydney:
While i thank you for upselling my HMA thread, the bear is upset that you didnt mention him.....unlike me he's a known attention seeker....

It will be a miracle if he doesnt insist i post that pic of him over on the thread before the night is out....

And this is ALL your fault...
[Android Software Development] locolyric:
Any one have idea how to make this ewallet run ? I try all hide my app and magisk delta. And It won't work.
[Android Software Development] daddylonglegs:
Where is the Magisk wiki? There's like 3 websites that claim to be the official Magisk website
[Android Software Development] zgfg:
The only official site is Magisk Github

Link is on the front page in Magisk Manager.

There is also a link to the the TJW's Twitter (master developer) - not the official support but intersting and informative
[Android Software Development] daddylonglegs:
HOLY ****! I figured out how Nintendo is detecting root for people like me using edXposed/Gravitybox!

I just tried to open the Nintendo Online app and it intentionally forced closed as it always does when it detects root. So I did a little digging and found Pokemon Go players saying they deleted the SDCARD/MagiskManager folder and Pokemon Go worked for them after that.

I looked in my file system and saw no such folder but it got me thinking. Maybe they are even detecting the "hidden" Magisk app name?

On my phone it was hidden as just "Manager". So I unhid Magisk and this time I gave it a custom name (I named it "Blah").

That worked! The Nintendo Online app now works for me! Nintendo is looking for an app named "Manager" and refusing to launch their apps when it has that name!
[Android Software Development] Optiongeek:
Pixel 4a 5G running latest Android 11 (Build RQ1A.201205.011)

Installing MagiskHide Props 5.4.0 & Universal SafetyNet 1.1.1 and installing a cerrtified fingerprint worked like a charm. I now pass SafetyNet and GPay allows me to add my cards for in person payment.

Thanks!!!!
[Android Software Development] daddylonglegs:
I can also now 100% confirm that having the edXposed module enabled in Magisk causes safetynet to fail. It's the only module I disabled, and SafetyNet passed.

I am praying that some day there will be a fix for this. I love GravityBox so much that I am willing to not have access to Google Pay and Netflix. But I would be so incredibly happy if someone figured out a way to get SafetyNet to pass even with edXposed enabled. I'd be willing to put money on a bounty or something.
[Android Software Development] Uzephi:
NSO is working for me after hiding. Have you disabled all modules except the safetynet fix and see if those root detecting apps show not rooted? There has to be something either not hidden or a module is breaking magisk hide. Xposed is a likely culprit.
[Android Software Development] zgfg:
Many of us asked you to carefully test one by one and specially to disable EdXposed - you would have saved lot of time and ink😎

Anyway, now you know more about the whole thing👍
[Android Software Development] pogshamp:
Is there any solution for 32-bit CPUs?

I get this error when trying to install it: unsupported cpu architecture: armeabi-v7a
[Android Software Development] Uzephi:
32 bit CPUs aren't hardware backed making this module useless for them.
[Android Software Development] pogshamp:
Does this mean I shouldn't be getting evalType Hardware?

Tried with and without Magisk Hide, with and without Magisk Props Config.

Can't pass SafetyNet CTS profile test
[Android Software Development] Uzephi:
If you CPU is 32 bit, you shouldn't. What device do you have that is arm7 that is Android 8+? OP stated same thing where we aren't aware of any 32 bit processor that is hardware backed. Last 32 bit hardware was at least 4 years ago. You might have 64 bit hardware with 32 bit OS/kernel.
[Android Software Development] pogshamp:
Galaxy A10 (SM-A105FN). Judging by that last line I guess it's possible I messed up something.

What would be the steps I should follow not to hardbrick my device to restore it and flash a 64 bit OS/kernel?

Or if it just means that it has a 64 bit processor but 32-bit Android what should my next steps be? I'm rather confused.
[Android Software Development] 2n2u:
View attachment 5192755

I guess it's impossible to run on an Android box right (Android 10 btw)?

I have my ISP's TV app that checks for integrity and won't run well.

On my chromecast works, so I think it's a safety net problem.
[Android Software Development] Uzephi:
That's a 64 bit CPU. Samsung went cheap and built a 32 bit OS/kernel for that device since it is a budget model. Maybe OP might look into it. I Don't know. Especially since it runs a heavily modified OEM skin, One UI.
[Android Software Development] pogshamp:
Doesn't sound too good, hopefully something can be done with it in the near future.

Thanks for your help, information & quick responses.
[Android Software Development] Wish39:
Can confirm it works perfectly on my Redmi Note 7 running stock Android 10 MIUI 12. Safetynet passes and I can add payment methods on Google Pay.

To @pogshamp : I also have a rooted Galaxy A11 on stock One UI 2.1 that this module cannot install on, because like your A10 it's running a 32 bit OS but has a 64 bit CPU (SD 450). The Safetynet test shows that it passed using evalType Basic but Play Store shows device certification as "Not certified" and I cannot add a card in Google Pay.
[Android Software Development] 7alvoo:
You are absolutely right, I did not activate the 'repackage magisk manager with random package' option but after I did it a miracle happened ;)

Thank you for your patience !
[Android Software Development] Wish39:
Just a PSA, your mileage may vary when it comes to banking apps. My bank's app is apparently super powerful...still detected root on my Redmi.
[Android Software Development] [deXter]:
What do you need EdXposed for? If it's for tweaking specific apps (as opposed to System UI modifications), then you could try Tai Chi or VirtualXposed instead - they do not require root and do not trigger SafteyNet, last I checked.
[Android Software Development] pogshamp:
How did you manage to switch it to evalType Basic? I guess it can't be so different from A10 to A11. Did you do anything special?

I don't really care about the Play Store certification but CTS profile is important.
[Android Software Development] 73sydney:
I already tested on magisk officlal (and HMA) and not working....

Cant remember if anyone tested on Magisk Delta...there was a period there we tested like 4 or 5 banking apps in a row, and only two failed, this was one of them....
[Android Software Development] casouzaj:
I'm running the latest Delta Canary in my Xperia XZ2, loaded with LineageOS 20.0. I have both Zygisk and MagiskHide enabled, MagiskHide list properly configured, and with the latest USNF-mod and Shamiko 0.5.2 (120) - the latest Shamiko causes a lot of crashes - and also LSPosed and HMA. All my banking apps work, including contactless payments.
[Android Software Development] zgfg:
Do you really need Shamiko with Delta - try with disabled and retest with your banking apps (I did - I was suggested by Delta developer, and later uninstalled Shamiko, not using it now for weeks and everything works fine for me)
[Android Software Development] 73sydney:
Im with you, the least amount of stuff needed....
[Android Software Development] pndwal:
Yeah, isn't Delta's MagiskHide basically an alternative to using Shamiko?... I'm not au fait with Delta's current implementation... Is HideList running along with Shamiko (doing anything in addition) or has Shamiko taken over completely?... Nb. @huskydg did say way back:

Also you just said:

🤔... So do you have issues or not?...

Also, you are effectively doing what whitelist mode does when you "put in hidelist... a lot of apps". So I guess this (readme.md) applies:

My guess is that you may be experiencing 'performance issues' inherent with hiding root from so many apps. 😬... You probably saw this response anyway:

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87864599

... Perhaps both Shamiko and MagiskHide are competing to fork all these processes and do needed mounts and modification unmounts also, I don't know for sure... May be best to ask in Delta thread re. Shamiko use w/ hidelist...

You're not by chance also using MagiskHide SuList option are you?... 😃 PW
[Android Software Development] casouzaj:
No, SuList brakes modules.
[Android Software Development] locolyric:
the only thing i can make that wallet work is remove magisk.

i am confuse how it can be happened even we choose to stop that app detecting magisk.

in my opinion it means even we choose not to let app read our app list. But google allow it, and this feel not secure at all to me...
[Android Software Development] pndwal:
Like this?:

View attachment 5787691View attachment 5787693

Xiaomi RN8T w/ A10 MIUI, Magisk Canary, Magisk App hidden, app in denylist (NOT enforced), Shamiko, LSPosed + HideMyApplist XPosed module hiding all root/mod related apps from app... and Play Integrity deviceIntegrity passing of course...

If it really works when you uninstall Magisk App only (I'm assuming that's what you meant), it's likely you haven't

both

invoked the obfuscated stub app (taken Hide the Magisk app) and properly enabled hide for and marked hiddenmagiskappname as invisible to the app... A number of bank apps require both these measures...

Further, see my device detections in screenshots here:

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87868919

🙂 PW
[Android Software Development] locolyric:
which version of tng wallet you using ?version 1.7.86 can't work on evolutionx a13.
[Android Software Development] pndwal:
1.7.86... PW
[Android Software Development] locolyric:
then this issue might be the specific phone issue , as i can't make it work on a12 nor a13.

using your method.
[Android Software Development] pndwal:
That's why I linked my phone detections for you above... Clearly, those don't matter... Run Momo / Ruru and you may work out what additional detections are causing issues... But no guarantees... 😜 PW
[Android Software Development] 73sydney:
Short PSA:

In the latest Hide My Applist, it can take quite a while for it to actively hide apps, especially first boot after install. Ive noted this on two clean flashes now.

It is highly recommended you wait until ROM has settled in for a few minutes after first boot after install, and afetr boot in general, before testing apps or testing Ruru

Also worth pointing out as always, before any test with Ruru, be sure to force close and clear cache/data for the testing app....
[Android Software Development] 2uk3y:
maybe android version ? bcoz @pndwal use A10. maybe ?

bcoz i also can not run tngewallet on A13 after solve all ruru and momo detection issues.

i also follow below setup... except android version A13
[Android Software Development] bombadier:
I tried installing the tng ewallet on my pixel 4a android 13 and cant even get the app to run, force closes with an OpenGLRenderer error

Unable to match the desired swap behaviour
[Android Software Development] JazonX:
View attachment 5789177

Any idea what causes this detection and how to solve it ?
[Android Software Development] 73sydney:
I call that status normal on Magisk Official
[Android Software Development] 2uk3y:
in Hide My Applist, add magiskapp in Ruru app invisible
[Android Software Development] 2uk3y:
so android 13 can not run this. need to test on lower android version 12 or 11

@locolyric so i try using tngewallet v1.7.84 and it work. v1.7.86 and latest not working.

what i can see there is additional start from v1.7.86

1.7.84 vs 1.786

View attachment 5789261View attachment 5789263
[Android Software Development] christantoan:
Hi,

I need help in passing PI. I'm using latest stable Magisk Official, Shamiko, USNF modded, and LSPosed. My device is OnePlus 7 Pro running Oxygen OS 11.

Here are my detection results:

View attachment 5789709 View attachment 5789711 View attachment 5789713 View attachment 5789715

Please let me know of you need more info.

Thank you in advance!
[Android Software Development] pndwal:
Failing basicIntegrity (and basicIntegrity in PI API is more sensitive than in S/N; seems to have some new checks) is your first problem... could be issue with ROM (selinux configuration etc)... Is this official Oxygen OS?...

In Play Integrity API Checker, please click '< >' at top after check and give screenshot of raw JSON results...

Nb. Some Magisk modules can also break deviceIntegrity... 🙃 PW
[Android Software Development] christantoan:
Thank you for your response as it gave me some ideas on what to try. I just tried again with minimum Magisk and LSPosed modules enabled, clearing apps data/cache, and I now pass Device and Basic Integrity. Now to find out which module is the culprit.

Just for info, this is official Oxygen OS however has had many modifications over the years as I basically never do a clean install.
[Android Software Development] pndwal:
Please report which module when you pinpoint it... 👍 PW
[Android Software Development] christantoan:
Errrr... Sorry to disappoint but I didn't manage to pinpoint it. My phone now refuses to boot (stuck in boot animation) while trying to find which module was the culprit. It now refuses to boot when Magisk is flashed to it. Fortunately, I can still use TWRP.

Something similar to this has happened before after an OS update but I didn't note what resolved it.
[Android Software Development] pndwal:
Presumably only changes were enable module(s)?... Seems you have issues with incompatible module(s) (w/ Android version, device etc) causing bootloops as well as module(s) breaking PI basicIntegrity now! 🥴 ...

W/ TWRP, disable modules per:

... Then enable again (not all at once) to determine which is causing bootloop...

👍 PW
[Android Software Development] christantoan:
First, thank you for the tips to disable modules from TWRP. I wasn't aware of that method. Unfortunately, in this case, it was too late. More on that below.

I'm still high on tension after last night's session of troubleshooting/experimenting so there will be likely a case of TMI below. I'll revisit this later today and delete those portion if I find any.

Now, to install Magisk, I had to use boot image patch option and install the image through TWRP. I don't know why but installing via flashing Magisk apk/zip with TWRP or Magisk with "Install to inactive slot" result in the "bootloop".

I, in my infinite wisdom, thought that I can just backup /data/adb folder to backup Magisk and its modules' settings. Unfortunately, it didn't properly work. It looked like the settings are properly restored but changing any of the settings didn't apply the new values. So, in the end, I had to start over with my Magisk settings.

This is just a conjecture but I think the reason for the initial "bootloop" was the combination of changing Magisk module settings and the installation of Google Play system update at reboot (it's now changed to July 2022 from February 2022).

I've also found some modules that causes PI to fail:

Audio module to make Viper4Android works: I don't think it still works but I never removed it because I thought it doesn't cause any harm (and just forgot about its existence). This, I think, disables SELinux.

LP / JP (if you know, you know): Don't use these. I use this for truly legitimate purposes but I'm looking for alternatives.

Custom kernel module: this one I forgot to remove after stopping to use said kernel. This one also plays with SELinux settings, I think.

Tbh, none of my apps use PI API yet so my whole reason for this journey was a few extra green checkmarks for my device so I'll likely to still use the modules above (that's is still up-to-date/relevant) until a better alternative is found.

Anyway, thank you for reading and hopefully, my experience can be of a lesson for someone.
[Android Software Development] 73sydney:
Legitimitely better than half your post is about things we dont talk about here...

As for backing up /data/adb, that used ot be a way for many of us to avoid maunally reinstalling modules etc between ROM jumps, but then we started having different magisk forks sometimes using different db schema, so that kinda died as a thing, and is not recommended

To avoid the tedium of having to reselect items in my deny list (or magiskhide list of Delta folks) i did crteate a couple of modules here and here to backup and restore these quickly, the rest im afraid (installing of modules) is grin an bear it reinstall with every ROM flash, though you could of course automate the installation of a group of modules if you really wanted to via a script (or module) and the magisk command line
[Android Software Development] christantoan:
I see. Thanks for the warning and tips. I know that the topic is taboo here and tried to be careful in mentioning it. Anyway, I've edited my post. Would you please update my quote in your post as well?

Thank you. As well for the backup/restore modules.

Sorry for the off-topic so far.
[Android Software Development] pndwal:
Installing via custom recovery was designed for legacy ramdisk boot-type devices; Patch/flash is recommended especially for SAR (OnePlus 7 series etc) and 2SI devices, and eliminates 3rd party custom solution (eg TWRP) incompatibilities/ bugs from the Magisk equation also... Nb. also, 3.6.0 is minimum version for A11 compatibility... 3.6.2 or 3.7.0 have extra A11 fixes...

This is broken for Pixel 6 and 7 at least for late A12 and A13 updates due to new partition digest checking by update engine... Could be late A11 OnePlus updates have migrated to these or similar checks, but I'm just guessing... See:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-87762979

Yup, this can be fraught... You may know this, but to start over (get effectively clean Magisk configuration) and keep root, just delete/data/adb contents and reboot; Magisk configuration files will be rebuilt... You can keep modules etc if you familiarise yourself with file structure...

Anything's possible, but I'd be surprised if a G Play update contributed...

Selinux changes / extra modules are no longer needed for V4A, at least ViPER4Android FX... Can get Neon driver working without AML / fuss...

I'm using this:

https://github.com/programminghoch10/ViPER4AndroidRepackaged

Haha... No experience with these, but you seem to be making the case for avoiding these... I'm only curious to know if they break PI deviceIntegrity unconfigured. (I'm guessing it may be some configured setting(s).)...

Yup, sounds like a prime suspect... Thanks for confirming some modules that can break basic device integrity, especially with newly introduced PI API...

😀... Well let us know what better / modern Magisk modules you discover especially (perhaps better to post in Magisk General Support/Discussion thread (?))...

Some good insight/lessons here... Thanks for reporting back... sorry you removed your post too...

Please consider putting at least some of it back up... Don't be scared by @73sydney either; he's just a big soft walking emoji (and I recently told him so), aspiring to be annointed as a mod here (he's counting the days actually 😜)... But

View attachment 5791575

🤪 PW