yashsingh1/xdaforums huggingface dataset:
[Magisk] doclucas:
Does your device pass Native Test?

If not, you may wanna make sure it does first and then try Singpass again...
[Magisk] wyt18:
Sorry, what is Native Test? It passes PIF test on Google Play app under Developer Options ...
[Magisk] doclucas:
Look up Real nullptr telegram channel
[Magisk] wyt18:
Anyone able to get Singpass to work? Tried v20.1, can enter app but can't do a face login as app force closes

v19.2. no longer available on apkmirror
[Magisk] stevenkyk:
MagiskHide - issue in mount namespace hiding for isolated processes · Issue #2406 · topjohnwu/Magisk

First of all, I would like to say that I am aware of the fact that raising the issue of MagiskHide is usually irritable and I will understand if my thread will be ignored. I recently read an articl...

github.com

I think there's nothing much we can do until the loophole mentioned in the issue is fixed. The recent additions of hiding from isolated processes doesn't seem to help much.
[Magisk] Roidred:
option is revert to old version 10.1.1, if u have a backup and uncheck the auto update in play store,
[Magisk] Roidred:
i am sure those devs might be reading this thread. what they want to achieve. saw the app in Huawei store now. good luck to their security dream wall for the app.
[Magisk] stevenkyk:
This is indeed an option, however, it is only a matter of time that they flip the switch on their servers to ban old versions from working as well.
[Magisk] Roidred:
Tried updating magisk to latest canary 2305 but still can't hide the root for latest singpass.
[Magisk] Lu5ck:
After some testing, you could run it under "work profile" using app like "islands" or "shelter". However, there is some catch.

You gotta need to have singpass running in both profile. Then, one of the app will work while the other will error. However, it doesn't always work. Sad.

I also installed

GitHub - RikkaApps/Riru: Inject into zygote process

Inject into zygote process. Contribute to RikkaApps/Riru development by creating an account on GitHub.

github.com

GitHub - vvb2060/riru-unshare

Contribute to vvb2060/riru-unshare development by creating an account on GitHub.

github.com

I don't know how the isolated unshare work, don't see any difference in magisk hide. I just install anyway.
[Magisk] Lu5ck:
double post for some reason
[Magisk] stevenkyk:
AFAIK this module is no longer relevant since magisk has integrated the ability to identify and hide from isolated processes, there are some other fundamental issues that magisk needs to fix internally before magisk detection can be fully circumvented.
[Magisk] Lu5ck:
I think the app is scanning the list of apps you have....

Work profile magically work though sometimes it doesn't once you reboot, maybe I am using android 11 thus not implemented properly.

If the app indeed is scanning other app, you could use xprivacylua via lsposed to block it
[Magisk] Xanth0k1d:
Hi guys, I'm back on xda.

I'm on some 2 year long commitment which I guess most Singaporean males will know what I'm talking about...

Basically some ****ty stuff happened and I was away for a while.

From your discussion I think we just costed a company its contract with the Singapore gov :p

I'm yet figuring out the stuff about Singpass, but my phone's recent update got me into trouble with some banking apps - OCBC and POSB.

If one uses pm to disable all the vkey services, the apps will launch/crash, just disable vkey.android.vos.MgService alone will work.

I'm attaching a newer version of the script, to be executed as root as usual (added some comments)
[Magisk] Xanth0k1d:
Some android supports different use profiles, I'm currently trying singpass on a new profile and see if that will work.

It's a pity that work profile's not working...

Trying to figure things out with a lineage & no magisk on my other phone (LG G3 D855)
[Magisk] JudgeDread11:
Opening the script and reading the commends helped me with the K Plus app from Kasikorn Bank Thailand.

I disabled all vkey services instead of just the mgservice of vkey, which made the app crash. With just the mgservice disabled it works.
[Magisk] MahathirMohamad_:
Can I have a step by step go to run this script? Newbie here. It will make Singpass run as per normal right? And by Package Manager, do I download it from F Droid?
[Magisk] Lu5ck:
That will not for singpass, this is what I do to get it work

Must pass basic safetynet, this will not teach you how

In magisk, install Riru module

In magisk, install LsPosed module

Download Unshare - https://github.com/vvb2060/riru-unshare/releases

In magisk, install Unshare

Download Universal Safetynet Fix - https://github.com/kdrag0n/safetynet-fix/releases

This basically make hardware-backed attestation CTS devices to use basic instead

In magisk, install Unshare

Install App Manager - https://f-droid.org/en/packages/io.github.muntashirakon.AppManager/

Install XPrivacyLua - https://repo.xposed.info/module/eu.faircode.xlua

Reboot

In LsPosed, enable XprivacyLua and Singpass in that same list

Reboot

In magisk, enable "Magisk Hide" in settings

In magisk, press "Shield", hide Singpass all options (dropdown)

In magisk, "hide Magisk" in settings, choose some really unpredictable name

In App Manager, look for Singpass, go to "Services", disable all "(Isolated)" services.

In XPrivacyLua, look for Singpass, enable restrict on "Get Applications" and "Get Sensors"

Reboot

Try running it a few times to see if it go through, if doesn't work do the shelter method

Personally, it run for me but ultimately fail when it try to register biometrics, no idea how to disable its access to biometrics.

Install Shelter - https://play.google.com/store/apps/details?id=net.typeblog.shelter

In shelter, under personal profile, clone "Singpass"

In shelter, under work profile, make sure no rooted apps in there

Reboot

Run Singpass (Work Profile), it may fail sometimes, just keep retry until it runs undetected.

(Bonus) Put chrome or whatever browser apps into shelter so singpass can use that browser app.

App Manager and XPrivacyLua might be redundant but whatever, just do it anyway. Unshare and magiskhide alone seem to work for some people, personally doesn't work for me. Anyway, this is basically everything you could try.

I am using Poco X3 Pro, lineage 18.1

Edit:

Magisk is entering a new era and with that improved hiding capability. Before the new stable magisk is released alongside with other more powerful modules, you can download the unofficial alpha build at https://t.me/magiskalpha then with combination of deny list and universal safetynet fix, you could run singpass without issue. I didn't try because I am using a number of other modules as well but other users did try and worked.
[Magisk] HorrorLemons:
Thanks for the thread OP. I'm still on Magisk 22.1 and SingPass works if I disable and enable Magisk Hide for it. Hit and miss sometimes but yeah. Magisk is repackaged. My Stanchart app is not working at all, so I may try XPrivacyLua when I have the time to update.
[Magisk] inscythe:
Thanks for the tip! I tried riru+unshare, and I found that those two is enough to run Singpass without work profile (Shelter) or xprivacylua. I'm currently running it normally in normal user mode.
[Magisk] LoneZX:
Was browsing this thread for the same problem, disable

io.github.vvb2060.magiskdetector.RemoteService

and it should work.
[Magisk] HorrorLemons:
I received the following message:

"Unusual device configuration detected. For added safety this app is not supported on this device. Please restore or update your device to use this app. (Err:2003)"
[Magisk] Xanth0k1d:
Actually guys, guess what

I'm on lineage 18.1, magisk 23 and singpass works out of the box with magisk app hidden, hidden by magisk, magisk props stimulation on.

Didn't even do any of the scripts.

btw the scripts are still working fine for ocbc & posb.
[Magisk] Roidred:
Yes same for me. found any workaround for err2003?
[Magisk] Xanth0k1d:
standard chartered bank?
[Magisk] Roidred:
Yes after checking the logs i found SC bank using rootbeer as well as part of root checking. i installed the rootbeer app to check and mine shows busybox detection AND rooted. i guess the GSI ROM i use is adding some busybox as part of the ROM.

the other is the vbb remote service which can be disabled to get rid of root check.

still not successful
[Magisk] Xanth0k1d:
Wellllll

I guess bypassing that should be easy with Magisk or sth.

You mean busybox binaries as in not those "virtualish" magisk busybox module right?

Would physically su rm -rf all the busybox binaries help? (I don't think your rom need those, even if you might need those you could try the magisk module, my rootbeer isn't detecting those)
[Magisk] auggie246:
My rootbeer is detecting busybox binaries and su binaries as well. Though my busybox was installed through magisk
[Magisk] Xanth0k1d:
My phone is on Lineage 18.1, with Magisk Hide props config fingerprint enabled, magisk app hidden and the rootbeer app blocked via magisk hide.

Could it be that your phone has built-in su and busybox binaries?
[Magisk] auggie246:
I'm using stock oxygen os from oneplus. with custom kernel, rooted with magisk
[Magisk] Xanth0k1d:
My recommendation is to purge the Mgaisk Busybox module and run the busybox command to see is there's a built-in busybox binary.

You may want to try hiding the magisk app?

Since you are running stock Oxygen OS I don't thing you need to spoof the fingerprint or anything. However, if I recalled correctly, some roms have props that could tell if you got an unlocked bootloader, you may want to look into this as well.
[Magisk] auggie246:
thanks shall try it out. May I know what do you mean by the busybox command
[Magisk] Xanth0k1d:
execute the busybox command in a terminal or something.

try doing so in a root shell as well just in case.
[Magisk] auggie246:
removed busybox magisk module. Just tired the command on su, BusyBox not found and root beer no longers detect BusyBox binary...
[Magisk] Xanth0k1d:
That's interesting, try hiding the magisk app?
[Magisk] auggie246:
By hiding the magisk app, you mean the function in the settings right? Already did that with a totally random name
[Magisk] Xanth0k1d:
Did you hide the rootbeer app with Magisk hide?

Can you send a screenshot of your rootbeer app after installing back the busybox again?

Do a safetynet check in Magisk as well and see if it passes.
[Magisk] auggie246:
magiskhide manages to hide eveything from root beer. safetynet pass. Yet stanadrd chartered still detects root
[Magisk] Xanth0k1d:
So... Let's just confirm again, it's all green in the rootbeer app at the moment?

Did you check if there's vkey services in standard chartered app?
[Magisk] auggie246:
yeap rootbeer is all green if i hide it in magisk.

no vkey services. However there is a magisk detector service. I disabled it but it is still detecting. I think if it's disabled the app would not run
[Magisk] Xanth0k1d:
You mean the com.example.detectionrisk.MainActivity ?
[Magisk] Lu5ck:
Try unshare

If doesn't work, run it in work profile
[Magisk] Xanth0k1d:
Work Profile, change a user if your rom supports it...

These are methods that won't 100% work but still worth trying.
[Magisk] Xanth0k1d:
@Roidred Could it be that for GSI roms, the device fingerprint is different? Can you pass safetynet with GSI roms?

For @auggie246 's situation, it shouldn't be the rom, because he is stock.

Maybe after unlocking the bootloader, there's a change in some props? (The SC app is able to detect that the device has an unlocked bootloader?)

If it's not very troublesome, may I suggest try running SC on a pure stock rom that only has an unlocked bootloader and see if it runs?

Though I do not have a SC account, I am unable to launch the app. There must be some other way that this app is detecting root/Magisk/whatever unusual device configuration.

I think it's time for me to create a small VM image or something, so we don't have to wipe our main phones when we want to test things out.
[Magisk] Lu5ck:
I installed the sc mobile app...

I force stop the app and disable the service via app manager

Toggle the hide in magisk

Worked, no need work profile

Not sure what you doing wrong, well, I do have unshare installed

I also have xprivacylua blocking get application
[Magisk] Roidred:
Yes depends on the ROM you are using, i tried lot of combination on GSI ROM but was not successful. SC was only giving problem, other apps works fine. Any way i moved on to a new ROM.
[Magisk] Roidred:
yes Safetynet passes. The GSI ROM got redmi 7 fingerprint and it passes safetynet on max 3. even tried changing the finger print to max 3 though the safetynet passes but SC doesnt work. i moved to One OS now, which is similar to EU ROM, based on China base. GSI is tricky but really liked the ROM. now all App works with apart from usual magisk configuration, added riru momohider
[Magisk] doclucas:
Which service for SC and what's app manager?
[Magisk] Lu5ck:
App Manager - Android package manager | F-Droid - Free and Open Source Android App Repository

A full-featured open source package manager for android.

f-droid.org

"isolated" service
[Magisk] doclucas:
Omgawdddd, you are a life saver!!!

I wish I could hug you right now! Lol
[Magisk] unknownfame:
How do you use app manager to block services?

Go to services tab and click on the red cancel button?
[Magisk] gravityz3r0:
Im sorry, kinda lost when following this thread. With all the battle back and forth with Singpass, is there actually any solution yet?
[Magisk] Roidred:
Are you from Singpass haha. btw use the older version till some solution comes in, without auto update for playstore.
[Magisk] auggie246:
I have disabled the isolated service but still does not work :( for SC app
[Magisk] Lu5ck:
Erm...

Did you pass your basic safetynet?

Did you enable magiskhide on SC?

Did you apply the disable in App manager?
[Magisk] auggie246:
Yeap done all the above. Play store decided to auto update the app even though I disabled it.
[Magisk] Lu5ck:
I don't know what you did wrong.

I just tested it on Lineage 18.1, no problem.

Are you using hardware attested device? Try installing Universal Safetynet Fix
[Magisk] auggie246:
What's a hardware attested device? Universal safety doesn't solve too
[Magisk] Xanth0k1d:
Well, it has came to a point that I don't dare to update any of those apps anymore.

For singpass 10.3.0, with magisk hide and spoofing the device fingerprint it works fine.
[Magisk] Lu5ck:
do you have other apps requiring roots? try reinstall them
[Magisk] auggie246:
Manage to solve it, for some reason, another magisk module for OnePlus 7 was affecting detection
[Magisk] Lu5ck:
what module?
[Magisk] auggie246:
Anxious7pro. it was a kernel companion mod. Probably some features triggered detection
[Magisk] auggie246:
Anyone able to get Citibank app to work ? It just freezes on the splash screen
[Magisk] Roidred:
Use airfrozen to freeze the magisk manager app. You might have changed the
[Magisk] wyt18:
has anyone been successful in using 12.1 with root?
[Magisk] Pinage:
Me! I use magisk canary, safetynet fix v2.2 with zygisk enabled and SPM added to deny list. Working well. If not working for you, remember to clear play services app and cache, restart phone and try again.
[Magisk] doclucas:
How do you enable zygisk and what's SPM?
[Magisk] wyt18:
thanks. do you have issues with zygisk and your other magisk modules? does lsposed work well on zygisk?
[Magisk] Pinage:
Go magisk setting.

I don't use other magisk modules so can't reply on this. You just try to flash the canary try lor. If can't work then flash back old magisk.
[Magisk] wyt18:
thanks! I tried this today and managed to get Singpass working. two strange behaviors though:

- I added Google Play Services to denylist, but it keeps removing itself from the list

- after switching from Riru to Zygisk, DBS app now detects root (I used Hide My Apps Lsposed module to do this, but Zygisk no longer supports file detection and mapping masking)

any chance you found a way to stop DBS from root detection?
[Magisk] Pinage:
It seems to be removed but actually play services still added to deny list. If you see carefully, only service added to deny list will appear at the top of the list. I probably think it's a magisk bug.

I don't use dbs app. Only POSB. POSB is working fine for me. You try clear cache and data for dbs and open again lor. Also try remove all magisk modes other than safetynet. Could be other magisk module trigger the detection.
[Magisk] Xanth0k1d:
What about just adding DBS to the deny list?
[Magisk] wyt18:
It's always been there, but still gets root detected
[Magisk] Stillhard:
If you use USNF, it's intended, look here
[Magisk] Xanth0k1d:
Need your phone's following details:

ROM Release Keys:

-getprop ro.build.ginferprint (use root)

Magisk version

USNF version

https://github.com/RikkaW/YASNAC (check cts and safetynet with this)

Then we can take a look what is wrong.
[Magisk] wyt18:
getprop ro.build.fingerprint: samsung/starqltezh/starqltechn:10/QP1A.190711.020/G9600ZHU9FUK5:user/release-keys

Magisk: 24102

UNSF: 2.2.1

SafetyNet passes fully on YASNAC
[Magisk] Xanth0k1d:
same except for the fingerprint, as I am using another device.

I was able to login and proceed until the set up onetoken page

Anyways it seems that you are running an official rom I suppose?

Samsung devices are a little trick. Especially when you trip knox by unlocking the bootloader (Maybe dbs takes into account of some knox libraries while on samsung devices?

You could try to replicate the problem on another non samsung phone (or anyone here who can help out)

anyways you passed BOTH cts profile and basic integrity right?
[Magisk] wyt18:
yes, I passed both cts and basic integrity. will try with another phone like you suggest, but doesn't solve my problem as the samsumg is my daily driver ..
[Magisk] Xanth0k1d:
Samsung knox is now the primary suspect, but if that's really the case we can't do anything about as it takes extra effort to go around that
[Magisk] Xanth0k1d:
Are you using the stock Samsung rom?
[Magisk] wyt18:
yes, stock rooted
[Magisk] Xanth0k1d:
Hard to find an official rom for samsung, but I feel that you should change a rom and try.
[Magisk] Lu5ck:
install shamiko yet?

Hide my applist is outdated I think

Releases · LSPosed/LSPosed.github.io

Contribute to LSPosed/LSPosed.github.io development by creating an account on GitHub.

github.com

i think the latest is from magisk alpha telegram

Magisk alpha

You can view and join @magiskalpha right away.

t.me
[Magisk] wyt18:
Anyone managed to bypass root detect from Singpass 14.0? Not working for me anymore (despite HMA and shamiko)
[Magisk] ugene1980:
Uob is detecting as well now , same as singapss v14 and abv
[Magisk] Xanth0k1d:
Those guys at gov tech.

Well they can't fight open source and against our rights to own the phone we need and the risk we willingly took.

We will figure out a way. Anyways after I'm done with my 2 years of holiday I don't need SingPass that often anymore.

But we will figure out away.
[Magisk] Xanth0k1d:
Honestly just found out this whole thing is againt the user agreement, the 3.4d part and offences as such are liable of charge under Computer Misuse act. Thus I think it is not proper to go into this Magisk direction anymore.

Nevertheless, may be it is time to consider some alternatives: Virtualised sandboxes? if those are considered a device inside another device?

Or it might be a good time to design a device with super long battery life and serve the only purpose of bank/singpass apps.
[Magisk] thexile:
For Singpass v14.1.0, disable provider o.getBundleArrayFromBundle and service o.getAndroidMinimumVersion is good enough to stop Singpass from detecting root. However, one will receive a pop-up error message "Sorry, something went wrong. Please try again" in the in-app browser (Singpass login website).

Updated: the error was due to my AdAway configuration.
[Magisk] Xanth0k1d:
Thanks for the info.

I will keep this thread open for theoretical discussions only.
[Magisk] Roidred:
Yes working for me Singpass 14.1.0 Magisk 24.3 and Shamiko

Also disabled provider o.getBundleArrayFromBundle and service o.getAndroidMinimumVersio using App Manager. Phone is running A11 miui 13
[Magisk] wyt18:
Thanks - tried that but there is no provider by that name, only a service. And disabling it causes Singpass to force stop
[Magisk] Roidred:
Provider is a separate tab. Check under that tab in App Manager. Hope other basic steps are also followed in magisk. Reboot device after disabling the service and provider.
[Magisk] wyt18:
Yes I saw that. Unfortunately I still get force close on trying to open singpass
[Magisk] Roidred:
I did install another ROM for testing. I tried singpass and was able to get it working with Magisk 23.3 and shamiko 0.5. No need of App Manager. i do reboot every time when config change is made on magisk.

The other modules installed was universal safetynet 2.2.1 and magiskhide props config. i changed my device finger print to get device certified on google play. Should uncheck the enforce option in magisk.

Take a backup and try a clean install of ROM. Every ROM is different quite difficult to know what's happening in your case
[Magisk] thexile:
Has anyone figured out how to bypass Citibank SG v15.1 app Magisk detection?

Appreicate if you can share your know-how.
[Magisk] Roidred:
try to freeze the renamed magisk manager app using airfrozen.
[Magisk] thexile:
I have to use Island to isolate the damn app.
[Magisk] thexile:
For Singpass v14.1.1, look out for service o.getInstalledModules and provider o.ParcelableSnapshotMutableState.
[Magisk] Roidred:
No problem with new update of SP. Working good.
[Magisk] dearestk:
Hi. I am also getting the "Please try again" error during the app registration process. Could you kindly elaborate on the AdAway configuration issue? Thanks!
[Magisk] thexile:
Uncheck "Enable web server" under Preferences → Root based ad blocker. I think this is pixelserv which can block ads serve by HTTPS, however it will conflict with SSL certificates occasionally.
[Magisk] dearestk:
Thank you but no luck here. Even with AdAway uninstalled and phone rebooted, I am still getting the "Please try again (82-t991)” error during the last stage of the registration process. Is there any services or providers that I should disable for singpass 14.2.0?
[Magisk] thexile:
For Singpass v.14.2.0, disable the following:

Providers: o.PrioritySet & o.getMaxCardElevation

Services: o.AutoValue

I got my enrolled/registered 14.2.0 working after disabling the above, so your milage might vary.
[Magisk] dearestk:
Still not going through.

Much appreciated for all the help.
[Magisk] wyt18:
Was forced into latest DBS update, now unable to add digital token. Using modded UNSF 2.3.1, shamiko 0.5.2, denylist. Hiding all vkey services via App Manager

Any one found a solution?
[Magisk] Roidred:
strange no issues here.

Magis 25.2

Shamiko (120)

USNF 2.3.1

deny list

MagiskHide Prop Config- didnt setup.

airfrozen to freeze the renamed intsaller.

uninstall any other magisk module for testing.
[Magisk] Roidred:
https://xdaforums.com/t/citi-bank-app-detects-root-magisk-hide-is-not-working.4277943/post-87206809
[Magisk] Roidred:
Any one updated the SP, saw a new update
[Magisk] snake:
Has anyone been successful to run Singpass 15.0.1? I got the latest Magisk Zygisk, Shamiko, HideMyApplist, USNF and AppManager. All my other tricky apps work fine with this setup including DBS banking, Google Pay etc. Just this latest Singpass I somehow cannot manage to work. It seems to start fine but after few seconds it shows the famous screen "Your personal data matters" with the only option to quit.

AppManager seems not to have the previously mentioned here services and providers anymore. I tried to deactivate some others but only result was that Singpass now directly force close after start.

Any hints what else to try to make this work very much appreciated.
[Magisk] thexile:
Disable the following Singpass app components:

Providers: o.onRequestPermissionsResult & o.p0$a

Services: o.getBlendMode-0nO6VwU

The Singpass buffoon devs appear to randomise the Magisk/root detection components in every update.