yashsingh1/xdaforums huggingface dataset:
[Magisk] muschi.muscholini:
Downgrading to 8.2.0 or 8.2.1 doesn't work for me. Did you do something else than uninstalling 8.3.0 and installing 8.2.1?
[Magisk] allrightlite:
I have a ZTE Blade L130 with the old photo tan app, that is my rescue. But you can't activate the old one. But it's keep working.
[Magisk] diemadedrei:
I had to unhide the app in magisk hide and hide it again, after that it worked.
[Magisk] dennis3:
I think they renamed the isolated process.

After updating to 8.4.0 there are still 3 processes in MagiskHide for photoTAN:

com.comdirect.phototan

com.comdirect.photot.......activity

(isolated) com.comdirect.phototan:yy.[X]

The last one had a different name before and therefore I had to activate this again. ( btw. [x] should be a character that can't be displayed ).

Clearing cache was not needed for me because I did this before opening the app.
[Magisk] Conan179:
Warning for all.

Dont update to the last Canary from Magisk, magiskhide was removed.
[Magisk] Laptapper:
And it looks like magiskhide will never come back in the future!
[Magisk] AndDiSa:
well ... there is denyList instead of hideList but you are right John Wu doesn't have any longer big interests in making Magisk hidden. Nevertheless there are other people around who will accept the challenge :)
[Magisk] Jimpex:
Soo I updated magisk, is there a way to get banking apps working again? How to use denyList?
[Magisk] Knotte:
Oh no, I just updated!

Where can I get the last version that has MagiskHide?

Edit: I found version 23001, but flashing it does not help, no root aftwards. Using the alpha version with denyList also does not work, the denyList option won't stay enabled.
[Magisk] Laptapper:
Take unroot tool of magisk and flash unroot. Boot twrp and perhaps you'll have to delete the folders data/adb and adbroot manually. install 23 zip again. Reboot, It should work
[Magisk] Laptapper:
I think you'll have to go back for now to v23.

See last post
[Magisk] Knotte:
Thank you so much. I had to flash 23011 first to fully enable Magisk again and be able to fully uninstall it. After that I only had to flash 23001 via TWRP. Now MagiskHide is back.

PhotoTAN is now working even without Riru installed and without passing SafetyNet, seems like MagiskHide is the only requirement, at least on my phone.
[Magisk] kazoooka:
works perfectly! thanks. i even get safety net to pass. not within magisk but with the safetynet test app.
[Magisk] WK 85:
Hello,

I have the same problem :-).

How I can found the unroot tool of magisk?

Thanks
[Magisk] Uluru25:
See github magisk (screenshot attached)
[Magisk] neroes:
Zygisk are my new Best Friend ;)
[Magisk] Conan179:
@neroes you forget the <ironie> tag.
[Magisk] king0r:
I have a custom Android 12 ROM (OnePlus 7 Pro). Hence I guess Magisk NoHide is the only option to have root access? Any solution available in order to run Comdirect photo TAN app in a rooted Android 12 ROM?
[Magisk] Laptapper:
Search magisk canary debug 23

It should be fine a while longer to root and hide. Don't update magisk, change update url to a non existing url and you don't get annoying update messages.
[Magisk] king0r:
Hi, what do you exactly mean with "change update url to a non existing url"?
[Magisk] hashgb:
The steps described from edwardenglish worked for me:

- Lineage 17.1 with Android 10

- comdirect photoTAN App 8.4.2

- Without Riru it did not work

- All data of the photoTAN app had to be deleted and the registration had to be made again
[Magisk] tko:
step 4 does not work, getting an extraction error with the zip from github
[Magisk] Conan179:
Screenshot from the error?
[Magisk] tko:
Just an unzip Error...

edit: i tried again... now it worked... no idea why :)
[Magisk] endrancer:
update 8.5. came out. the cat and mouse game continues... my setup is not working anymore.

rollback to 8.4.2

have riru unshare

have riru

have hidden all 3 entries from magisk via hide

freeze magisk hide

complete wipe and uninstall of app

several reboots. maybe something changed.

android 11 miui
[Magisk] ChillDuder:
with 8.5.0 there is no more an isolated process to hide in magiskhide (with magisk v23).

instead there is an ..comdirect.zygote. process listed in magiskhide, which with hidding doesnt help - root detected now anyway. seems they countered magisk+riru+riru-enhancedhide 🙃 , or even latest magisk with zygisk.

wtf. rollbacking to version 8.4.2 atm seems the only option.
[Magisk] endrancer:
That's what I have done.

Dealing with a few times with the app already since a few updates so definitely having an backup and the activation letter ready helps.

Rolling back the app works flawless again. The annoying thing is to leave auto updating off...
[Magisk] pa.pn2:
Where can i get previous version?
[Magisk] Uluru25:
E. G. from Aptoide
[Magisk] eliezerjk90:
Unfortunately it looks like matter of time... I would guess at some point they would enforce user to update...
[Magisk] Asellus:
E.g. https://apkfun.com/down_comdirect-photoTAN-App.html

This is for sure :-(

Damned cat and mouse game. It costs so much effort in development and on our side. Obviously they have fun competing
[Magisk] Laptapper:
So it means we have to get 8.5.

running soon. I guess one week...

I'll try to get it in dualspace app running.

May also tweaking via 3c toolbox app will help.
[Magisk] eliezerjk90:
Honestly I am seriously considering to change bank altogether. Their service is no longer as interesting as they used to be. They're basically a cheap imitation of Commerzbank since the complete acquisition. And this fiasco now. There's a lot of bank with better service and don't try to control how we use our phone...
[Magisk] Asellus:
This might not solve it.

Many other bank apps detect root also. Currently most of them can be covered by hide and riru, but for how long?
[Magisk] ChillDuder:
Did someone try it canary magisk (aka zygisk and deny list)? Im on magisk v23 and have to stay for other reasons.
[Magisk] tehlers:
I have just canceled my entire account at comdirect. As soon as the old photo-TAN App does not work anymore, I would pay 19 Cents per TAN for the alternative (SMS TAN). And to cancel the account you need a TAN. :)

I was nearly at the point to quit anyway, because of the new AGB and costs.

I can only (still, even with the new Visa Debitcard) suggest everybody to go to DKB.
[Magisk] Uluru25:
why not using a (very) old version of the app, working although root was detected? I do so with version 6.0.6
[Magisk] AndDiSa:
... you know that DKB Tan2Go is even worse?
[Magisk] tehlers:
I mean it's not the right thread here, but *can be* :) , I use ChipTAN at DKB. I know yes, Comdirect also offers a hardware for the PhotoTAN -- so also not a point. But as I wrote, I was quite upset with Comdirect anyway (for non-TAN reasons) and so this is now the final reason to quit.
[Magisk] AndDiSa:
@tehlers ... me, too :-)

I am using both ... and really speaking I do not see so many differences between both of them. But that's going out of topic here. Your original post led into the direction that you changed bank due to the sh*y PhotoTan-App.
[Magisk] ChillDuder:
The new DKB app - although not that much functionality atm - just give one warning for root detected and then runs flawless.

I'm running a test for comdirect tan app today on Android 12 with latest magisk canary. Hopefully it will work.
[Magisk] ChillDuder:
to my surprise:

comdirect phototan works on with latest canary magisk on a android 12 (in my case: pixel experience 12 beta on an old pixel 2). zygisk activated with forced denylist (phototan ofc activated there). no modules stuff installed.

i even enrolled the app to my account. it works.

now i dont know if that is only canary magisk or also android 12. or it works also on android 11.
[Magisk] Sorath_84:
Unfortunately not working for my Galaxy S8 with Android 10, Magisk Canary and Zygisk activated.

Any other ideas, what to try?
[Magisk] Uluru25:
... as mentioned above: I am using an older version (6.0.6) which detects and warns that the phone is rooted but still allows using athe app.
[Magisk] Sorath_84:
Okay, thank you!
[Magisk] tko:
Im back on 8.4.2.

for now...
[Magisk] Jimpex:
Where did you download it?
[Magisk] Asellus:
See

See https://xdaforums.com/t/comdirect-p...-root-fix-found.4274825/page-11#post-86005209
[Magisk] tko:
well... now the app doest not work anymore... it wants you to update....

does anyone has a new "working" solution yet?
[Magisk] Lars789852:
Hi,

Using the app in airplane mode is still possible, but the push messages won't work of course. And it wouldn't work with comdirect App, I guess...

I could get the photoTAN 8.4.2 to work and managed to scan the photoTAN-graphics. Might be a workaround for the time being.

1. Clear data and cache of the photoTAN-App

2. Switch on airplane mode

3. Open the photoTAN-App, it won't check for updates, since it can't

4. Go through the setup process until the setup process asks for access number and PIN

5. Disable airplane mode

6. Enter access number and PIN, scan the activation image

7. The setup will now ask, whether to enable push messages. Before denying them, enable Airplane Mode

8. Deny the push messages

The app should then be usable to scan photoTAN-graphics, when the phone is offline.

After using the app, I'd force stop the app in the app settings, before disabling airplane mode.

Once the app is opened, while the phone has an internet connection, the app will store the information, that an update is available, in its storage. Thus once the app knows about the update, it won't work on airplane mode either and the setup has to be repeated.
[Magisk] AndDiSa:
Are they really forcing you to install an update of the application while you are doing (trying to do) a transaction?

I could understand if you get an information that you should do an update. Probably also that you get a certain time in future until you have to do the update ... but what if (for whatever reason, e.g. out of memory, limited internet connection, ...) you are not able to update?

Stupid and not really customer friendly workflow 🤔
[Magisk] RtGh43:
Greets,

They force an update; after the update it detects root again.

Any workarounds so far?
[Magisk] pixel-smee:
I was still using 8.2.0 and I faced the message that the app requires an update (yes, in the middle of a transaction) few minutes ago 🤮

I hope the airplane hack with the photoTAN-graphics will work (3 posts above by Lars789852) for a little while.

For me it was possible to get the app back starting by this hack:

1. Force stop the app

2. Open a root shell (I use Termux)

3. Edit the text file /data/data/com.comdirect.phototan/files/setup-phototan.json (I use vi)

and modify the value for "minAndroidAppVersion":"8.5.0"

I set this back to 8.2.0

4. Turn on Airplane mode and start the app

I also tried to block Internet access in TrackerControl but this seems not to be sufficient.

Only with no data switched on, the app informed me about missing connection ...

Wondering, how the app will behave if this file is set to "read-only" ... might try this out when there is more time ...
[Magisk] endrancer:
i followed your info and once i edited the file, i could make a transfer

1) kill app -airplane on -

2) edit file e.g. 8.4.0

3) start app "saying no internet connection"

4) enable internet

5) get your push-tan delivered

6) profit
[Magisk] AndDiSa:
I set it to read-only but unfortunately the app tried to force me to update to the newer version ... :-(

So I killed the app and switched on airplane mode and startet the app again. This time I was told "no internet connection" but I was able to switch to phototan mode which then worked flawlessly.
[Magisk] CR4NKK:
can you help me on how to edit the file with vi?

I have the package installed in Termux, but no idea how to edit the file.
[Magisk] pixel-smee:
For those not familiar with vi, I recommend sed:

1. cd /data/data/com.comdirect.phototan/files/

2a. sed -i 's/8.5.0/8.2.0/' setup-phototan.json

or (this does the same)

2b. sed -i 's:8.5.0:8.2.0:' setup-phototan.json
[Magisk] tko:
thx, that worked for me.

i did the same, airplane mode on ... app starts again.

i guess for now we can only start the app in airplane mode...

is there a way to create a "shortcut" with the sed cmd?
[Magisk] pixel-smee:
Yes, there is: Termux:Widget

A Termux plugin app to run scripts in Termux with launcher shortcuts and widgets.
[Magisk] pa.pn2:
I can confirm that on Pixel 6 with latest Canary 23016 Android 12.

No other Modules loaded, just Zygisk enabled, force denylist, thats all.

I deleted the cache and storage of the App and Setup freshly, its working fine so far
[Magisk] CR4NKK:
unfortunately I have no permission with Termux accessing this folder. Is there something I am missing?
[Magisk] mj084:
Can report success too - installed Magisk Canary and enabled Zygisk andf forced and cofigured the Denylist - after reboot, I was able to setup the app again - waiting for the bank confirmation now :D
[Magisk] diemadedrei:
Which android version?
[Magisk] mj084:
11 - OnePlus 7T with OOS 11.0.4.1 BA
[Magisk] diemadedrei:
May be it's time to upgrade magisk then... I have not yet really spent time on researching the new version yet. Do I need to do something special/load modules to get hide functionality? I mainly use it for gpay and pokémon go right now.
[Magisk] pa.pn2:
Android 12 for me
[Magisk] mj084:
@diemadedrei

Not really, had some trouble during the first install of Magisk.apk - was able to patch and flash the stock boot image but new Magisk App was gone after it....

Installed it again and deleted the old one.

Enabled Zygisk in settings and force deny list, and configured the deny list (3 underpoints for photo tan app after setting Magisk and reboot and re-installing photo app)

Give it a try :)
[Magisk] pixel-smee:
Become root with this command:

tsu
[Magisk] CR4NKK:
perfect, it works now! thanks a lot
[Magisk] diemadedrei:
Can confirm that it works with canary and just Zygisk and deny list, nothing else needed. I'm on LOS 18.1
[Magisk] pa.pn2:
We have to be careful if the Comdirect IT is lurking this thread lol
[Magisk] diemadedrei:
Oh, I'm sure, they are. That's the cat and mouse game, isn't it.

I changed all my relevant payments to my vivid account. If there are crucial things to pay, I do not want to depend on a bank that does not want users to have a safe device. I also installed the app on an old android 7 device that hasn't been updated for years. Certainly much more secure than my oneplus 6 with LOS on November security patches... Just ridiculous
[Magisk] pa.pn2:
absolutly, this bank is getting even more ****.

I also think to quit my account there, cause of the useless debit card and pay fees if you are over 50k
[Magisk] diemadedrei:
Yeah,not much changed for the better after they were acquired by Commerzbank. But debit cards are the way to go, all banks will change to them. I have a Barclaycard if and when I need a real credit card (which is very rare)
[Magisk] pixel-smee:
To get rid of the Airplane mode (or toggling data off/on) I figured how to block the connection to the upgrade service right on the phone. The requests go to 'api.comdirect.de'.

Use blacklist in TrackerControl

-> Settings / Advanced options / Import hosts file (append)

Create a file on the phone with this content:

0.0.0.0 api.comdirect.de

This way I can leave the connection to the internet on when starting/using the app.

No version check can be performed, so the app should work forever ...

One cannot use the TAN push service anymore but only the „photoTAN Grafik“.
[Magisk] prace.de:
For me using canary with zygisk and deny list did not work. app still detects root.

i'm on a MI9 with miui 12.0.6 which should be android 10.

Any ideas what else to try?
[Magisk] Asellus:
With a good ole Samsung Note 4 with LineageOS 18 and the latest Magisk Canary I can confirm that the photoTAN 8.5.0 starts w/o complaining.

But... the CWA detects root even after putting it on the deny list. So the Zygisk shield as of today seems to be full of holes.
[Magisk] 12Ender:
Oneplus7T / Android 11:

I ran into issues and was again swearing because of this ****ing cat and mice game of comdirect. As a first consequence I now opened another portfolio, not at comdirect any more. It seems they don't like all of their customers. Yes, I'm using a rooted phone with the latest security updates! Oh my god, how bad am I?

Thanks to this thread I tried it again and think you have to strictly follow these steps:

- Install latest Magisk

- Update the phototan app

- delete all its cache and data using android app settings

- Open Magisk settings, enable Zygisk, force deny list, configure the list for ALL 3 phototan parts (visible in the sublist)

- restart phone

- start phototan app, register again (because of previously deleted data), enjoy.

- I additionally blocked it then for acessing the internet, because I just want to use the phototan scan feature and nothing else (which would by the way the perfect solution of comdirect if they stop this game for a phototan version that is only possible to scan the phototan and nothing more. They only have concerns because of this fckn push mechanism)

BTW, I tried a backup of the last working setup with titanium backup, but couldn't use it after accidentally updating the phototan app. Does anybody know why or what were a good backup solution?

BTW2: You can be sure for 100% that this thread is observed by the guys responsible for the phototan app. And they will likely already be working on a solution to break our workarounds again... The unfair aspect of this game is: they get payed for it :-P
[Magisk] diemadedrei:
Yes, they do get paid but they also get bad karma, don't forget this 😋
[Magisk] yoless42:
A possible easier way to reach this goal would be in denying network access to the specific app at all. I now found a (for me) working solution: App v8.2.1+MagiskHide (which was working at least 6+ months ) - and I denied the network access in settings -> network&nternet -> mobile data for this single app. No more update check, not fiddling around with /etc/hosts or Airplane mode.

Although "push" does not work anymore the photoTAN scan part is still possible.
[Magisk] booyakax:
This has been working for me for two days but now it detects root again. I set up everything exactly and run latest magisk canary, zygisk activ and denylist to add the photo-tan app (with all three checks). Is there anything else we can do?
[Magisk] Han-Droid:
First, thank you for your story 😉..since I own an OP7T (rooted) as well.

About your

First, thank you for your story 😉..since I own an OP7T (rooted) as well.

About your cat and mice remark... just a thought: for this app and all other of that kind.. Could it be a solution to have like "two versions" of a rom running on one phone? A rooted one and a "safe" one... Like a sandbox or a virtual PC...if you can follow my noobie thoughts? It would be still a mess to switch when using those root-checking apps .. But at least you don't have to change devices for transactions etc. ? Bull****-idea or some light at the end of the tunnel? What do you guys think? 😁
[Magisk] AndDiSa:
@Han-Droid well ... generally this would be possible, but as this solution is not officially available (and certified by Google) someone would need to build such a solution and then you need to install such a ROM on your phone which in fact needs an open bootloader to do so. To prevent that an open bootloader is detected you'll need to install Magisk or (similar) hiding mechanisms ...

You see the problem? Principaly this will put you into the same situation we are already right now.
[Magisk] 12Ender:
Maybe your root was temporarily disabled because of an update, .... and maybe the app stores some info if root was detected. Just some thoughts.

So I would recommend to repeat the process. And ensure that after cleaning the cache and data also the /data/data/com.comdirect.phototan folder is clean, as described before.
[Magisk] diemadedrei:
Just as a remark, clearing the app data and cache was not necessary for me. The app had detected root, then I installed canary, enabled Zygisk, set deny and it worked. No new setup necessary
[Magisk] Asellus:
Just for information... one can go online after the app has started in airplane mode, so one can use push TANs afterwards when working with the bank's portal
[Magisk] Han-Droid:
Ok thanks... So this leads to a dead-end....cat&mice forever....yay! 🥳
[Magisk] prace.de:
I tried again:

* uninstalled phototan app

* checked /data/data/com.comdirect.phototan folder does not exist anymore

* reboot

* started and checked magisk settings (version 92546e8a(23016)) with zygisk enabled

* re-installed phototan app - without starting it

* added phototan app to deny list with all 3 sliders enabled (phototan, missing_splits_activity, phototan_zygote)

* started photoan app

-> error: root is still detected

any further ideas?
[Magisk] r4p70r:
I reinstalled the app

Installed Magisk Canary, updatet magisk

reboot

Enabled Zygisk

Enabled the deny list for phototan app and many more

reboot

App works

Android 11, Oneplus 9 Pro
[Magisk] larscx:
Works for me but google pay is now detecting root. Any idea how to fix it? Google Pay is in denylist
[Magisk] mj084:
@larscx

Yes, enable airplane mode, wipe data of Google Play, Google Play Services and Google Pay - add all 3 to deny list (all points) and reboot, diable airplane mode and re-configure Google Pay :)
[Magisk] r4p70r:
I have all google play service related stuff and most of the Google apps in the denylist.

I also use the Magisk module MagiskHide Props conf.

With that module and enabling Option 4 (hide Magisk props) I also pass sefetynet checks.

EDIT: Use the Universal SaferyNet Fix Magisk Module to pass Safetynet as suggested by mj084​

Without Google Pay don't work for me.

I don't had to delete any Google Pay app data

Hide Magisk Props:

open your Terminal emulator (e.g. Termux)

Enter:

su

props

4

a

acknowledge the change with y and reboot

Pictures:

First Safetynet check with disabled hide props/Safetynet fix, second with active hide props/Safetynet fix
[Magisk] mj084:
@r4p70r

You don't nee MagiskHide Props conf. - just install Magisk module ""Universal SafetyNet Fix" - 2.2.0 is actually one and reboot and all is fine :)
[Magisk] r4p70r:
Thank you for pointing this out.

I'm using it now, it works 👍
[Magisk] banerni:
It works but you need at least Android 11.
[Magisk] prace.de:
thank you! that's a good hint. then i'll see how to upgrade my system.
[Magisk] prace.de:
upgrading to android 11 solved the issue for me as well.

thanks for helping out!
[Magisk] s3axel:
You need root rights, so issue an "su" command first....
[Magisk] gorthon:
That's not an option for anyone who doesn't have the app already running: You won't be able to set up the app with older versions (I tried a while ago with 7.3).

What I find weird, though: I was using 8.3 for a long time with Magiskhide and never was forced to update. Due to a complete phone-setup I now re-setup with 8.4, but it keeps forcing me to update to the most recent version, which detects root.
[Magisk] mj084:
@gorthon

then you need magisk canary and the deny list as written above...
[Magisk] bazaleem818:
i use too many solutions posted in xda to get banking app called benefitpay to work

1-magisk hide

2-riru

3-safetynet fixes

4-fingerprints fixes

5-freeze root

... etc

i reach to make it work but when i try to pay with nfc features it closed and i have to relogin with all account again

other features in this app work just the pay with nfc

the only solution work is to unroot( uninstall magisk)
[Magisk] mj084:
@bazaleem818

which magisk version have you used? Canary or stable?

What is meant with freeze root???

Try magisk canary and deny list (google apps and your banking app) + universal safetynet fix + delete app data (in airplanemode) for google play and google play services and your benefitpay app and then reboot and try again
[Magisk] bazaleem818:
i try both canary and stable

try all what you mention

freez root using app like island or ice-box

I TRY NOW with a11 crdroid rom 7.12 and canary with zygisk enabled and list denied its work
[Magisk] nik2011555:
<can't read
[Magisk] diemadedrei:
As has been posted already, you need android 11