yashsingh1/xdaforums huggingface dataset:
[Google Pixel 6 Pro] galaxys:
There's really no way of knowing such private contract details.... cheers
[Google Pixel 6 Pro] Lughnasadh:
This may give a bit of insight...

State of Magisk: 2021

Ever since my employment at Google, crazy speculations has been spreading like wild fire all over the Internet. The out-of-context private…

topjohnwu.medium.com

https://twitter.com/i/web/status/1431896770351489029
[Google Pixel 6 Pro] zymphad:
So I guess that confirms he is no longer invested in rooting scene for Android. As I suspected.

Never understood why root access on a phone is a security issue that all the app developers and finance folks claim it to be, never seen any evidence of it.

Meanwhile we all have root access on our Linux and Windows. How come having root access on Ubuntu is secure yet it is unsecure on Android? I never understood that argument. Seemed to me folks who are competent enough to root their Android are likely more careful with their device than some moron with an unrooted Apple iPhone for example.

Oh no you can sideload apps and disable trusted app blah blah blah. Meanwhile I can install whatever I want on both Windows and Linux and yet I do all my online finance on both environments. I'm perplexed why there is a double standard for Android.

My Ubuntu install has secure boot disabled. I'm sure lot of people have secure boot disabled on their Linux, so why does Google treat rooted devices like they are malware bug infested? I'm sure Google devs use PCs that got secure boot disabled. I'm sure I'm being really simplistic because I'm not a dev, I just don't get why mobile devices are treated different from any other computer and why mobile phones computers are treated at a different standard.

I concluded this is really about $$$. It's really how Google, Apple and Samsung etc are controlling what apps are allowed on their devices and making sure they get their share of the ad revenue and app revenue being forced to use their app stores etc. This has nothing to do with security, it's about controlling their revenue stream.

I don't recall ever reading about how rooted android phones are disaster. Meanwhile I keep reading about how the great evil governments are constantly hacking iPhones, everything from messaging, storage, etc.

I haven't read anything that convinced me why Google shouldn't allow their users to freely do what they want with their device.

Makes me wonder why rather than fight users, Google should just make the process more secure then. Make it safe if there are such issues, but seems to be a myth. I don't believe a rooted phone can't be secure for financial apps for example, bunch of bollocks.
[Google Pixel 6 Pro] Nergal di Cuthah:
Because Apps can't tell if you've purposely rooted, or that malware has gained root access
[Google Pixel 6 Pro] Lughnasadh:
Actually he is, just certain parts he can't work on (e.g. MagiskHide). He has been actively working on Magisk. Just released an update about a week ago. Now, he may not be putting as much time into it, but from all the comments I've seen him make, it certainly doesn't seem that "he is no longer invested in rooting scene for Android.".
[Google Pixel 6 Pro] roirraW "edor" ehT:
He implemented the fixes in Magisk Canary 23016 to make it 1) work on the December update, and 2) not require disabling Verity and Verification anymore - and in what - 1 or 2 days maximum. I wouldn't characterize him as not being invested in the rooting scene.
[Google Pixel 6 Pro] zymphad:
He said others did the fix, wasn't him.

Well hopefully support keeps going.

I sure miss the days when I was tinkering with roms with my Nexus devices, those were fun times.
[Google Pixel 6 Pro] Lughnasadh:
Others "fixed the issue before I even looked into it!" (but he implemented them and pushed the update).

and

"...Magisk is set to live on without my 100% attention🙂"

He was also working on the vbmeta problem in late November.

"I spent some time investigating the chaos/mess with the vbmeta/AVB situation and I think I have figured out what's going on. I will update the official install guide to clear things up. This shall reduce the confusion around rooting Pixel 6 and some newer Android models."

And also this from late November... (emphasis added)

"I've stopped "using" Magisk for quite a while as I'm tired of tinkering. Development never stopped though because it's fun, and I really treat the project seriously. It's nice to actually enjoy what I and many other contributor has created; I'm glad and proud that Magisk exists!"

I think by all the comments he has made it seems clear that support will continue.

https://twitter.com/i/web/status/1470722938995240963
[Google Pixel 6 Pro] pcriz:
I mean a few things to note. The tools used to compromise devices by government agencies can be weaponized on both platforms.

The other thing is that if google really didn't want you to root your device, they simply wouldn't allow it. It isn't hard, there are android devices to this day that have never achieved root access. There are pixel devices that don't have root.

And as far as rooted user being more "careful", well that's rather subjective but from the amount of people that can't trouble themselves to fully read the op in threads about rooting, leads me to believe otherwise.

If I really had something that someone wanted, my being rooted means I'm in that much more of a compromised position compared to someone bootloader locked and unrooted. I mean it says something that the most secure forks of android push you to relock your bootloader.

But just like someone else said. There is no way for my bank app to know I chose to be rooted or it was somehow attained on my device for malicious purposes.

Also people that must have root are a fraction of the consumer community. Honestly if google completely nixed rooting any device, it wouldnt make one bit of difference in the android market share save a few hold outs that stayed with android just because they could root.
[Google Pixel 6 Pro] zymphad:
Doesn't matter to me who rooted the device, how does that make it less secure than say doing online finance on Ubuntu with root access? It's something I just don't get, and haven't found a source that explains why having root on Android is so bad compared to Linux desktop or Windows.
[Google Pixel 6 Pro] roirraW "edor" ehT:
This is my opinion - the same folks who use Windows or Linux and a smartphone are more laissez faire about their smartphone use. "Oh, it's convenient? Install it!" I'm a Windows power user, and I definitely don't install new programs on my computer as often as I do on my phone, and I'm sure some folks install phone apps even more frequently than I.

I have tons more user-installed apps on my smartphone than user-installed programs on my Windows computer. Combine this with automatic updates for 99% of the apps I use, there's a greater chance that one or more of my smartphone apps could have detrimental effects to my security than my Windows programs and even web browsing.

I can't speak further about Linux, but with Windows, indeed, although all administrators effectively have root access, we also have the nearly useless User Account Control - Microsoft's way to try to save people from themselves. Well-intentioned, just not as effective as it could be, although combined with Windows Defender / Smartscreen (and admittedly if they use Chromium-based Edge - which I don't for unrelated reasons), hopefully, most folks are aware that they're downloading something harmful before they even get to a point where they would normally get a UAC dialog.

Although I say UAC is nearly useless, it is still useful. If I had a nickel for every time I've supervised a Windows user installing a program I'm advising them to install, maybe it's just because I'm looking over their shoulder but when they get to a UAC prompt - they don't know what to do at the prompt. I feel like saying "well, do you want to $#!^ install the program I just advised you to install, or don't you?" Ironically, UAC prompts are probably more useless for us power users or developers who get irritated with all the UAC prompts we see (personally, I've never had a problem with the frequency of UAC prompts, even on Vista with no service pack, although admittedly it was crazy frequent on Vista).

Android (and iOS, I assume) are much more successfully centralized than Windows. Windows has been steered toward more centralization over the years, but it was always an afterthought. Android certainly wasn't as centralized originally, but it was still more centralized than Windows at least by v2.0. This centralization, while great, probably also leads to much more potential damage if your device is compromised than if it's not.

I'm guessing smartphones get stolen much more often than desktops or even laptops.
[Google Pixel 6 Pro] pcriz:
I don't carry a PC in my pocket everywhere with all kinds of sensitive data and all of it a few fastboot commands away because I leave my bootloader unlocked. I do carry a smart phone that meets that criteria though.

I'm also not here to tell you how something is or isn't safer than your PC. But based solely on the fact that you run Ubuntu. It ain't THAT safe.
[Google Pixel 6 Pro] zymphad:
Yeah... That's my point. Why is Android being so limited with the oh no, it's rooted, vs say Ubuntu desktop which you claim isn't that safe. Yet I can do whatever I want. And you can install Ubuntu on your phone, so it's not limited to your PC.

And far as I'm concerned, you are carrying a PC in your pocket everywhere you go, running Linux. So I don't see why just cause you are using Linux on a phone all of a sudden it's insecure yet when you flip open your laptop, it's all of a sudden secure.
[Google Pixel 6 Pro] CrashTestDroid:
Which "few fastboot commands" bypass the encryption that protects your phone by default? How does the bootloader being unlocked affect anything?
[Google Pixel 6 Pro] fekry010:
thx <3
[Google Pixel 6 Pro] Nergal di Cuthah:
This is old information magisk has been updated from that file and p6p is on February patch. Something makes me feel like you're boosting your post count for some reason.
[Google Pixel 6 Pro] fekry010:
i have no reason to boost count and it is really fixed my issue .

is there update for this file can you please tell me where to find ,because i can't find hide magisk app from other apps on this version
[Google Pixel 6 Pro] roirraW "edor" ehT:
At the top of the list of threads in the P6P section, click the "How To Guide" quick filter at the top and look for the thread I've circled in red near the bottom of this screenshot. That's what you need. Please ask any further questions in that thread as well. We'll help you!
[Google Pixel 6 Pro] Nergal di Cuthah:
Oh god, no root means no systemless hosts means no adaway means ads. This is going to be a hard week (crosses fingers, night)
[Google Pixel 6 Pro] swieder711:
I am currently on the Nov build with root. I think it might be better to upgrade to the Dec build and lose root then stay put. IMHO, the 100+ fixes outweigh root.

My plan is to flash the stock boot.img and than flash the Dec build with no wipe (-w removed).

Once Magisk gets updated so that it can root the Dec kernel and Freak updates his kernel to December then I will reroot.

Any issues with this line of thinking?
[Google Pixel 6 Pro] Dataman100:
Ugh! Yes, I just noticed all the ads in my apps now. This is going to be tough until they fix it. 🙁
[Google Pixel 6 Pro] Nergal di Cuthah:
Depends on what you, personally, use root for. Adblock and tasker are big for me (but there's a thread about the necessity of root already)
[Google Pixel 6 Pro] LLStarks:
Can't measure the modem improvements easily without root.
[Google Pixel 6 Pro] Lughnasadh:
I have switched to the VPN method of Adaway until Magisk gets resolved.
[Google Pixel 6 Pro] Nergal di Cuthah:
Clear data to do so, right?
[Google Pixel 6 Pro] Lughnasadh:
I actually just uninstalled and reinstalled, but that should work as well.
[Google Pixel 6 Pro] Nergal di Cuthah:
Thanks working perfectly (i'll feel better when host is back though haha)
[Google Pixel 6 Pro] Nergal di Cuthah:
Ok not perfectly, it seems tasker can't get my wifi name so it can't activate my task sigh. Well no ads trumps that so i guess vpn it is.
[Google Pixel 6 Pro] RetroTech07:
Just install AdGuard to block ads. I have used it for months and block ads in a lot of apps I use. Typically you need the pro version to block ads in all apps, but I'm able to do so freely in most apps I use by tweaking the settings.

AdGuard — The world’s most advanced ad blocker! Get the best ad-free experience

AdGuard is the best way to get rid of annoying ads and online tracking and protect your computer from malware. Make your web surfing fast, safe and ad-free

adguard.com
[Google Pixel 6 Pro] Nergal di Cuthah:
That's a long term solution i only need a work around until this root issue is fixed, in general i don't need an app to do it (like adguard) host based is always better, no ram overhead for instance.
[Google Pixel 6 Pro] RetroTech07:
Well, it's an option. It does a host of other things you could use it for in the meantime.
[Google Pixel 6 Pro] Lughnasadh:
A quicker solution is Settings>Network & internet>Private DNS>Select Private DNS provider hostname and enter dns.adguard.com.

That way you don't need the app. I'm actually using it now b/c I was having trouble downloading the Photos app update with Adaway VPN enabled.
[Google Pixel 6 Pro] nafi2000:
Are you getting 5G and VoLTE after updating to Dec build ?
[Google Pixel 6 Pro] LLStarks:
Maybe I'm doing this wrong, but I wasn't able to fastboot boot a November kernel, stock or rooted.

It was worth a try.
[Google Pixel 6 Pro] northmendo:
Have any of you tried patching the boot image after the update rather than before?
[Google Pixel 6 Pro] Lughnasadh:
Yes, many of us have.
[Google Pixel 6 Pro] Nergal di Cuthah:
Yeah that's inherent in my process, plus magisk only gives the option to do a file
[Google Pixel 6 Pro] northmendo:
I understand that. Most people referenced the instructions that patch it before updating. Hopefully there's a fix for y'all sooner than later.
[Google Pixel 6 Pro] Lughnasadh:
2 people have opened up issues about not being able to root December's update on John's Github, so if he isn't aware of it yet, he soon will be. Saw he added a commit in the last half hour but doesn't look like it has anything to do with this problem.
[Google Pixel 6 Pro] Lughnasadh:
2 of us have submitted bug reports per request so we'll see what happens. 🤞
[Google Pixel 6 Pro] Burt Squirtz:
dns adguard.com under dns settings. You're welcome:)
[Google Pixel 6 Pro] mclarence:
The latest pull request on magisk github appears to fix the issue. Credit to yujincheng08 on github for identifying and fixing the issue.

You can download the newest magisk manager apk (under artifacts) from https://github.com/topjohnwu/Magisk/actions/runs/1576410350

Use app-release.apk.

or download from the attachment.

Re patch boot.img with the new magisk manager and flash in bootloader as per usual.

New canary version is officially out. No need to download the apk from build job.
[Google Pixel 6 Pro] LLStarks:
It works. I'm happy.
[Google Pixel 6 Pro] Jiggs82:
Which apk I install I see 3 in the zip file? Thanks
[Google Pixel 6 Pro] mclarence:
app-release.apk
[Google Pixel 6 Pro] Lughnasadh:
Thanks for opening that issue and testing the fix (I was the other one that submitted a bug report Hondo77}, Much appreciated 👍
[Google Pixel 6 Pro] Jiggs82:
Thanks so much for this! I had to uninstall the canary version and install the release apk tho. Got root now!
[Google Pixel 6 Pro] Burt Squirtz:
Atgh, for some reason I just can't find it on the GitHub page. I don't see anything that says artifacts. Could someone simply just upload the APK please?
[Google Pixel 6 Pro] mclarence:
I've edited my reply with the apk attached.
[Google Pixel 6 Pro] Dataman100:
I'm getting Windows Defender warnings that there's a trojan in the app-release.apk file. It keep quarantining it.

I'm getting the warning that it contains: Trojan:Script/Wacatac.B!ml. This is on both the apk that mclarance attached above, and the Artifacts.zip directly from GitHub. Anyone else seeing this? I can't even copy it to the phone without Defender deleteing it.
[Google Pixel 6 Pro] mclarence:
False positive, just disable windows defender temporarily. My windows defender doesnt flag these files as a virus.
[Google Pixel 6 Pro] Guivre:
With the new apk, I'm getting a 'boot failure' error after I patch the magisk img and try to boot into system. It won't even attempt to boot and immediately takes me to the fastboot screen. Reverting to the factory boot.img fixes the issue. I tried 2 different magisk patch images with no luck. Any ideas? Pixel 6 Pro

Bootloader version: slider-1.0-7892371

Baseband version: g5123b-93368-211126-B-7898734
[Google Pixel 6 Pro] foobar66:
I scanned the file with Bitdefender (official version) ... it came back clean for me ...
[Google Pixel 6 Pro] Dataman100:
I've uploaded it to VirusTotal and it came back clean. Very odd.
[Google Pixel 6 Pro] foobar66:
I patched as well and have root (back).

Uninstalled canary version first.

However - for me - once inside Magisk the "App" section indicated that there was no app. Weird.

So I then uninstalled the APK and re-installed Canary 23015 ... then rebooted.

All looks fine now, just had to reactivate Zygisk and reconfigure the denylist.

I have:

Security update: Dec 5, 2021

Play-systemupdate: Dec 1, 2021

Play store-version: 28.3.16-21
[Google Pixel 6 Pro] dilruk:
Looks like you needed to be logged in to GitHub to get to the link
[Google Pixel 6 Pro] Dataman100:
How do you uninstall Magisk?
[Google Pixel 6 Pro] Lughnasadh:
Sounds like you haven't disabled verity and verification and done a subsequent wipe.
[Google Pixel 6 Pro] mclarence:
Did you patch and flash the correct boot image for your device and android version?

Try to flash vbmeta again with --disable-verity and --disable-verification, reboot into the system, reboot back into bootloader and flash the magisk patched boot image.
[Google Pixel 6 Pro] mclarence:
Just simply uninstall magisk manager app like with any other app. You can long press the magisk icon on your launcher and press app info then uninstall or go to settings > apps > all apps > magisk manager and uninstall from there.
[Google Pixel 6 Pro] foobar66:
First patch the boot.img from the factory image & download to PC.

Go into Magisk, then tap "Deinstall Magisk".

Reboot to bootloader (adb reboot bootloader), flash patched boot image (fastboot flash boot <patched>.img), then "fastboot reboot", then re-install Magisk.
[Google Pixel 6 Pro] Dataman100:
Yep, thanks! I uninstalled, installed the new version, patched boot.img, flashed the new patched version and rebooted. Root is back, SafetyNet passes, banking apps all work, versions checkout. I'm good to go!

Now have to see if the bugs are fixed. 🤞
[Google Pixel 6 Pro] foobar66:
Indeed, same for me. Only substratum did not get root (weird). Uninstalled it and reinstalled and then it got root ... so all 'good' here as well.
[Google Pixel 6 Pro] DanielF50:
Awesome stuff!

Had a bootloop after flashing the latest patched image but disabled all my Magisk modules by booting to safe mode (holding the vol down button during the boot anim), then rebooted & su is back. Now I've just got to figure out which one is causing the BL 🙃
[Google Pixel 6 Pro] nguyenson91hp:
Should we flash the radio img. <radio-raven-g5123b-93368-211124-b-7943060.img> Could it improve the connection quality. Or could it affect root in any way?
[Google Pixel 6 Pro] wanttotree:
Safetynet passes with usnf or no need?
[Google Pixel 6 Pro] nguyenson91hp:
Oh I realize that radio img is included in the flash all BAT file. LOL
[Google Pixel 6 Pro] KHANrad_SIN:
Just used the new magisk apk and updated to the Dec. security patch. Everything is working as before: have root, pass safety net(with USNF 2.2), V4A working. The only problem I have is that the "Hide the Magisk app" in the magisk app settings is grayed out? I can't select it at all. Anyone know why?
[Google Pixel 6 Pro] lssong99:
Just installed the new (23015) Magisk and re-patched the boot.img and root come back... Phew!

However, I noticed that in settings of Magisk app (the gear icon), the "Hide Magisk App" becomes garyed out. I DO know topjohnwi had retired Magisk hide, however on last canary, this option (to change the package name/ID of Magisk.apk) still works.

Is the grayed out option an expected behavior (if so I have no issue, I fully understood topjohnwu's thinking) or did I just missed something?
[Google Pixel 6 Pro] cd993:
I had this too, thanks for sharing the tip about safe mode!

Did you work out which module was causing it?
[Google Pixel 6 Pro] cd993:
Weird, I updated to the Dec release last night via the OTA sideload method and see today (after restoring root with the new magisk) that I'm still on the November Play System Update? I'm on the Dec security update....

I'm passing safetynet thouhg, without needing to revert back to the previous magisk at least....
[Google Pixel 6 Pro] foobar66:
I had this 'rollback' in the past once as well. I'm still not sure why it rolled back precisely.

However, I think (but I'm absolutely not sure) that I fixed it by flashing the patched boot.img to both slots (--slot=all). Then a few days later I could upgrade again to December Play update and it did not roll back.

But again ... it can be a pure coincidence ... maybe flashing the boot.img to both slots did NOT have anything to do with it at all ...

It's worth a try and does not do any harm.
[Google Pixel 6 Pro] cd993:
Cheers, I'll give this a try, who knows it may work! Just been speaking with @Freak07 over in the Kirasakura kernel thread who also has the Nov version, who kindly provided this response:

"yes, that´s completely normal. the play system update is dependent on firmware independent changes, that are controlled by play services and all the new apps, google pushes to devices over the play store.

Some of those changes are server side controlled and roll out in stages. so even if you install the apks, you don´t necessarily get the changes needed for the updated play system update.

once all parts are updated, you´ll get upgraded to the new state. it´s pointless to update just the state via the apk on apkmirror, as is advised on some places. if everything is in place, you´ll get bumped"
[Google Pixel 6 Pro] DarkusRattus:
It's probably because this version of the app can't detect the most recent version, since it is pulled from a commit and not officially an update. I believe when hiding the app, the most recent version is downloaded and modified to be hidden.

Don't know how we're able to do this manually.
[Google Pixel 6 Pro] DanielF50:
Not yet, I didn't have a chance before work this morning.

I've re-enabled Systemless Hosts, USNF 2.0 & Viper4Android for the moment & it boots/works fine, but I'll enable a few more on my lunch break and figure out the culprit and let you know 👍
[Google Pixel 6 Pro] cd993:
I suspect it may have been either the Kirasukura power save module or Tulsadiver UI mods, as I disabled those and all is well for me
[Google Pixel 6 Pro] DanielF50:
I was going to say both of those but I didn't want to assume, haha. I just tried all & it was Tulsadriver UI mods that's causing it (even boots with Kira power module).

I did some rootless UI mods last night to tide me over (until we had root again) & wasn't sure if it was the two conflicting, but I assume it just needs an update to be functional again.

Edit: since this post, Tulsadriver UI mods were updated for December build & they work perfectly now 👍
[Google Pixel 6 Pro] KHANrad_SIN:
Just wanted to add that I have this issue as well. The "Hide the Magisk app" option in the magisk app settings is grayed out.
[Google Pixel 6 Pro] armaki:
Same here. I uninstalled magisk and installed magisk-alpha version 23015 and all is well.
[Google Pixel 6 Pro] foobar66:
I had that as well. As I said in an earlier post, I removed Magisk, then re-installed the 23015 (22) Canary. That worked for me (after reboot) - then I could 'hide' magisk app.
[Google Pixel 6 Pro] foobar66:
FYI:

https://twitter.com/i/web/status/1470722938995240963