yashsingh1/xdaforums huggingface dataset:
[Magisk] Fiufsciak:
Hi, I'm a bit out of the loop, I kept putting it aside, but I cannot ignore it anymore. I'm from the old times when the module just worked, so, please, tell me if I got it right:

- Nobody will point me to a working fingerprint, obviously. I only want to know, do I need just pif.json?

- What requirements must a device meet to get a useful pif from?

- If pif.json is all I need, what do I do with it? I couldn't find answers in the FAQ.

- Any obvious tips I might be missing?
[Magisk] zgfg:
PIF from Chiteroman comes with the built-in prints from Griffin, taken from Xiaomi.eu injector (no need for pif.json)

If you use PI Fork, you have to supply your own custom.pif.json. There are several methods available, all result by downloading/creating the JSON file with those same Griffin prints

If nobody answered you, it's because all that is clearly available in this thread. Start reading from the most like posts

For more (JSON with your 'private' prints) you need to dig more. It's possible but .. All previously publicly available sources are either withdrawn or the prints are 'banned'. You will need to test hundreds prints to find a working one

So why wouldn't you start with the Griffin like the most users
[Magisk] majorfigjam:
You may have said before, but what rom(s) are you using?

You don't need playcurl with latest Chiteroman. Also, lsposed may conflict with integrity fixes. What other modules may be interfering?

Regardless, and this may be difficult for you to take on board, but your 2016 device(s) are probably too old to pass device integrity if they're rooted. Your best option is to revert them to stock and lock the bootloader.
[Magisk] NIKOST:
View attachment 6091605

I think everything looks ok. I will contact my bank on Monday, although I can setup my card with a non rooted android
[Magisk] osm0sis:
If you've had previous fails a device+card combo can get flagged as suspicious by the Google Pay team. Call them to get the restriction lifted.
[Magisk] Fiufsciak:
Thanks, it did work from the get-go. It's not like nobody answered me, it's just the topic moves so fast that I can't keep up, don't know who to listen to. I remember that it worked, then you had to provide your own pif.json for it to work, and now it works by itself again. I'm genuinely curious what has changed.
[Magisk] NIKOST:
I did yesterday and they fixed their end but my card still gets rejected. It may be from the bank's side, maybe they flagged my device
[Magisk] osm0sis:
When they lifted it for me they said it takes like 48 hours to clear. And that might be business days. So maybe try on Tuesday?
[Magisk] ashish1989:
I think you miread my post. For my 2016 device, I know with Xposed I can not pass safetynet. But I am talking about my Android 9 device.
[Magisk] pndwal:
Why?... These devices generally pass much more easily... As they're not HKA capable no device fallback to BASIC-only attestation (ie. fake keystore registration) or server side device IDs (ie. prop/field spoofs etc) are even needed and user can keep native print set etc unchanged!... 🙃 PW
[Magisk] majorfigjam:
J7 prime came out in 2016, but is updateable to A9.

What rom are you running on it? What other modules might be in the way?
[Magisk] ashish1989:
I am on a One UI custom rom with A9. Installed official magisk v27.0

Modules Installed - ExtSD Write Access Enabler, playintegrity fix by chiteroman, playcurl by daboynb, Shamiko, Lsposed-Zygisk official latest

Renamed Magisk to random package name too and using bootloader spoofer Lsposed module by chiteroman
[Magisk] majorfigjam:
Generally yes, but ashish1989 has been asking the same question for a month now, apparently trying all sorts of variations and suggestions from here without success.

There's obviously something specific about this particular j7 that means its not going to work unless it's reverted to stock.
[Magisk] majorfigjam:
Is that a Samsung rom, or some other customisation? Have you checked the rom for a banned string?

Have you tried removing everything but zygisk, shamiko and chiteroman, to rule out cross interference?
[Magisk] ashish1989:
Customized Samsung rom

Let me check and reply
[Magisk] majorfigjam:
Back on 4 April, you said it was working on your J7. What have you changed since then

🔧 [MODULE] Play Integrity Fix (SafetyNet fix)

PLAY INTEGRITY FIX This module tries to fix Play Integrity and SafetyNet verdicts to get a valid attestation. BEFORE YOU START: - Your ROM must be signed with a private key from maintainer, you can check with this command: unzip -l...

xdaforums.com
[Magisk] ashish1989:
Updated kernel, nothing else. And yes before that it was working
[Magisk] majorfigjam:
So is the new kernel on the banned list? https://xdaforums.com/t/module-play-integrity-fix-safetynet-fix.4607985/page-518#post-89308909

Can you revert to the old one, and try again?
[Magisk] t3chg33k:
My current custom ROM by default only passes basic integrity. With PIF module and the Xiaomi.eu fingerprint I can pass device integrity. However, my work apps based on Intune as well as Google Pay refuse to work as they can detect root with various masking options/modules enabled.

I don't mind losing root to get the full functionality back, but simply uninstalling Magisk reverts to basic integrity. What is the process thus to use a working fingerprint without root?

Also, another custom ROM with a different fingerprint has device integrity without root, so being able to use that would be great as well.
[Magisk] majorfigjam:
@t3chg33k

What phone model?

In general, without root, you will need to revert to stock (and maybe lock your bootloader) to get device integrity. Without root, you can't spoof a fingerprint from a different device , so far as we know.

Not sure what your last sentence means - so I assume you're asking if such a thing exists. There may be custom roms for your phone that pass device integrity if unrooted, but as you haven't said what your phone is, we can't help.
[Magisk] hjjiang:
@t3chg33k have you tried this for intune? https://xdaforums.com/t/how-to-bypa...root-checks-working-as-of-march-2024.4663331/

This worked for me, had to down grade company portal
[Magisk] awarexda:
As far as I understand, the McDonald's app requires STRONG integrity... It stopped working recently although with lsposed etc was working fine.
[Magisk] sergej_7:
fixed it with latest magisk canary 27002!

---

Can't pass CTS

Kernel:3.4.113-z3DD3r-gc802a74b

Replaced z3DD3r with google

Device:hammerhead

ROM:lineage-20.0-20231230-UNOFFICIAL-hammerhead-signed

Android:13

Magisk 27000

Shamiko

Play Integrity Fix 15.9.7

Playcurl

Lsposed

HMA

Zygisk enabled

Hidden userdebug test-keys and LineageOS manually

Advanced reset sensitive props module

{
"accountDetails": {
"appLicensingVerdict": "LICENSED"
},
"appIntegrity": {
"appRecognitionVerdict": "PLAY_RECOGNIZED",
"certificateSha256Digest": [
"_zjHvW5D0vMAQ78JM2p2uWx9XLBnXWGIsg7yiyrP7ec"
],
"packageName": "com.henrikherzig.playintegritychecker",
"versionCode": "7"
},
"deviceIntegrity": {
"deviceRecognitionVerdict": [
"MEETS_BASIC_INTEGRITY",
"MEETS_DEVICE_INTEGRITY"
]
},
"requestDetails": {
"nonce": "YW9wUzJ0Z2RZclZLMU5kWEhnb01BR0tmREdSUkUwdFhOWTVxb1dqUGhOSUJudjZtNnQ\u003d",
"requestPackageName": "com.henrikherzig.playintegritychecker",
"timestampMillis": 1713082193121
}
}

{
"apkCertificateDigestSha256": [
"/zjHvW5D0vMAQ78JM2p2uWx9XLBnXWGIsg7yiyrP7ec\u003d"
],
"apkDigestSha256": "DptbkXD9gp0gJo6lxUSvpwb8DfNB29O7WvBnFbl4P9I\u003d",
"apkPackageName": "com.henrikherzig.playintegritychecker",
"basicIntegrity": false,
"ctsProfileMatch": false,
"evaluationType": "BASIC",
"nonce": "MWMzMTI3M2UtMTJkZS00MWU4LWExZDMtZmU3ZDQ1MTUxMDBk",
"timestampMs": 1713082196924,
"deprecationInformation": "The app is allowlisted to use the SafetyNet Attestation API until the full turndown: https://g.co/play/safetynet-timeline."
}
[Magisk] pndwal:
User wasn't still asking about Galaxy J2 2016 as can apparently pass DEVICE_INTEGRITY and even has Zygisk working with latest official Magisk w/ native bridge which fixes Zygisk issue for old Samsung kernels:

Seems only issue with that device now is that any A7 capable XPosed framework tried (including Dreamland) as yet trips detection and member wants that for certain functions:

You'd be forgiven for missing that J2 can in fact meet DEVICE_INTEGRITY despite being rooted in this convo however... 🙃 PW
[Magisk] pndwal:
Just saw this looking back... Thought you just wanted XPosed for HMA... Please remind me of any reasons for wanting XPosed...

Re. external storage, I believe native Adoptive storage (for SD card etc) came with Marshall and niggles were ironed out with Nougat (7.0) release, so I think you shouldn't need a 3rd party solution for that... You may not be able to format only part of SD for Adoptive app use; I think it's all or nothing unlike old Apps2SD etc, but you can "Force allow apps on external" (to override manifest values if app is otherwise ineligible) in Developer options. 🤠 PW
[Magisk] ashish1989:
Actually my internal storage is only 8gb in J2 2016. That's why I use Xinternalsd xposed module which forces apps to use external storage rather than internal, specially whatsapp. Same is the case is with my J7 Prime, it only has 16gb internal, but good part is, its A9 and I can use all latest root stuff in it
[Magisk] majorfigjam:
Still working where I am, with device integrity only. It's added to denylist with shamiko. I don't have lsposed.
[Magisk] RubberGooseGuy:
How do I fix CLIENT TRANSIENT ERROR. On a redmi note 12 4g running crdriod 10.2.

JSON​

{
"accountDetails": {
"appLicensingVerdict": "UNEVALUATED"
},
"appIntegrity": {
"appRecognitionVerdict": "UNEVALUATED",
"certificateSha256Digest": []
},
"deviceIntegrity": {
"deviceRecognitionVerdict": []
},
"requestDetails": {
"nonce": "SHhaa2RNMDFIOFRFRERYME5yb0cyNVl1Y2lzamM4T1d3cVZDNFdsaDhkelpLZ3VUUFM\u003d",
"requestPackageName": "com.henrikherzig.playintegritychecker",
"timestampMillis": 1713095431669
}
}
[Magisk] osm0sis:
See if it happens on my fork. Might be another regression in PIF.

It also might mean you've checked too much and too often and need to wait a bit.
[Magisk] RubberGooseGuy:
Same error.

I'm using a fingerprint from the HTC U ultra made by pixel flasher.
[Magisk] osm0sis:
So probably the second thing then.
[Magisk] zgfg:
When did you install that HTC U Ultra prints?

Did you check by Simple PI Checker, TB Checker or from Playstore/Dev mode?

And how does Yasnac pass SN

Btw, do you have GApps and Internet?
[Magisk] pndwal:
I used to have Huawei Y550 with only 4gb internal... Used to use Apps2SD for same reason, but when we got A6 ROMs with native support for apps on SD (Adoptive storage) I moved to that... Already mentioned "Force allow apps on external" ...

I just thought you could move to Adoptive or even Apps2SD and ditch old XPosed... PW
[Magisk] ashish1989:
So even on Apps2SD you can force apps to access external storage, specially whatsapp folder
[Magisk] RubberGooseGuy:
I have tried all the apps you mentioned except Play store Dev mode.

I'm using nikgapps.

I installed got the HTC U Ultra prints off the build.prop of the stock rom.

YASNAC passes safetynet fine except for CTS profile match.
[Magisk] zgfg:
I don't know if the prints you mentioned pass Device Integrity. If you grabbed them from stock, there is no guarantee that they would downgrade from Strong attesting to Device and let you pass

But I also don't know if PI works with your nikgapps. Generally, Pi/DroidGuard is part of Google Play Services
[Magisk] osm0sis:
That's the same as not passing DEVICE in Play Integrity. Your print doesn't work. Try with the public "griffin" print to verify your setup otherwise works.
[Magisk] RubberGooseGuy:
Play Services is installed.

What is the public "griffin" print.
[Magisk] osm0sis:
PlayIntegrityFix/module/pif.json at main · chiteroman/PlayIntegrityFix

Fix Play Integrity (and SafetyNet) verdicts. Contribute to chiteroman/PlayIntegrityFix development by creating an account on GitHub.

github.com
[Magisk] awarexda:
I have updated shamiko, lsposed but not pif (I have 15.9) because I am afraid of possible crashes or bootloops (if ain't break don't fix it) and sadly enough the McD app is self closing upon opening it...
[Magisk] majorfigjam:
Then either the app is country specific , or it's detecting lsposed. More than likely it's lsposed causing the problem.
[Magisk] Vagelis1608:
I gave up on the McD app a while ago.

I don't know how they do it, but they have a very robust root detection method.

If anyone knows a way around it, let me know, I'm still interested.

EDIT: I tried again now and it worked!

I'm guessing they backed down and only use Device Integrity now?
[Magisk] casouzaj:
McD app is working in my Xperia 1 II, running Pixel Experience 14. This ROM already comes with KerrnelSU. Regarding Play Integrity, I installed PlayIntegrityFix v15.9.7 and Shamiko v1.0.1. For them to run, I installed ZygiskNext v1.04. I pass both basic and device integrity tests.
[Magisk] awarexda:
Mine still doesn't work, maybe I need to update to PlayIntegrityFix v15.9.7.

EDIT: do you have lsposed?
[Magisk] zevozki:
CTS failed. Any advice?

View attachment 6092114
[Magisk] zgfg:
First advice, your config and prints you use?

Second, you will later need to test with Play Integrity - it can happen that you pass CTS (Basic) but not Device Integrity
[Magisk] majorfigjam:
Third advice.

Read the 2 most liked posts, and the linked FAQ.
[Magisk] zevozki:
Thanks for guide. I fixed it by installing shamiko module
[Magisk] pndwal:
Getting OT here, but I was talking about actually installing apps on SD, however app data and more can be moved and accessed there too. There's a plethora of options and settings for Apps2SD app and a good FAQ page... a relevant QandA is:

Nb. As far as I know, root functions for root apps will be broken if installed to SD card using either Apps2SD of adopted storage... Simply move those apps back to internal storage.

Hope it helps. PW
[Magisk] RubberGooseGuy:
Same CLIENT_TRANSIENT_ERROR

Nvm I found out why I couldn't I have to flash full Gapps
[Magisk] zevozki:
Aplologies I dont know what config and prints means.

How to test play integrity?
[Magisk] badabing2003:
FYI

I don't use Shamiko or LSPosed, and only use Magisk and added McD to Magisk denylist.

McD launches without any issues (note I have not attempted to sign in as having McD app does not interest me)

When exactly do you get the issue? launching or signing in or making an actual purchase?
[Magisk] 4sz0m:
While I understand that posting the news might seem unrelated to this thread (dear Moderators), I'll risk reposting it with some commentary for context.

I believe that as we have been slowly seeing our prints "burn" away; as we have been seeing Android developers stop or freeze development of various projects; the death of Pixel Experience - as arguably one of the current top custom ROMs - is another unignorable indicator that current PI device and soon to be more popular strong integrity requirements have deterred our community's developers (who must have been experiencing significantly reduced interest lately - by what's left of the community - in the product of their hard work) from continuing their projects. PIF(ork) have been the answer for a while to the PI device integrity problem, but the direction we are currently heading now smells of doom too much for even I, who have been generally positive about the future of modding/rooting.

So this is why I posted earlier the sad PE news and I hope it is now clearer with the above context.

Everything has to come to an end, sometime...

Dear PixelExperience Users, It is with a feeling of gratitude that I share important information with you today. After much reflection, I made the decision to complete the development of PixelExperience. The project was created by me in 2017, in a completely different scenario from what we...

blog.pixelexperience.org
[Magisk] awarexda:
Upon launching
[Magisk] majorfigjam:
The common factor seems to be that McD detects lsposed. It's not a play integrity issue.
[Magisk] Vision:
I have PIFv8 fork, Kitsune Mask with Zygisk and Magiskhide, and McD open normal and work
[Magisk] awarexda:
Should I remove it at all?

I also have HMA and somehow McRoot, is this a problem?
[Magisk] JazonX:
McD App needs basic and device to pass.

Also, the App detects Magisk, So Shamiko should be used.

As long as the above combination works, It will work.

App will open without any errors always (If it's already logged in).

It detects root or integrity during times such as new login, and deal activation.
[Magisk] awarexda:
I removed Lsposed and rebooted but no luck. Still McD crashes upon launching.

BTW basic & device OK.
[Magisk] zevozki:
Thank you for sharimg. I have read this post. I feel its difficult to absorbe due my Lack of deep understand this tech stuff. Im noob. I sloved my issue with shamiko module for one app.

Now only the hardest app to make it working is Netflex.
[Magisk] Vision:
Yeah, understand, I was in your position.

Both McD and Netflix works

I have only PIFv8 fork module, Kitsune Mask with Zygisk and Magiskhide, and McD and Netflix open normal and work.

What problem have with Netflix?
[Magisk] zevozki:
View attachment 6092313

Once i luanch the app i get this error.
[Magisk] Vision:
Yeah, and for me to work, only need the PIF module nothing else
[Magisk] immortalwon:
When will someone create a new TG for play integrity chatting and bypassing droidguard? This topic keeps getting spammed now-a-days with off topic
[Magisk] Vision:
The only close to that is this

TEE hacking

Post about hacking TEE on Android devices. I will post here some useful resources: https://github.com/chiteroman/Reprogram-TEE-on-Qualcomm-devices https://github.com/chiteroman/FrameworkPatch And leaked keyboxes...

xdaforums.com
[Magisk] zevozki:
I edit my last reply, check it please
[Magisk] Vision:
I read it, only the original Magisk have tried? Or and other?
[Magisk] zevozki:
Yes, systemless magisk from github by topjohnwu
[Magisk] Vision:
I mean, like Kitsune Mask?

You mean the original Magisk right?
[Magisk] awarexda:
Update: HMA, McRoot, Lsposed removed

Reboot

No lsposed folders present

Basic & Device OK

McD still crashes upon launch

Only last step to try (before I quit) is to update pif from 15.9 to 15.9.7 (latest)

Aaargh
[Magisk] zgfg:
I meant, phone, ROM, Magisk setup, Zygisk, DenyList, do you use PI Fix or PI Fork module, in case of the second how you installed and which prints you use, etc

How to test Play Integrity - just type in Playstore snd download/install the checker(s) it offers you

But please, please, first of all - read the most liked posts in this thread. From there, fimd the FAQ post - and then please ask only the thigs if you don't find the answers and instructions tthere
[Magisk] zevozki:
I use original magisk
[Magisk] Vision:
Have you tried even the Kitsune Mask?

And if not, you can try it
[Magisk] zevozki:
Phone: oneplus 10 pro

ROM: OxygenOS 13

Magisk setup: official magisk stable 27000

Zygisk: enabled

Deny list: Netflix, play store, google famework (but its not auto toggle off after i toggle on), and other banking apps.

PI fix or PI fork: i dont know the difference, i just install the modules released from developers github asset.

Honestly i tried to find how to see the most liked post but i seem puzzled to find it, im viewing throigh mobile web, not sure if i that not showing me option to find most liked post. I will double check FAQ to make sure if i found my answers there.

Sorry for the trouble.
[Magisk] majorfigjam:
Obviously everyone is getting bored as nothing seems to have changed with Google and Play Integrity since the 29 February events, but seriously, neither McD nor Netflix blocks are issues related to Play Integrity. (And yes, I know, I'm guilty by trying to help out earlier here with regard to McD.)

These and many other apps check for Device Integrity, but they also include a range of other checks for signs of rooting. If you have Device Integrity, and your apps still don't work, then it's NOT play integrity related. If you don't have Device Integrity, then read the Most Liked Ever posts and the linked FAQs, and solve that problem first.

There are separate XDA threads for McD, McRoot and Netflix, so please review those threads before posting here. In all likelihood your question has already been answered there.
[Magisk] V0latyle:
Exactly. Troubleshooting questions in this thread should be limited to the modules contained herein.
[Magisk] zgfg:
Scroll down and find Top liked posts - screenshot attached

There is a big diff between PI Fix and PI Fork - first comes with the built-in prints, for the second you must install your own. However, many install Fork and then simpl add prints by the methods described in the FAQ
[Magisk] Vision:
Yeah, and I write him to do the same.

First we must learn, and if still not understand, then ask for more help.

View attachment 6092335
[Magisk] zevozki:
Got it the most liked section. Thanks.

For PI now i now the difference. I will read the recommend pages and FAQ and will see if i still have issues.

Thank you for your guidance
[Magisk] majorfigjam:
Hopefully at the top of a new page!! [Edit: it was until a bunch of OT posts including mine were deleted.]

If you don't have Device Integrity, don't know what that means or have other questions, then read the Most Liked All Time posts and the linked FAQs, and solve that problem first.

🔧 [MODULE] Play Integrity Fix (SafetyNet fix)

PLAY INTEGRITY FIX This module tries to fix Play Integrity and SafetyNet verdicts to get a valid attestation. BEFORE YOU START: - Your ROM must be signed with a private key from maintainer, you can check with this command: unzip -l...

xdaforums.com

🔧 [MODULE] Play Integrity Fix (SafetyNet fix)

PLAY INTEGRITY FIX This module tries to fix Play Integrity and SafetyNet verdicts to get a valid attestation. BEFORE YOU START: - Your ROM must be signed with a private key from maintainer, you can check with this command: unzip -l...

xdaforums.com

If you have Device Integrity, and some of your apps still don't work, then it's NOT play integrity related.

There are separate XDA threads for McD, McRoot, Netflix and others, so please review those threads before posting here. In all likelihood your question has already been answered there.
[Magisk] mrjuniork:
Mod Info:

Hello world 🌍

A not minor number of posts have been deleted due to it being off-topic and derailing this thread's topic, as posted by me in the past several times.

McD, Netflix and the likes are somehow, by a very very long shot, connected to PIF, but as noted by @majorfigjam (thx for that), there are separate support threads on XDA.

So I'm kindly asking again for staying on topic to this very specific module this thread is actually about.

Thx for your understanding and your cooperation.

Cheers and have a good one 👍🏻

mrjuniork
[Magisk] dmenezes:
And last a month it did -- and actually more: that FP has been installed in my phone for 35 days and counting, and it's still working:

View attachment 6092495

So, good news. I'm about to flash my second LineageOS upgrade in this period (to get the monthly security patch) and I'm pretty sure everything will just keep working.

Thanks again @chiteroman, @osm0sis and everyone else for everything!
[Magisk] dmenezes:
Boring is good! 👍👍👍 I hope things stay that way for a long time yet! 😁

Alas, (not related, except that I always check DEVICE_INTEGRITY before and after) my LineageOS upgrade just failed. Getting in touch with the developer to see what can be done... I get anxious when I don't get my monthly security patch update... 😬
[Magisk] BIGWORM:
Keep PIF Next talk in the appropriate thread. Thank you.
[Magisk] SHERMINAT0R:
Hi, please tell me why when I replace the data in the if pif.json stop passing device integrity?

View attachment 6092888View attachment 6092889

View attachment 6092891View attachment 6092892
[Magisk] majorfigjam:
Please read the faq, referenced about half way up this page.

Not every print works, in fact very few do - griffin being one of the few exceptions.