yashsingh1/xdaforums huggingface dataset:
[Magisk] digger16309:
Yep, just did. IPhone 15 Pro Max with a paltry $140 for my P6P, but too be fair, probably more than it is worth. Good luck to all of you the rest of the way. I hope a better solution is found and/or Google backs off.
[Magisk] bakaekze:
7-zip?
[Magisk] JustSom:
What issue you're having?
[Magisk] neelchauhan:
Unlikely, since Google would lose a lot of revenue to Apple and Huawei, just to let modders lose.

Imagine if Samsung and Xiaomi phones in the EU ship with HarmonyOS with a respective One UI or EMUI skin, but Huawei services and app store? Would Google be happy with that? Wouldn't Google rather allow some modding than secede their European userbase to Huawei?

Or alternatively, what if the EU also opens up iPhones and Huawei phones to easier modding we Android users enjoyed for a while? They can't all pull out.

Google could still pull out, but we could also end up in a modding world where 0day exploits are common and root is added via privelege escalations (like iOS jailbreaking) that can hurt everyone security-wise?

From a security perspective, it's easier to let us bypass Play Integrity checks the way we did than use 0days that an attacker could also use to steal our information and put in on the dark web, while never updating to not lose the root.

Heck, a better approach is doing something similar to Windows games anti-cheat: force apps like banking apps, Google Wallet, Pokemon Go, et al. to make rooted devices run anti-cheat software while letting locked bootloader devices go without it.
[Magisk] cmstlist:
I can certainly pick away at it if need be, but would appreciate the same. Thanks kindly 🙏
[Magisk] highdiver_2000:
Just checking, I have to upload fingerprint to get Google Pay/wallet working again?
[Magisk] rseiler:
This is hilarious, but all the checker apps seem to be API throttled right now, not just the one that usually is: Play Integrity API Checker.
[Magisk] JustSom:
You have to modify /data/adb/pif.json with a valid device fingerprint.

To get a fingerprint, you have to extract it from a stock rom, or get it online somewhere.

There's a detailed explanation here: https://xdaforums.com/t/module-play-integrity-fix-safetynet-fix.4607985/page-177#post-89189572
[Magisk] ashus:
I use Lister - key F3 in Total commander, then search the uncompressed images for "ro.product.cpu.abi" and copy the contents around that to the build.prop. No need to extract everything. Although I had to install lz4 and brotli binaries in cygwin to extract some of the images. 7-zip couldn't extract them all.

I too have lost patience to try and fish. Yesterday I had 7 failed attempts, so I grabbed the most used one from Telegram for now. I guess a week or three from now, things will have to change even further, I don't see point in fishing for more. Banking app is detecting root even if GPay works, so to access my account I had to buy another phone and evidently, going back to SMS verification is impossible once you use banking auththentication app. If and when I decide to unlock and flash it/use it as my main device, depends on further development of this tool.
[Magisk] BROKEN1981:
That's probably why people are constantly getting caught. That's my hunch anyway.
[Magisk] BROKEN1981:
TG version stopped working for me. How I learned the guide was just not letting myself get overwhelmed. Hardest part for me was just finding a dump. After you learn how to search for them, it becomes semi easy, just tedious.
[Magisk] GiraffeCubed:
I give up, I've been at this the entire day and I can't find a ROM with a build.prop that passes DEVICE_INTEGRITY. I've tried dozens, old and new. End of the road.
[Magisk] jnss98b:
Yeah cuz everyone and their moms are spam checking as they try to test fingerprints
[Magisk] jnss98b:
Yeah honestly hardest part is getting a working print. The extraction part is easy
[Magisk] oversleeper:
I confirm that with v14 by chiteroman and the amazing guide that @osm0sis posted here everything works again. It took some time to find an usable fingerprint but it's still a win. Thank you for the great job.
[Magisk] jnss98b:
Sorry for the dumb question but why is it necessary now to clear data play services and play store? Before this flashing a module update and reboot would most certainly fix it immediately but even if it didn't, a few hours later it would
[Magisk] bakaekze:
It's necessary if you wish to pay immediately after you pass the test. Clear cache for Google Wallet and data for Google Services
[Magisk] jnss98b:
Ah so it's still fine if I just wait and let it reset on its own like before?
[Magisk] linuxares:
Tried spoofing a whole new phone. But it still refuse to change anything. TB Checker for example still finds it being a Pixel.

Am I doing something completely wrong? I see that logcat that it changes the values but the phone itself still reports it's original value I guess? Is it some junk file left from previous versions left somewhere?
[Magisk] bakaekze:
Sure
[Magisk] bakaekze:
It will always show your phone value. You won't ever see spoofed date in the checkers. You'll only see if you pass or not
[Magisk] GiraffeCubed:
Go with the logcat, the checkers won't show you the changes, whether you find a working print or not. The spoofed values only go to DroidGuard, so you just need to keep trying.
[Magisk] HippoMan:
My A13 device is rooted with Magisk Alpha 26401, and I'm running right now with PIF 14.0.

I just want to report that my wallet is totally accessible, none of the payment cards in my wallet have disappeared, and all of those payment cards in my wallet work without any problem for contactless payment.

My wallet ...

View attachment 6039684

This is the wallet I have always used for payment, including contactless payment. I never thought it was worth the hassle to use a mobile-device wallet, and it's even less worthwhile now.
[Magisk] Nergal di Cuthah:
Does 14 without a fp pass basic? Still on 13.8 because everything i use works (don't know about gpay cause i don't use it, though I've opened it since all this went down and it opens fine without a warning). Basically i just care about play store certified (which as of now i still have). My banks don't care (it seems to be mostly non U.S. banks that don't work, but maybe that just reflects the global community that XDA is)
[Magisk] neelchauhan:
it does pass basic but does not pass device.
[Magisk] HippoMan:
v14 passes BASIC for me on my A13 device, and that's it.

I haven't even tried to use gpay in something like several months, and even then, it was only for proof-of-concept testing, since I never use contactless payment from my mobile devices.

In my not very ample spare time, I'm still testing PIF, but not for the sake of enabling mobile-device payment capabilities. I just am interested in this technically, and I also want to at least try to learn enough so that I might help here sometimes if there's some small amount of aid that I can offer.

I also have some banking apps on my device. I normally don't use them for any real banking activities, but rather, I use them as test beds for Magisk and PIF. Even with BASIC integrity, those banking apps are working due to my use of the DenyList capabilities of Magisk.

And they also are U.S. banks.

Over the next day or so, I'll be testing some pif.json files that have come to me in a secret, mysterious way. If any of them are able to bring me up to DEVICE-integrity level, I'll report that ... but, of course, without naming the fingerprints.

Other than that, I'm just happy with the wallet of mine that I mentioned above.
[Magisk] Nergal di Cuthah:
As far as i csn tell basic is all i need, i guess I'll find out if playstore works after a reboot.

Pretty much the same as me, but I'm not finding search result the few times I've surface searched.

But i can't get enough of this evolving situation and am on xda this thread most of my non occupied time. Lol

Edit: 14 installed on p6p, playstore still working (says basic) netflix didn't complain so I'm happy. Will try more to find dumps this week or as things evolve while i sleep tonight. I'm sure we'll be on page 500 by then.
[Magisk] Pirateguybrush:
There's no need to buy anything. The fingerprints are unique to the phone model, not to the individual phones. So downloading the firmware gets you the same information that buying a phone would.
[Magisk] BROKEN1981:
I'm about to give up soon and relock if my fingerprint stops working. I need to pass both just to clock into work on my app. I can spoof my GPS without root, so the requirement of the app makes no sense .

I don't really care about Gpay other than the cool factor. It's not just Google being hard up. It's banks, hotels, ECT. It makes no sense to us, but every madness has a reason. Even if it's a stupid reason.
[Magisk] rseiler:
Is there such a thing as an offline checker given the state of the API-based ones?

As for any other way to check, I see the Play app mentioned a lot, but if that's a reference to its Settings, About, that always just says "not certified" for me (or has a huge lag, not sure) so isn't of much use.
[Magisk] linuxares:
Ah... well damn I've been fighting a ghost!

Thank you for clarifying
[Magisk] HippoMan:
It goes beyond banks, hotels, etc. Even the McDonald's app has jumped on the bandwagon. And the Uber rider app cripples itself on modded devices now. And I heard that Pokemon Go is also involved. I'm sure there are many other non-"banking" apps which are doing the same now, and their numbers keep increasing.

Pretty soon, Android will be just as undesirable to use as iOS.

And ironically, apparently ApplePay still works on jailbroken iPhones, whereas Gpay does not work on rooted Android devices. So in that sense, Android is even worse than iOS.

PS: I wonder if a jailbroken iPhone can be as functional as a rooted Android device. I heard that even when jailbroken, iOS still limits users more than Android does. But if that's incorrect information, or if perhaps in the future there would be more functional iOS jailbreaking modes, maybe the time will come to completely abandon Android and switch to Apple.

Time will tell.
[Magisk] YMatrix:
I have an old lg g5 phone, so I copied the values from its build.prop to my pif.json file under /data/adb (I'm using chiteroman's version) and rebooted.

Wallet still says uncertified and playstore pi ends with MEETS_BASIC_INTEGRITY.

What am I missing?

Ps the fp is with api 23 - is that good?
[Magisk] NGGMU:
When I extract the system.img, the extracter says "The disk image is corrupted" or something similar with Windows Explorer, 7Zip or WinRAR. Ext4 also didn't work. I don't have a compatible device to extract from, so unfortunately I'm stuck.
[Magisk] NGGMU:
When I extract the system.img, the extracter says "The disk image is corrupted" or something similar with Windows Explorer, 7Zip or WinRAR. Ext4 also didn't work. I don't have a compatible device to extract from, so unfortunately I'm stuck. It's a X!@0M! ROM I'm trying to extract from.
[Magisk] Nergal di Cuthah:
Go to playstore's settings about. Tap on the version number a few times until it pops up you're a developer. The go to settings general and at the bottom is developer options. Click that and test integrity

All that said if playstore is not certified you're likely not passing even basic.
[Magisk] choantet:
Just a note of encouragement: This 75-year old managed to find what was needed for pif.json, and got it going with Device Integrity on the third try using pif v 14. Why I keep up with this is kind of crazy, but I just like messing with phones, still.

Thanks to all who gave such good tools, guides and directions... nice work. Cheers...
[Magisk] intel_core_i7:
Depends on what you're doing. iOS jailbreak detection by third party applications can detect more easily, since hiding traces is more difficult than Android

And then you have Apple Pay, which works under a jailbroken environment because I suppose Apple never expect people to jailbreak their phone in the first place, so a server based integrity verification solution doesn't exist

An unjailbroken iOS environment can be better for modders than a non-rooted AOSP environment under a locked bootloader due to some major CVEs, you can modify the whole system font, system icons, install IPAs (trollstore), hide navigation bar, change Apple Pay card image, etc. Most of these can't be done in Android, unless rooted or included by the manufacturer
[Magisk] JustSom:
The extracted system.img could be in an android sparse image format, run

file system.img

and see what it returns, if that's the case, you have to convert it to an ext4 format in order to mount it.

Use this tool to convert it: https://github.com/anestisb/android-simg2img

simg2img system.img system.raw.img

after that you should be able to mount the raw image, got it to work on a couple of stock rom images.

If you download an image that is only a payload.bin, you have to use this tool: https://github.com/tobyxdd/android-ota-payload-extractor to extract it
[Magisk] rseiler:
Wow, OK, I didn't imagine that it was something hidden 'that people must have been talking about all this time. I just hope it doesn't use the API, too. It does show Basic, which AFAIK is correct with my current signature state. I assume it would show Device otherwise.
[Magisk] HippoMan:
Hmm ... so also, maybe unjailbroken iOS is (or soon will be) better than rooted Android, given how more and more Android developers are writing their apps to be crippled or even non-runnable under a modded Andoid OS.

Maybe it's time for me to investigate iOS.
[Magisk] beeshyams:
Thanks. I didn't know this but on Android 14,Pixel, I don't see this option.... They must've disabled

Edit: It's there but a different way to reach it. It doesn't seem to be rate limited like other checker apps. This is probably what you meant but I was searching in regular developer options!

Additional tools and support | Google Play | Android Developers

developer.android.com
[Magisk] m0han:
This is not just a note of encouragement. This is Inspiration. :love: Keep on rocking!
[Magisk] BROKEN1981:
Eh, I don't even like jailbroken IOS. I can't get past the UI/UX. Talking to Apple support though is 10 out of 10. I was amazed at the experience. Everyone should follow their lead.

Their devices backup can't be beat. In my opinion, it's better than swift backup.

I like to hide my navbar. Swift backup . SD Maid SE. That's the only reason I root. LSposed messes with Google call screen and a few other things. So I don't use it.

I honestly don't lose much if I relock. That's why I feel badly for people on here because they heavily customize. They would lose a lot of they relock.
[Magisk] BROKEN1981:
Dude. You were told the steps.
[Magisk] beeshyams:
Yes, I goofed it. Thank you

Meanwhile, I found it and edited my post
[Magisk] intel_core_i7:
The caveat is that if you plan to mod iOS, you MUST NOT update on the latest iOS version (the latest security patch) because most vulnerabilities are find at least from one major version or several security patch level behind. If you haven't had an iOS device before then I suggest buying one used and it must be on a version released several months ago. Every decision is risky, because you can't just roll back if something goes wrong. Got on the latest iOS version? It will take months (at least) to find an exploit

Yeah, Apple is just next-level in many departments
[Magisk] Homeboy76:
Yes, Play Integriy Fork.
[Magisk] NGGMU:
I'm sorry, but I don't quite understand how do I run the install script for simg2img. Both Command Line and PowerShell showed command not found. I installed the required dependencies. Can you help me please?

Thanks!
[Magisk] sga999:
Apologies if I am being blind. I saw a post in the last few days where it said chiteroman updated Displax's fork of Universal Safetynet. There was a link, but it just gives error 404. But I thought that I also saw osm0sis say that he was continuing that process. Maybe I'm just imagining that. If someone knows about an updated version of UNSF, let me know.

The reason I am interested is because I have some old Android 7 devices that I cannot install this Play Integrity fix on. I was hoping to try a newer, better version of Displax's 2.4.0 Mod 2.0.
[Magisk] NGGMU:
Unfortunately it still says "Image is corrupted" no matter how I extract it or mount it.
[Magisk] dcxtradeon:
Whelp! I'll be getting a Nothing Phone 2 as my new daily Android phone and use my modded OP 9 Pro for R&D testing with this module as finding working fingerprints is time consuming and I need to have reliable daily that can do tap to pay with no questions asked. For the time being, I'll be using my stock Pixel 5 and iphone 15 for tap to pay for now. I would like to continue to daily a rooted android phone, but if gpay, banking, and trading apps requires new workarounds on a daily basis, then it wouldn't be feasible for me to daily a rooted android phone.
[Magisk] cmstlist:
Lol tried to join Telegram to peruse the Telegram group and it's impossible, don't know why Telegram won't let me in.

Both my Canadian SIM cards simply never receive the verification codes or phone calls. 🤷‍♂️

I tried my two Google Voice numbers and was able to join for like 2 minutes then got banned from Telegram.
[Magisk] JustSom:
For the ROM that you downloaded, running `file system.img` returns what?
[Magisk] NGGMU:
Android Sparse File. So I ran the simp2img command and got the system.raw.img output which also shows corrupted
[Magisk] JustSom:
Not really sure how to help you, the image could really be corrupted, or the extraction messed something up.. a lot of variables here, I would suggest just getting a different stock rom then? The only tools that I used were 7zip, simp2img and android-ota-payload-extractor. Downloaded 4 roms, extracted them all, and the last one got me a valid fingerprint.

I searched for devices from 2016-2017, looked for "Device name stock rom" on google, and downloaded from those websites that have an archive of roms, that's basically it
[Magisk] NGGMU:
I’m using the stock rom for an older R3ðM! Device. Is there any brands that you recommend? I used x!å0m!r0m.com, which should have the stock fast boot roms. Maybe a OEM tweak means it didn’t work?
[Magisk] JustSom:
Signatures from that brand work, maybe try a different device from that year.

Not sure about this OEM tweak that you're saying, the images that I downloaded were about 2gb to 3gb. I needed to unzip a couple of times to get to the system img, then do the conversion thing to mount them.
[Magisk] NGGMU:
Yeah, I’ll try other sites and app. I just picked an older build of a ROM hoping nobody used it yet.
[Magisk] shoey63:
Does anyone know of an on device way to extract build.prop from a system.img without the need of a PC?
[Magisk] beeshyams:
I think Osm0sis had posted a way.. Not sure because I didn't read it fully
[Magisk] zgfg:
How could that be faster

Make yourself an ADB script that loops:

adb shell su -c killall com.google.android.gms.unstable

PAUSE

Then you just hit Enter on the PC and retesst again on the phone

Actually, I had yesterday a folder with 90 PIF json.files

I used a script with for each loop that was copying one by one to

/data/adb/pif.json

Then killall and PAUSE

I had opened TBChecker on the phone and I used my right hand to scroll up/down, click Run Play Integrity Check and watch result

And I used left hand to press Enter on the PC to go for the next JSON

I could loop through five not valid Json files per minute

You must only stop and put it aside when you find JSON that passes - but that makes a happy pause

No rebooting.

Just watch how one JSON passes Basic only, next fails even Basic, etc, until bingo - if/when you come to one that passes both Basic and Device

Then save that aside, reboot and double check Wallet, Netflix if you wish, etc
[Magisk] JustSom:
I haven't really tried, but maybe with termux you could install the needed tools and go from there? not sure if you can mount partitions, should be fun to hack away
[Magisk] JustSom:
I have, and the one that I got my signature from isn't listed on that dump, so I guess that's a win? 🤣

Edit: Removed the url, better that way
[Magisk] Imnoa:
Might want to remove that link before Google blacklists every fingerprint on that site
[Magisk] intel_core_i7:
View attachment 6039718

Xiaomi.eu seems to be using evox's solution, having a pool of fingerprints and just update on the fly if one fails
[Magisk] Nubidubi23:
Should probably remove that
[Magisk] WhoIsJohnGalt1979:
Brilliant! hahahaha
[Magisk] Nubidubi23:
I've tried 10 different roms with api values from 23 to 27 and none of them have worked, genuinely don't get what i'm doing wrong. I ran the build props through osm0sis's script and copied the result into a custom.pif.json in /data/adb and /data/adb/modules/playintegrityfix (wasn't sure which one so i copied it in both places)

Someone please help :(
[Magisk] beeshyams:
If you are using:

1. Chitteroman module it goes into /data/adb as a pif.json (no custom in name)

2. Osm0sis module it goes into /data/adb/modules/playintegrityfix as custom.pif.json
[Magisk] beeshyams:
{Mod edit: Quoted post has been deleted 'cause the author removed its content. Oswald Boelcke}

If he did, I missed that, sorry
[Magisk] zgfg:
Yes, already downloaded the new ROM. Have to install today

But for now I still have a working pif.json
[Magisk] Nubidubi23:
Dont mind me im just confused
[Magisk] ELAD098:
Hello friends Suddenly today it doesn't work for me, I updated to 14V and clearing cache and everything But does not receive a pass on the device integrity

there is a solution?
[Magisk] zgfg:
Depending on which version of the module you use

For ppl who use latest from Chiteroman, it is /data/adb/pif.json

So pls, don't confuse the others
[Magisk] rocker00:
check this out:

https://xdaforums.com/t/unpacker-kitchen-for-android-uka.4087797/page-11#post-88994777
[Magisk] Claus….:
For the ones that got their own fp, how long did it last? Still working?
[Magisk] Yeedatoy:
Google has to be aware of it, plus I'm pretty sure some of the guys who contribute to it work for Google...lol. That's how I spoofed to a pixel 8 before it ever made it to stores. Lol. Theres between 1 and 20 firmware branches for every device on there, and probably 10k devices maybe? It's a great site for a who plethora of things from making ports to modules to finding a way to fix that 10 year old device you've held onto but could never find what you needed for it because it wasn't even posted by the manufacturer...lol. Speaking of Google employees I found something that may or may not be helpful?

Release v0.5.1 · google/go-attestation

What's Changed Add EK as a field to AK struct. by @zhsh in #332 Add TPM.EKCertificates() method. by @zhsh in #333 attest: Make PCRs included in quote configurable by @smo4201 in #311 Activate AK w...

github.com
[Magisk] Yeedatoy:
I'm only checking in here every 10 minutes or so, so please feel free to delete anything I post that may need to be wiped out, as someone else may be able to do it quicker than me
[Magisk] Pirateguybrush:
Please delete this ASAP
[Magisk] Pirateguybrush:
Please read back at least some of the thread next time, and you'll see a lot of people discussing why this is and how to fix it. But I'll re-link as it's been a while.

Guide to locating working props

Guide for injecting/testing props
[Magisk] Yeedatoy:
It was deleted a while ago by someone else. Between their analytics tools and the wayback machine taking thousands of snapshots a minute, as well as multiple things we don't even know exist, it doesn't matter what gets deleted. Google knows what color **** stripe is in my underwear. If this thread bothered them, it wouldn't be here anymore. Lol
[Magisk] Yeedatoy:
I'm confused. It was deleted and then showed back up. Now I deleted it. Should it be there or not be there?
[Magisk] majorfigjam:
About 50 pages so far, nearly 1000 posts.

I guess I got lucky, and not too many others picked the same print. Maybe it helped having a known certified device to copy.