yashsingh1/xdaforums huggingface dataset:
[Magisk] 4sz0m:
At least this suggests that there is still manual decision making at some point of their approach. Which then loops me back to my original question. The current situation would be the easiest to clamp down on. @PatrickJK might be right.
[Magisk] HippoMan:
Yes, I forgot about that.
[Magisk] okij:
I will never be able to forget about that. It was one of the most painful times of my life. :geek:
[Magisk] mielletseed:
Which one is this?
[Magisk] Claus….:
Lets see whether it survives tomorrow. Seems for me they will win, and I did not manage to find a single print. I Hate google.
[Magisk] HippoMan:
It's the famous Xiaomi.eu fingerprint which has been mentioned hundreds of times in this thread, including within the past day.
[Magisk] CBMC:
I could of sworn Google was just pressuring Apple to open up RCS on the iPhone. Apples excuses has always been security. I just don't get how it's more secure to have to fall back to SMS (on a rooted device) then to use RCS on a rooted device. I guess the only thing would be that the user on the receiving end of the text would not know that the device is rooted. Or is there some other reason that I am missing that they are blocking RCS on rooted devices. On this note, I wonder if they are going to start requiring secure lock screens on devices to use RCS. Or password/biometrics to open RCS messages(like wallet)
[Magisk] Nergal di Cuthah:
RCS is targeted because the end to end can be intercepted before encryption or even private keys discovered by a maliciously rooted phone. Once again there's no way to differentiate a compromised root and a chosen root.
[Magisk] chiteroman:
I have decided to remove the Play Integrity Fix Telegram group.

Due to my personal circumstances, it is impossible for me to fully moderate the group, most people ask questions that were already solved and it seems to me that it was not contributing anything new or productive.

I have created a channel using the old link to send information about module updates, but there will be no more public chat.

Anyone who has something interesting to tell me can do so from private message here in the forum or privately on Telegram.

I will continue to update the module as much as possible.

Any questions or issues regarding the module can be asked here or in GitHub issues.
[Magisk] casouzaj:
My RCS is still connected, probably because my device Integrity is green.
[Magisk] BillGoss:
Wouldn't that also be the case for https? I'm which case unlocked phones should have no internet access?
[Magisk] Nergal di Cuthah:
What's the difference between end-to-end and regular TLS encryption?

I've been told that WhatsApp implemented "end-to-end" encryption. In the grand scheme of things, what does this actually mean versus, say, another service which does use HTTPS, such as this website (

security.stackexchange.com
[Magisk] markfm:
Perhaps use the github Wiki page to pick up some of the standard guidance items for people trying to figure out how to use it, debug things?
[Magisk] HippoMan:
People shouldn't be allowed to make telephone calls, because they might use their phones to contact someone in order to plan a criminal act.

People shouldn't be allowed to leave their homes, because they might decide to do so and then commit a crime themselves.

Total security: everything that's not forbidden must be mandatory.
[Magisk] lupastro82:
Cause a brick with march update I lost my fingerprint and ATM cannot found again a valid one.

Panther used in past and work,.I excluded a lot,.found again it,.bit now don't work.

Tomorrow I try again via pixel flasher.
[Magisk] HippoMan:
Good move!

... and not a moment too soon!

And it's been "not a moment too soon" for the past several months.
[Magisk] sethieplayz:
Yeah, I guess it would make sense, and nowadays more and more apps encourage setting a separate password than lock screen. Just a shame that it has to be such a hard handed decision.

I actually had green connected status to RCS before installing chiteromans newest PIF, not sure if it was a caching issue maybe but still interesting.
[Magisk] pndwal:
The Forbes article cited in this thread recently clarified this.

If one makes just a little effort to read that w/o remembering that our devices are modded it's quite easy to understand the reasoning presented, a major reason being that since modded Android devices are being used by many (most?) spammers in order to push unwanted messages, it makes sense that Apple (who were apparently reluctant to adopt RCS anyway) would want/actually pressure Google to apply similar anti-abuse device security measures to those implemented in IOS to messaging as such spam (containing all the expanded media content RCS allows) can only practically originate from (modded) Android devices... So why not kill the abuse by requiring a default device integrity attestation at least for RCS?... Bit of a no brainer for Google really.

For those not looking at this from outside the modding box, ask yourselves What do we want? - Our personal freedom, or to let Android mature and Android users communicate with IOS users w/ new rich communication services and w/o their device memory potentially being overtaken by multimedia rich spam (which is also a security issue/time bomb)?

I do wonder how this requirement affects uncertified Chinese stock devices however, but I believe most of them have basic GMS services even if Play Store is lacking so China Android messaging can presumably still use RCS... Because some Android devices certainly exist that lack all GMS elements, I happily doubt that Google will ever require deviceIntegrity labels for basic SMS messaging.

🤠 PW
[Magisk] HippoMan:
I'll go for my personal freedom. If Android doesn't allow me enough of that freedom, I'll use Android less and less and try to figure out alternatives for things that I currently use Android's facilities for.

I'm not taking issue specifically with Android's or iOS's decisions about security, etc. Most Android users are not modders and couldn't care less about the increasing number of hoops we modders have to jump through as time goes on. Among the non-modding users who think about security at all, I think most of them will welcome the increasing Android security.

It's just that for me, modding my Android devices used to be a fun hobby. But dealing with modded Android these days has now become a painful burden which continues to become increasingly burdensome.

I think it's getting to be time for me to start looking for one or more new fun hobbies.
[Magisk] intel_core_i7:
Which is funny, because you can still make thousands of Apple IDs with throwaway emails then send whatever spam ads via iMessage to other iDevices which you can't block like a decent messaging app would do.
[Magisk] Zytrel:
Actually there kinda is. With a chosen root you'll have Magisk, and other tools, etc. A compromised root - if done well - should not be detectable at all. IMHO custom roms with recent security patches and even root are still more secure than the average customer phone out there with security patches older than six months. The funny thing is, that up until recently (no idea of the current state) the PlayStore itself was full of malicious apps.

I've talked to a mate of mine who is a dev at google, and it comes down to two things:

1. Accountability. Google offers this kind of device certification to allow other apps to ensure the device is secure. Fair Point.

2. Ads. Simple as that. Google hates Ad-Blocking (they tried with YouTube before, and kinda pulled a Streisand), and thus hates root, as it's the only functional way to block afaik.

If only we'd could sign a waiver that we acknowledge the risk and take full responsibility for any malicious action (and refrain from any reimbursement from possible damages). The old Google ("Don't be evil") would've been fine with that, I guess. (Or maybe not, see point nr. 2) :)

Regards,

Zy.
[Magisk] Zytrel:
Don't be so sure, the camera can be easily restricted to DEVICE_INTEGRITY only. ;)

Regards,

Zy.
[Magisk] Zytrel:
You're totally right, none of it makes sense.

If your reason for not opening up your secure protocol, is security issues, you already got a problem. ;)

TBH, I really don't get the whole RCS thing. It's better than SMS, yes. But any secure architecture ALWAYS needs to be fully open source. I might be misinformed but RCS is not. If you really need secure comms, use Signal. If you do not don't bother. How poorly the RCS to SMS fallback is handled is a whole other topic.

Regards,

Zy.
[Magisk] hutber:
.3 work fine, now .4 released in .3 everything work fine now i updated it to .4 do i need to clear data play store and play service, nothing wrong without clear data so far?
[Magisk] Zytrel:
You answered your own question. Just do nothing.
[Magisk] purgy:
Why is rcs such a deal breaker?

Admittedly, I just use text and don't care about any of the features, but it seems weird that fancy text messaging features / green text to Apple users?) is seemingly the thing that will stop people from rooting.
[Magisk] HippoMan:
I'm totally with you on this.

Sadly, it's much easier and cheaper for businesses like the Googlefrinchians to totally avoid dealing with waivers that their clients can sign to take full responsibility. This would get them involved with paperwork, legal disputes, lawyers, etc.

It's much more preferable for these companies to simply take the easy, lazy way out and just paternalistically and one-sidedly impose blanket unfair policies onto everyone.

This is what we have to deal with nowadays, as the world "evolves" (ha ha!) into a place with more and larger "corporatocracies" subsuming an increasing number of roles that previously were the responsibilities of traditional governments.
[Magisk] Zytrel:
Thanks for the summary. This is pretty much exactly what my mate (the google guy) told me.

Regards,

Zy.
[Magisk] menuisier3:
Hello,

Many thanks for your work.

Could you adapt your patch to France Identity?

That would really be the best!

Thanks again
[Magisk] :
I'm counting the

France Identity has problems all of its own, and that's before you even get to device security checks. The French.gouv developers are pointing the finger at the app's popularity and their overwhelmed servers for their seemingly defective app.

Btw, the 'patch' isn't applied to any particular app. You install your own fp that enables to pass the security checks that some apps do.
[Magisk] rom4ster:
personal freedom anyday, methods for using imessage already exist. Absolute stupid dumb, and beta logic.
[Magisk] rom4ster:
Many people were uploading fingerprints that STILL work in that group. There were discussions on how these technologies work, and other very interesting conversations. Yes there was a lot of spam but still probably was worth it.

IN the mean time, PlayIntegrityNext has a telegram group, perhaps we could migrate there.
[Magisk] lupastro82:
Ok, switched to default module (not fork release). Work without any problems 😃
[Magisk] HippoMan:
I agree with you.

And likewise, I don't see how it could be more secure that banks force us to fall back on using plastic cards (which they actively try to get us to sign up for), instead of our making contactless payments on modded Android devices which -- even when done on compromised, rooted phones -- is still more secure than using the plastic.

These kinds of self-defeating policies will continue, because there's no law against being stupid.
[Magisk] menuisier3:
Hello, Thank you for responding. Indeed, digital identity works without problem covered by Magisk but France Identilté does not pass despite its protection.

Hopefully we can find a solution

THANKS
[Magisk] osm0sis:
That just means you didn't read the instructions to set it up properly with a working print. 😉
[Magisk] lupastro82:
No Bro, Sorry 😅

I setup some times ago thanks to forked release with pickaprint. Now no way (tried a lot of time without result). Just for this come back to not-fork. I sure I missed some news about this.

See here:

🔧 [MODULE] Play Integrity Fix (SafetyNet fix)

PLAY INTEGRITY FIX This module tries to fix Play Integrity and SafetyNet verdicts to get a valid attestation. BEFORE YOU START: - Your ROM must be signed with a private key from maintainer, you can check with this command: unzip -l...

xdaforums.com
[Magisk] 4sz0m:
Well, I gave it a go... It's just unorganised, useless noise in there, especially if you come from XDA.
[Magisk] osm0sis:
Yes bro. All you have to do is use my autopif.sh to get the latest Xiaomi.eu print if you don't care about finding your own.
[Magisk] :
It's possible the .gouv people are doing something other than the standard google api check, and are doing their own kind of security check. I honestly don't know.
[Magisk] lupastro82:
Eh, as expected, autopif is the first time I read about this. Now I check about it 😅

(But in GitHub seems to be nothing about autopif) 😐

GitHub - osm0sis/PlayIntegrityFork: Fix Play Integrity (and SafetyNet) verdicts, allowing custom fields and props

Fix Play Integrity (and SafetyNet) verdicts, allowing custom fields and props - osm0sis/PlayIntegrityFork

github.com

Sorry and - again - thanks for all ☺️
[Magisk] osm0sis:
Look under Resources here:

GitHub - osm0sis/PlayIntegrityFork: Fix Play Integrity (and SafetyNet) verdicts, allowing custom fields and props

Fix Play Integrity (and SafetyNet) verdicts, allowing custom fields and props - osm0sis/PlayIntegrityFork

github.com

🧐😉
[Magisk] Swap_File:
I feel that on Android, the best YouTube experience is still on Firefox with ublock origin, which blocks all ads, and needs no root. But I'm the weirdo that has Youtube, Chrome, and a pile of the other built in apps normally disabled on my phone.

I still use AdAway on my rooted phone for blocking other things.
[Magisk] lupastro82:
I tried both script, but this is the result (after moving file in modules folder).

So, autopif work 👍
[Magisk] CZ.Kostra:
You can use FX File Explorer to run the script.
[Magisk] lupastro82:
Why?! Work so good with termux 😅👍
[Magisk] CZ.Kostra:
Sorry. I misread your post. I thought you had a problem running the script.
[Magisk] threetwotwo:
Hello guys, I need some help/opinion. I've been using PIF for a long time and yeah it worked great until recently I have been failing device integrity. So I thought yea my FP is banned time to change it, I've tried everything including updating PIF to 15.9.4 to using playcurl to using autopif but all failed to pass device integrity. Until Ive found some random post to disable lsposed module and voila I pass device integrity again. What is weird I was using lsposed for a long time and it passed device integrity no problem, there must be a change in PI checks recently eh? So now how do I hide lsposed from the PI checks? Uninstalling it is not an option because I need it for bootloaderspoofing for my Whatsapp. Currently using Magisk Kitsune + PIF + playcurl + lsposed (zygisk). Thanks
[Magisk] :
You could also try kiwi browser, a chrome based browser that can handle chrome store addons like ublock or privacy badger.
[Magisk] Swap_File:
I used Kiwi exclusively for the last ~2 years. I switched to Kiwi when firefox disabled loading XPI addons.

Unfortunately, all chrome based browsers (kiwi included) do not support address bar hiding when accessibility applications (like AutoInput for Tasker) are installed. Firefox does not have this limitation.

Recently, Firefox for Android re-enabled adding any XPI addons you want, so I switched back.
[Magisk] intel_core_i7:
I use Revanced and find the experience to be much better than watching via a web browser. I still miss the old vanced days though, the patches that made it work might not be open source like revanced, but the stability and translation of the patches menu were much better.
[Magisk] Swap_File:
I have revanced installed (and update it regularly), but I don't like how it still sometimes pops up ads, and doesn't always seem to keep track of where I left off in a video even though I am logged in. On firefox it just works.
[Magisk] intel_core_i7:
There was an update addressing that watch history bug, you should update the app with latest patches, it works fine for me now.

There are popups here and there sometimes but not as rampant as it used to be, and sponsorblock integrations is much better than adding the extension into (i use Fennec)
[Magisk] :
Maybe you could place it somewhere more visible? I also didn't find it on github and went back to

🔧 [MODULE] Play Integrity Fix (SafetyNet fix)

PLAY INTEGRITY FIX This module tries to fix Play Integrity and SafetyNet verdicts to get a valid attestation. BEFORE YOU START: - Your ROM must be signed with a private key from maintainer, you can check with this command: unzip -l...

xdaforums.com
[Magisk] jrotaetxe:
Reinstall lsposed and everything will come back to normal.

For some reason, SELINUX breaks .
[Magisk] markfm:
It might be due to any LSPosed modules (like bootloaderspoofing).

Try disabling or removing all LSPosed modules. Do a Play Integrity check then, see if you pass without any LSPosed modules, but with LSPosed itself.

If you fail with only LSPosed, it may be that you need something related to LSPosed "no logging" (multiple people have mentioned that on Telegram).

If you do pass with just LSPosed, then turn on LSPosed modules one by one, checking Play Integrity after each. Any module that doesn't pass Device is a problem one, turn it back off and continue checking the others.
[Magisk] markfm:
For YouTube, newpipe (off of fdroid) has worked very well for me. It blocks ads, you can easily DL content if desired. If I want to comment on something it's easy to tell it to open the item in a browser (which has my YT credentials).
[Magisk] rom4ster:
theres wayyy less people there.
[Magisk] mike.s:
Can't find a new fingerprint? No problem, just talk about f'ing browsers.
[Magisk] V0latyle:
Chill. Working fingerprints are few and far between. In our internal testing, a pool of known working prints re-tested with a 4% success rate.
[Magisk] osm0sis:
Come on... Resources are resources. I can only go so far idiot-proofing the documentation while also keeping it organized. People need to read and have some common sense here.

Edit

:

Split you the difference. 🤷‍♂️🤦‍♂️

README: RIP PIFS, point out Resources using words · osm0sis/PlayIntegrityFork@f99696e

Fix Play Integrity (and SafetyNet) verdicts, allowing custom fields and props - README: RIP PIFS, point out Resources using words · osm0sis/PlayIntegrityFork@f99696e

github.com
[Magisk] fbirraque:
Good to know that at least 4% still working.

My 20 working fingerprints after the latest ban re-tested with 0% success rate.

😭
[Magisk] purgy:
I get his point though, imagine you suddenly noticed that your FP which has been reliable since December is no longer working, so you come to this thread (ofc), jump to latest page (after all, you read the op 5 times, and maybe half the thread already to get it all working in the first place), and it's all a discussion on which browser to use to watch youtube.

So you go back 10 pages, and instead it's a 2 page discussion on vape juice.

It is to be expected that fps will be hard to find. Posts relevant to PIF in the PIF thread, perhaps not so much.
[Magisk] arkzok:
When's the next ban?
[Magisk] fbirraque:
Are you anxious for it?
[Magisk] fbirraque:
My suggestion is to search for autopif.sh in this thread. That's the simplest way to get certified.

A personal pif.json now is very rare.
[Magisk] okij:
My crystal ball is on holiday, you'll have to use your own ...
[Magisk] arkzok:
yeah😰
[Magisk] sethieplayz:
So, I know how to use PixelFlasher and such to process props, but is there much point in me trying to find a working FP on public sites? Or should I start trying to stop forgetting my wallet when I leave the house
[Magisk] Nergal di Cuthah:
You can use the xiaomi.eu print (via flasher) while you look for one, they are there just rare (no, i haven't found one in my sparse amount of spare time)
[Magisk] 4sz0m:
It's always, in general, a good idea to have an alternate payment method available at hand. Unrelated to PI. Your phone's battery could die. The payment terminal could have a problem. Etc. @HippoMan probably has more ideas 😊
[Magisk] threetwotwo:
I found the culprit, thanks anyway :)

Found the culprit it is bootloaderspoofing, but what is weird is that I've been passing device integrity with this module since I installed lsposed until recently. So is there anyway that I can use this module without failing device integrity? I only need it for Whatsapp, it will kick me out of the app if I let Whatsapp know that my bootloader is unlocked. If not then I am f**ked xD
[Magisk] sethieplayz:
Yes, absolutely agree with you, I've had many issues with payment before unrelated to PI. Being caught off guard out of reception without my card is always a bit embarrassing hahaha.

Edit: please ignore if this is info the PI guy might be looking for, does anyone have pointers of where to look for props? I've been using public dumps but I assume they've mostly been bananaed
[Magisk] lupastro82:
I read every time but, sorry, this isn't very immediate (I find only after your message) 😅
[Magisk] markfm:
I believe someone reverted to an earlier version of blspoofer and things worked okay. In a Telegram IM they mentioned that v3.8 didn't work, but shifting back to v1.2 of it worked.

(I don't use that module, so perhaps there was a typo on "1.2", but that's what the IM showed)
[Magisk] BunnyPig1:
Why is WhatsApp kicking you out for an unlocked bootloader?

I'm using it daily without any issues, unlocked bootloader, rooted, not hiding WhatsApp, lsposed etc.

Never encountered this issue. I've been using it on a device only passing BASIC as well.
[Magisk] wrongway213:
Anyone who needs things immediately has two options at the point we've reached:

1. Dedicate yourself to reading, re-reading and familiarzing yourself with the intracies of this. Read everything.

2. Lock your bootloader.

The days of immediate fixes without doing work and research on your end are over - that's the only positive thing that's come from the mass ban of fingerprints.
[Magisk] HippoMan:
Yep ... two payment methods:

(1) Plastic bank cards

(2) Something that most of us only vaguely remember ...
[Magisk] Nergal di Cuthah:
Problem with WhatsApp and Bootloader Unlock

Hello I have a problem and it is that I just rooted my pixel 6pro and it turns out that the whatsapp tells me that I need the official application to verify my number, using magisk and safetynet fix and playintegrity fix the problem still...

xdaforums.com

While it works for me (see my many pleas) it doesn't for others and whatsapp faq says it doesn't work on rooted or custom rom.
[Magisk] markfm:
I do my own custom prints, Google has definitely made things "interesting". In a series of 20 factory firmware sets that I tested I ended up with one good print, so pretty close to the 4% mentioned previously.

Previously, for a given model once I got in the right area I could harvest multiple valid prints.

(Thanks to the people who nudged me to switch to a script. My "Pull_Properties.ps1" script has been getting lots of use to do the extract from build.prop and output a clean json.)

On backup payment methods, I use my Fitbit watch more than my phone.
[Magisk] lupastro82:
I've a little blog and write for my users also about tech arguments. Any time I try to be more simple at possible. Imho, isn't very immediate (in GitHub page I search for .sh and found nothing because is hidden in submenu).

Just this. No more, no less.

Anyway, I found. 👍
[Magisk] mike.s:
Hey, let's just fill the thread with off-topic, completely useless posts so we can get to 1000 pages quicker, wasting everyone's time in the process.