Has anyone tried magisk 14?
I installed it (upgraded from previous release), no issues
Updated from within magisk. Seams to work fine
Someone could install modules?
Someone was able to pass on safetynet?
Modules NO, Safetynet YES
atheart said:
Modules NO, Safetynet YES
Click to expand...
Click to collapse
Safetynet yes? How?
I don't know anything about safetynet but when I run it using magisk 14 I get
Safetynet Check Was Successful
ctsprofile: false
basicIntegrity: false
both ctsprofile and basicIntegrity have a white x in a small red circle in front of them.
Every thing including root apps work fine. I'm very pleased that magisk Hide works so my banking apps work.
scallawag said:
I don't know anything about safetynet but when I run it using magisk 14 I get
Safetynet Check Was Successful
ctsprofile: false
basicIntegrity: false
both ctsprofile and basicIntegrity have a white x in a small red circle in front of them.
Every thing including root apps work fine. I'm very pleased that magisk Hide works so my banking apps work.
Click to expand...
Click to collapse
if what you said is true then you did not pass the safetynet.
What I said is true. I still don't know what difference it makes to me.
Why would you question what I said?
> Why would you question what I said?
If SafetyNet Check is successful, basicIntegrity will be "true". But that does not mean you are lying, it could be also a bug in Magisk
romhippo.com said:
> Why would you question what I said?
If SafetyNet Check is successful, basicIntegrity will be "true". But that does not mean you are lying, it could be also a bug in Magisk
Click to expand...
Click to collapse
I checked again this morning and the same results. Must be a bug. I wish someone else would jump in and tell us there findings.
I did a little reading on SafetyNet to see what it does and than downloaded the stand alone "SafetyNet Test" app from the play store.
It said the following
"Your Moto Z2 Play Failed"
"Safety Net Request: success" (Could this be what magisk 14 is saying was successful?)
every thing else failed
I can pass safety net.
Try clearing the Magisk app cache and data (Settings->Apps->Magisk Manager->Storage then click "Clear Data"). Then open Magisk Manager, go to settings and disable then enable the Magisk Hide option. Then try the SafetyNet check again.
> "SafetyNet Request: success"
That just means, Magisk was able to "check SafetyNet" (if you don't have internet access, you won't be able to check, for example). But your device did not pass the check.
romhippo.com said:
> "SafetyNet Request: success"
That just means, Magisk was able to "check SafetyNet" (if you don't have internet access, you won't be able to check, for example). But your device did not pass the check.
Click to expand...
Click to collapse
I realize that. What I'm trying to ask is could "SafetyNet Request: success" in the "Safety Net Test" app mean the same as "Safety Net Check was successful" in Magisk.
If so that would explain why Safety Net Check in Magisk was successful and every thing else failed.
Could I check this by taking my phone offline turning Mobile Data and WiFi off and running the SafetyNet checks in both apps?
> Could I check this by taking my phone offline turning Mobile Data and WiFi off and running the SafetyNet checks in both apps?
I don't really know what you want to check? Your device failed the SafetyNet check ("ctsProfileMatch" and "basicIntegrity"). It is that simple.
https://developer.android.com/training/safetynet/attestation.html#possible-results
This really seems like an error because even though the magisk indicates that safetynet has passed, Playstore apps that are not available to root devices (for example: Netflix) are not available.
Has anyone reported this bug?
Navegante13 said:
This really seems like an error because even though the magisk indicates that safetynet has passed, Playstore apps that are not available to root devices (for example: Netflix) are not available.
Has anyone reported this bug?
Click to expand...
Click to collapse
I can see Netflix on the Play Store. Pokemon GO works too.
Guys sorry I m a little lazy.
Yes I can install all this stuff. But what about ota update?
There's no factory images on motorola. So I have no idea for the future
Crostantin said:
There's no factory images on motorola. So I have no idea for the future
Click to expand...
Click to collapse
There is one motorola stock image mirrored at https://mirrors.lolinet.com/firmware/moto/albus/official/RETAIL/
However it is not really clear for what variant this image is for. For all? Or just one?
atheart said:
I can see Netflix on the Play Store. Pokemon GO works too.
Click to expand...
Click to collapse
But I do not see.
Have you made any settings?
Related
I'm trying to use a Bank app from my country, named BT pay (Banca transilvania), and coudn't get it to work on lasted 5.1.5 rom with magisk.
I clean-installed the lasted Open Beta 14, without magisk/kerner, and safetynet checker still shows me FAILED.
I tried EssentialX Kernel + Magisk (hiding the safetynet app) and still didn't worked for me...
My Safety Net Request: fail(SafetyNetApi.AttestationRestul success == false or empty payload)
I'm i missing something ?
Wait, even though the safety net apps including magisk manager may say safety net fails, actually your safety net would be passing in real due to some update in policy by google. You have to use updated safety net apps to find correct status. Search magisk threads to know more.
Aswin08 said:
Wait, even though the safety net apps including magisk manager may say safety net fails, actually your safety net would be passing in real due to some update in policy by google. You have to use updated safety net apps to find correct status. Search magisk threads to know more.
Click to expand...
Click to collapse
lol, indeed i used a different safetynet checker, and my phone passes even with magisk, but the bank app isn't working either.. "your device may be rooted"
prologikus said:
lol, indeed i used a different safetynet checker, and my phone passes even with magisk, but the bank app isn't working either.. "your device may be rooted"
Click to expand...
Click to collapse
Well I don't understand now, i thought you where saying in previous post that safety net didn't pass. Btw, hope rechecked that you added ur bank app in magisk hide.
It may be detecting /sdcard/MagiskManager/ folder.
I don't know what happen but SafetyNet starts passing. I have rooted Moto Z3 Play, unlocked bootloader, Magisk 20.4, EdXposed 91.0 (YAHFA v0.4.6.4, updated today), a few Magisk, and EdXposed modules. Before hardware SafetyNet checks I could pay by phone. After Google forcing SafetyNet hardware attestation I could not. I accepted it because I was more concerned with control than with the possibility of paying by phone in the store.
Today morning I updated Riru - EdXposed (YAHFA) module in Magisk Manager. Then reboot. During the day I rebooted the phone once again. In the evening I ran Google Play Store to update my apps. I was surprised that Play was updating Netflix. Normally I updated it manually by downloading the apk file. Then I was testing Safety Net with Magisk, SafetyNet attest and SafetyNet test - all green. I was able to add a card to GPay. Even "attest" records in dg.db has 0, without blocking write mode. Here some screenshots.
The new update of EdXposed in the Magisk Manager passes SN, nothing new.
But John Wu (Magisk developer) said there was no way for hardware attestation on unlocked devices. Any software hiding will not work. That what he said.
QkiZMR said:
I don't know what happen but SafetyNet starts passing. I have rooted Moto Z3 Play, unlocked bootloader, Magisk 20.4, EdXposed 91.0 (YAHFA v0.4.6.4, updated today), a few Magisk, and EdXposed modules. Before hardware SafetyNet checks I could pay by phone. After Google forcing SafetyNet hardware attestation I could not. I accepted it because I was more concerned with control than with the possibility of paying by phone in the store.
Today morning I updated Riru - EdXposed (YAHFA) module in Magisk Manager. Then reboot. During the day I rebooted the phone once again. In the evening I ran Google Play Store to update my apps. I was surprised that Play was updating Netflix. Normally I updated it manually by downloading the apk file. Then I was testing Safety Net with Magisk, SafetyNet attest and SafetyNet test - all green. I was able to add a card to GPay. Even "attest" records in dg.db has 0, without blocking write mode. Here some screenshots.
Click to expand...
Click to collapse
Will gpay work, can you pay in shops?
Sent from my BASIC using Tapatalk
I added card successfully to gpay. I suppose that it will be working but I need to check. I wasn't in shop yet ?
I think that is working because evaluation type is basic.
QkiZMR said:
I added card successfully to gpay. I suppose that it will be working but I need to check. I wasn't in shop yet [emoji846]
I think that is working because evaluation type is basic.
Click to expand...
Click to collapse
When you're in the gpay app and you turn on nfc, does it say-hold to reader?
Sent from my BASIC using Tapatalk
Al765436 said:
When you're in the gpay app and you turn on nfc, does it say-hold to reader?
Click to expand...
Click to collapse
Text in Polish, but it means "move closer to the reader".
QkiZMR said:
Text in Polish, but it means "move closer to the reader".
Click to expand...
Click to collapse
Yes that means it should be working, thx
Sent from my BASIC using Tapatalk
Al765436 said:
Yes that means it should be working, thx
Click to expand...
Click to collapse
I confirm payments works fine.
QkiZMR said:
I don't know what happen but SafetyNet starts passing.
Click to expand...
Click to collapse
I second you mate ( see it here ) :good:
Hardware attestation hack to basic attestation is needed, I gotta say.
serajr said:
I second you mate ( see it here ) :good:
Hardware attestation hack to basic attestation is needed, I gotta say.
Click to expand...
Click to collapse
I know. I said it in my third post. The best thing is that I not needed to clear any google play/google services data. It just began working ?
Hi all,
Got a new phone and finally decided to see if I could root the old Pixel 2 XL. It's unlocked, bought directly from Google. Never before unlocked bootloader until now.
It was flashed to factory Android 11 2020-12, and rooted from there. Magisk 21.1 beta was installed from zip while booted into TWRP 3.0.4, as advised in this thread. The latest Play System Update (Oct 5, 2020) was automatically installed while I was messing around afterwords.
I confirmed root access thru a checker and Termux, which is pretty neat! Hadn't rooted a device in a long time!
Unfortunately, device certification fails in Play Store, Magisk SafetyNet check and being unable to add a credit card to Google Pay. Magisk says basicIntegrity passes, but CTSprofile fails.
Things I've tried, mostly from this exhaustive guide:
Hidden Magisk Manager
Enabled MagiskHide, rebooted
Remove Magisk zip from storage
Lock bootloader again, rebooted
Clear app storage for Play store and Play services, rebooted
Disable USB debugging
Disable Play Protect scanning
Looked over XDA boards, Magisk changelog/documentation/guides
Things I haven't done (yet?):
Spoofing device fingerprint. I wouldn't expect this to be necessary, since it's actually authentic! But maybe there's more to it that I don't understand?
Start over from scratch, with Magisk Canary build - doesn't appear to be any improvements to MagiskHide according in current release notes
Is this possible to achieve?
composition said:
Is this possible to achieve?
Click to expand...
Click to collapse
SafetyNet:Magisk and MagiskHide Installation and Troubleshooting guide
www.didgeridoohan.com
Google I believe is using hardware-backed CTS profiling, which Magisk cannot circumvent. Your only chance of passing CTS is to hope Google ISN'T using the hardware-backed version, so you can employ one of the workarounds I gave in the link above.
There is a setting in magisk manager that let's you switch the attestation check. I'm having a brain fart as to where it is atm but I'll poke around and if/when I find it, I'll reply again.
Larzzzz82 said:
There is a setting in magisk manager that let's you switch the attestation check. I'm having a brain fart as to where it is atm but I'll poke around and if/when I find it, I'll reply again.
Click to expand...
Click to collapse
Apparently we're both having brain farts. I didn't even think there was such a setting. Then again, I don't use Google Pay.
If you rooted using the method on this forum, and your Google Pay app was recently upgraded to Google Wallet, you will probably find that it doesn't work anymore. Even if you have the Universal SafetyNet Fix installed and SafetyNet shows as passing, the new payment app will still detect your device as rooted. This is because it now uses Google Play Integrity instead of SafetyNet.
There's a lot of discussion in this thread. But the short version is, if you want to get payments working again:
1. Install MagiskHide Props Config.
2. Follow the instructions on that page to change your device fingerprint to Samsung Galaxy S21 (A11).
That's it! Some people in the thread also cleared data for Google Play Services but I don't think I did. Also in that thread is a verification app (first version, official version) for Google Play Integrity that you can use to make sure your device fingerprint setting is correct.
So far I haven't noticed any side effects from changing the fingerprint. I was unable to receive any SMS messages after first changing, but I rebooted a second time and that issue went away.
Just install safetynet-fix-v2.3.1-MOD.zip in Magisk. That worked on my OnePlus Nord CE (EU).
Vattu said:
Just install safetynet-fix-v2.3.1-MOD.zip in Magisk. That worked on my OnePlus Nord CE (EU).
Click to expand...
Click to collapse
Yeah this thread is now out of date. The updated safetynet fix is a much better option now.
You don't need just the safetynet module. You need Shamiko along that.
So latest Safetynet + Shamiko 0.5.2 (the latest version right now) and you're all set. You gotta whitelist the banking apps you use and they'll work perfectly fine. These 2 were enough to allow my preferred ridiculous banking app to work without an issue, without any other modules or tweaking and such.
dragos281993 said:
You don't need just the safetynet module. You need Shamiko along that.
Click to expand...
Click to collapse
You only need Shamiko if you use LSposed, right? I don't use LSposed and it's been enough for me to put all of my annoying apps on the Magisk denylist.
aurny said:
You only need Shamiko if you use LSposed, right? I don't use LSposed and it's been enough for me to put all of my annoying apps on the Magisk denylist.
Click to expand...
Click to collapse
No. I only had Magisk installed with Zygisk turned on. I first installed Safetynet Fix then Shamiko. The first module wasn't enough for my preffered banking app to not detect that the bootloader was unlocked. Shamiko fixed that. I simply installed it as a module in Magisk
Thanks, good to know. I haven't had that issue yet but I'll remember this in case I need it in the future!
aurny said:
If you rooted using the method on this forum, and your Google Pay app was recently upgraded to Google Wallet, you will probably find that it doesn't work anymore. Even if you have the Universal SafetyNet Fix installed and SafetyNet shows as passing, the new payment app will still detect your device as rooted. This is because it now uses Google Play Integrity instead of SafetyNet.
There's a lot of discussion in this thread. But the short version is, if you want to get payments working again:
1. Install MagiskHide Props Config.
2. Follow the instructions on that page to change your device fingerprint to Samsung Galaxy S21 (A11).
That's it! Some people in the thread also cleared data for Google Play Services but I don't think I did. Also in that thread is a verification app (first version, official version) for Google Play Integrity that you can use to make sure your device fingerprint setting is correct.
So far I haven't noticed any side effects from changing the fingerprint. I was unable to receive any SMS messages after first changing, but I rebooted a second time and that issue went away.
Click to expand...
Click to collapse
Thank you very much, it worked perfectly.
This actually worked, thank you!
I have unlocked the bootloader and rooted my OP11 and am no longer able to run Netflix on my device. I am aware that this appears to be a known issue in some cases. I have tried hiding the Magisk app, downloading a new APK from APKMirror all to no avail. In the Google Play store, it says that the app won't work with my device. It's currently working fine on my OP8 Pro, which is also rooted with an unlocked bootloader.
Any suggestions on how to get it wokring? Thanks!
Have you flashed the universal safenet fix and hide root for netflix ?
azsl1326 said:
I have unlocked the bootloader and rooted my OP11 and am no longer able to run Netflix on my device. I am aware that this appears to be a known issue in some cases. I have tried hiding the Magisk app, downloading a new APK from APKMirror all to no avail. In the Google Play store, it says that the app won't work with my device. It's currently working fine on my OP8 Pro, which is also rooted with an unlocked bootloader.
Any suggestions on how to get it wokring? Thanks!
Click to expand...
Click to collapse
ChrisFeiveel84 said:
Have you flashed the universal safenet fix and hide root for netflix ?
Click to expand...
Click to collapse
It does not work :/
regards
q.
qriozum said:
It does not work :/
regards
q.
Click to expand...
Click to collapse
Test magsik delta canary (with magsik hide ) and the safenetfix
On my op9p it works
ChrisFeiveel84 said:
Test magsik delta canary (with magsik hide ) and the safenetfix
On my op9p it works
Click to expand...
Click to collapse
But here we talk about OP11 and not about OP9Pro.
I have a rooted and unlocked bootloader side by side by side, despite this "Netflix" works perfectly at the "L1" level.
On the other side I have OP11 and "Netflix" when trying to run he sent to Googleplay and there is red warning that he would not be on my device. After uninstalling and downloading from Apkmirror, the instalotra, only the "Netflix" logo is displayed and it hangs like that
So I do not suggest to other users that "after all, it works on OP8PRO, it also has to".
qriozum said:
But here we talk about OP11 and not about OP9Pro.
I have a rooted and unlocked bootloader side by side by side, despite this "Netflix" works perfectly at the "L1" level.
On the other side I have OP11 and "Netflix" when trying to run he sent to Googleplay and there is red warning that he would not be on my device. After uninstalling and downloading from Apkmirror, the instalotra, only the "Netflix" logo is displayed and it hangs like that
So I do not suggest to other users that "after all, it works on OP8PRO, it also has to".
Click to expand...
Click to collapse
that the google playstore says that netflix does not work with your device is usually because the root is not hidden from google and co (that's why i use magisk delta which also has magiks hide in it)
ChrisFeiveel84 said:
that the google playstore says that netflix does not work with your device is usually because the root is not hidden from google and co (that's why i use magisk delta which also has magiks hide in it)
Click to expand...
Click to collapse
What do I miss in "Hide applications"?
This is a drop from OP11:
Chris, you finally have OP11 or are you still writing about acting on OP9Pro?
qriozum said:
What do I miss in "Hide applications"?
This is a drop from OP11:
Chris, you finally have OP11 or are you still writing about acting on OP9Pro?
Click to expand...
Click to collapse
With magisk delta ? Or stock magisk ?
Stock magisk have no hide
magisk delta comes with magisk hide and works a little different than stock magisk
And have you q china op11 ?
There's a new app for safetynet that needs to be added to magisk hide or magisk deny list.
It's "Google Play protect service".
Then it's needed to clear data for it and also for play store and play services and reboot.
jes0411 said:
There's a new app for safetynet that needs to be added to magisk hide or magisk deny list.
It's "Google Play protect service".
Then it's needed to clear data for it and also for play store and play services and reboot.
Click to expand...
Click to collapse
Where can you get that app? I don't see it listed in Fox's Magisk Modules App? Thanks!
azsl1326 said:
Where can you get that app? I don't see it listed in Fox's Magisk Modules App? Thanks!
Click to expand...
Click to collapse
That app installs itself.
It's a new app Google implemented for integrity check (safetynet).
It should be added to magisk deny list/hide list.
Package name is com.google.android.odad
jes0411 said:
That app installs itself.
It's a new app Google implemented for integrity check (safetynet).
It should be added to magisk deny list/hide list.
Package name is com.google.android.odad
Click to expand...
Click to collapse
Thanks!
I didn't see it listed in the deny list in Magisk, so I added it via terminal for the MM I have installed that does the same thing. It just loads the splash screen and then stays stuck. I have the Magisk App hidden as well. I cleared data in both NF and Play Store. Still no luck with NF.
Mine works, but there is a bit of tinkering involved. I followed a guide from 10pro. You must use the shamiko magisk module, then hide magisk app and add all of Google play services to denylist. You then have to download a specific Netflix APK from that thread. I will try to find and attach it in an edit. Let me know if this works, I'm not 100% sure on the steps because I cloned my files from op10t and so my Netflix worked immediately.
azsl1326 said:
Thanks!
I didn't see it listed in the deny list in Magisk, so I added it via terminal for the MM I have installed that does the same thing. It just loads the splash screen and then stays stuck. I have the Magisk App hidden as well. I cleared data in both NF and Play Store. Still no luck with NF.
Click to expand...
Click to collapse
By seeing the NF error message, i suppose you have your bootloader unlocked and DRM info apk still shows L1 but a strange thing you will find on DRM info is system id just above L1 status and that is abnormal almost 8-9 digits of system id and that is causing your Netflix not to recognised your device and revoking the licence, i don't know the fix if you see others who has Netflix working with L1 he has system id of length 5 that is listed in drm devices list
shadowjynxs said:
By seeing the NF error message, i suppose you have your bootloader unlocked and DRM info apk still shows L1 but a strange thing you will find on DRM info is system id just above L1 status and that is abnormal almost 8-9 digits of system id and that is causing your Netflix not to recognised your device and revoking the licence, i don't know the fix if you see others who has Netflix working with L1 he has system id of length 5 that is listed in drm devices list
Click to expand...
Click to collapse
You can indeed be right.
In OP8Pro where Netflix works "L1" and a 5-digit "System-Id" ID. But in OP11 despite "L1" I have a 1-digit "System-Id" and Netflix does not work.
In addition, I notice that in the "Clearkey CDM" section as "Version" in OP8Pro is "1.2" but in OP11 there is already the phrase: "aidl-1".
jes0411 said:
It should be added to magisk deny list/hide list.
Package name is com.google.android.odad
Click to expand...
Click to collapse
There is no such package in my system :/
Of course, in "Hide-App" Magisk marked "system applications" and "OS applications".
qriozum said:
You can indeed be right.
In OP8Pro where Netflix works "L1" and a 5-digit "System-Id" ID. But in OP11 despite "L1" I have a 1-digit "System-Id" and Netflix does not work.
In addition, I notice that in the "Clearkey CDM" section as "Version" in OP8Pro is "1.2" but in OP11 there is already the phrase: "aidl-1".
Click to expand...
Click to collapse
Yes the same issue wan in OnePlus 9 pro and it was fixed in firmware update but then L1 dropped to L3 and got 5 digit system id then Netflix is opening but lost L1
qriozum said:
There is no such package in my system :/
Of course, in "Hide-App" Magisk marked "system applications" and "OS applications".
Click to expand...
Click to collapse
I got my OnePlus 11 yesterday and rooted with magisk delta canary. I can confirm that app is not here
qriozum said:
You can indeed be right.
In OP8Pro where Netflix works "L1" and a 5-digit "System-Id" ID. But in OP11 despite "L1" I have a 1-digit "System-Id" and Netflix does not work.
In addition, I notice that in the "Clearkey CDM" section as "Version" in OP8Pro is "1.2" but in OP11 there is already the phrase: "aidl-1".
Click to expand...
Click to collapse
I think that clearkey cdm is the problem.
I can pass safetynet, drm info shows L1, but I have that "aidl-1"
The cause of the problem is the 'TEE' hardware.
Because current Android 13 phones come with a hardware "TEE" and oppo disables the "TEE" when you unbootlock. If lock The BootLoader will then recover.
Similar to Samsung's unlock logic，The difference is that oppo can be restored.
Solution:
1. Lock the BootLoader
2. The 'TEE' hardware authentication is returned to the software level, but the DRM is changed to L3.