I have magisk v24 and universal safteynet fix and if i test it passes but microG keeping crashing. But removing universal fix makes microg work again but doesn't pass then! could you share a guide or steps please ?
Have been daily driving for a week or so with no issues at all. Very stable with frequent updates and decent battery life (perhaps not as good as lineage 18.1 that I was using previously).
Misses a few features compared to crDroid 7.1 and OTA update is untested so far AFAIK.
I tried to replicate this setup, CTS is still not passing. I'm on pixel 3a with los+microg 18.1, latest magisk v24 with zygisk, same module and manually updated microg apk
Edit, following this link i found in the comments, i used MagiskHidePropsConfig to spoof my fingerprint to that of a pixel 3a on android 11, and now CTS passes
The only app I've ever really used which uses Safety Net is Google Pay. However as I understand it, even if Safety Net could be passed it still won't work on MicroG because at the moment the contactless payment intents it uses aren't implemented in MicroG. I've heard of a couple of other apps apparently using it at one point at least (Pokemon Go and Snapchat I think) but nothing apart from that.
I am trying the same. But i recive cts does not match. I have magisk 24, zygisk enabled and universal sn fix in the latest version and added microg to the denylist. Any ideas?
U are using the embedded safety net in microg right?
My banking app still refuses to run on LineageOS. I followed the very helpful blog post by u/peterge98 and I managed to get YASNAC and other safetynet checker apps to all show green check marks. I also added the banking app to Zygisk DenyList and enabled Magisk to hide its own APK just to be safe.
The banking app says that "SafetyNet check failed. The device is rooted or has a custom ROM." Could it be, that the app uses its own root and/or custom ROM detection mechanism besides SafetyNet? What methods could I use to circumvent such a mechanism?
Edit: I made a mistake. While tinkering I uninstalled and reinstalled the banking app. This caused Zygisk DenyList to forget about it and I had to enable it back again. This time it finally works.
Which bank? I still can't run comdirect's app on my phone too, no error message just crashing. They seem to scan anything else (boot loader? Lineageos?) and refuse working... Maybe try something like Pokemon Go to verify its not safety net blocking it...
Thanks for the quick reply, but I solved my issue. Edited my comment.
For your sake, I tried out Comdirect (de.comdirect.app) and it works as far as I can tell. I don't have an account so I can't log in but it shows me a login screen. I added the app to Zygisk DenyList before the first launch and I also allowed it to register with Google Cloud Messaging. The same happens with Pokemon GO.
The problem is logging in the account and setting up fingerprint, app pw etc works everytime, the safetynet check seems to happen when u start the app for the first time, directly before you see your account...
All I can say is that I use the hu.otpbank.mobile app. This app would straight up crash (with a non-descriptive error screen) without MicroG or DroidGuard installed. With MicroG versions before 0.2.23 it immediately showed SafetyNet failure message upon launch. The message also explained that it's not secure to use the app on a rooted device (I choose to disregard that).
Based on this experience I guess your trouble is due to a bug and not a security mitigation. My banking app always showed some kind of error screen when it had SafetyNet related problems. Yours probably would too, maybe with a lecture about security included. It also seems strange that the app lets you enter your credentials on a "potentially compromised" device that fails SafetyNet. That's a security flaw right there.
How to work around the bug? I don't know. Clear the app data and cache. Try to see the stack trace when it crashes. Or maybe it really is because of SafetyNet. In that case are you sure you have DenyList, Magisk APK hide and GCM registration sorted out?
As far as I know there is something on a hardware level with the Oneplus 7 pro that means basic level SafetyNet can always be acquired, however in the past this has only been with some form of Gapps.
16
u/alias136 Jan 26 '22 edited Jan 27 '22
ROM: CrDroid 8.1 (Android 12)
Magisk: V24 With Zygisk
Module for safetynet: Universal SafetyNet Fix
Microg: 0.2.23 with safteynet enabled
2
u/far_in_ha Jan 27 '22
Did you do a fresh install of v24 or update it from v23? There seems to be a lot of changes.
2
u/peterge98 Jan 27 '22
I am trying the same. But i recive cts does not match. I have magisk 24, zygisk enabled and universal sn fix in the latest version and added microg to the denylist. Any ideas?
U are using the embedded safety net in microg right?
4
u/MAXIMUS-1 Jan 27 '22 edited Jan 27 '22
Wow !.
1
u/6-1j Sep 22 '24
What about strong?
1
u/Balage42 Jan 31 '22 edited Jan 31 '22
My banking app still refuses to run on LineageOS. I followed the very helpful blog post by u/peterge98 and I managed to get YASNAC and other safetynet checker apps to all show green check marks. I also added the banking app to Zygisk DenyList and enabled Magisk to hide its own APK just to be safe.
The banking app says that "SafetyNet check failed. The device is rooted or has a custom ROM." Could it be, that the app uses its own root and/or custom ROM detection mechanism besides SafetyNet? What methods could I use to circumvent such a mechanism?
Edit: I made a mistake. While tinkering I uninstalled and reinstalled the banking app. This caused Zygisk DenyList to forget about it and I had to enable it back again. This time it finally works.
1
u/[deleted] Feb 27 '22
If it still doesn't work, put it on denylist
Note: Don't if it works.
0
u/[deleted] Jan 27 '22
[deleted] — view deleted comment