ElderDrivers / EdXposed

Elder driver Xposed Framework.
https://edxp.meowcat.org/
GNU General Public License v3.0
5.4k stars 624 forks source link

[Announcement] No longer allowed to submit issues about SafetyNet #500

Closed MlgmXyysd closed 4 years ago

MlgmXyysd commented 4 years ago

Reason:

Google updated SafetyNet check

see: https://twitter.com/topjohnwu/status/1237830555523149824

The SN test in Magisk Manager is technically not a proper attestation. Proper SafetyNet checks will verify results on a remote server, not on device which can be manipulated by code injection frameworks

More details: https://twitter.com/topjohnwu/status/1245956080779198464 https://t.me/EdXposed/71

Issues submitted about SafetyNet will be closed directly

enetec1 commented 4 years ago

On my Moto Z2 Force with stock Pie some days ago I suddenly got both CTS & integrity fail, triggered by EdXposed (tested). I was on build 4510, but 4523 failed too. SafetyPatch failed with startup error message ("a problem with device... ") too. Updated to EdXposed canary build 4543 solved issue at all, SafetyNet check fully passed and Google Pay working again! Great work guys.... ;)

second2050 commented 4 years ago

To anyone who disabled EdXposed but still fails SafetyNet: You may need to delete the data of "Google Play Services" and "Google Play Store". They seem to cache something like an "had (Ed)Xposed installed" flag which needs to be reset to pass SafetyNet again.

Justsnoopy30 commented 4 years ago

I recommend re-allowing safetynet issues because Google has had their changes reverted for months and we are all passing again. In addition, EdXposed is causing SafetyNet to fail which passes without EdXposed.

Justsnoopy30 commented 4 years ago

EdXposed is causing both ctsProfile and even basicIntegrity to fail. I hope this is fixed.

ghost commented 4 years ago

This may sound crazy... but is it possible EdXposed somehow flips a switch that causes SafetyNet to never ever pass again? I'm writing this because after installing EdXposed on my phone, it was failing every single time with Response signature validation failed even if I did everything I could think of (disabling the module, enabling Magisk Core and even uninstalling Magisk altogether). It's not until I did a wipe and reinstalled both my ROM and Magisk without installing EdXposed afterwards that the issue went away... I know it's really strange but I did the same exact things both times except I didn't install EdXposed

crooowned commented 4 years ago

I can confirm what @zacchi4k mentioned

jimmy200340 commented 4 years ago

same here. install EdXposed lead to Response signature validation fail

Justsnoopy30 commented 4 years ago

You can fix that after uninstalling/disabling EdXposed by clearing the data of Google Play Services by the way.

csin86 commented 4 years ago

Has anyone tried SafetyPatcher, this module is new to me, will it work? I'm getting basic integrity and CTS profile match failing due to edxposed on the latest canary build 0.5.0.0

Suriyavi commented 4 years ago

Rooting divaice

KaMyKaSii commented 4 years ago

Hello guys. I am managing to pass the safetynet check using the last Canary of Edxposed YAHFA. I'm running in blacklist mode, the only different configuration I made was to add all apps with "google" in the package name to the blacklist :p Maybe someone more patient can add them one by one (and reboot) to find out which one is to blame, it’s probably not any of the Google user apps but I checked them out just because I’m paranoid Screenshot_20200701-145011397 Screenshot_20200701-144615626 Screenshot_20200701-144707526 Screenshot_20200701-144716266 Screenshot_20200701-144629325 Screenshot_20200701-144651449 Screenshot_20200701-144700579

pannal commented 4 years ago

Yeah, the latest canary works for me as well. The device policy in my work profile still detects something, though, I don't know how. Any pointers?

Edit: YAHFA fixed that issue in the work profile. SandHook failed immediately.