chiteroman / PlayIntegrityFix

Fix Play Integrity (and SafetyNet) verdicts.
https://xdaforums.com/t/module-play-integrity-fix-safetynet-fix.4607985/
GNU General Public License v3.0
5.01k stars 266 forks source link

No device integrity #283

Closed non-bin closed 7 months ago

non-bin commented 7 months ago

I'm on 15.9.3, and I've tried probably 20 different PIFs. I'm on Lineage, and uname -a says Linux localhost 4.14.336-gfe61ffb52659 #1 SMP PREEMPT Thu Feb 8 06:19:35 UTC 2024 aarch64 Android so I don't think that's the problem

blackwind commented 7 months ago

There's definitely something fishy going on right now. The bundled fingerprint works, but won't in a day or two when Google gets to it, and there isn't a single other fingerprint I can find online that passes device integrity. I, too, have been working on this for the past several hours. Is anyone still having success?

non-bin commented 7 months ago

You're right, I deleted PIF.json and it's passing, but I'm sure you're right that it'll get blocked

VisionR1 commented 7 months ago

Yeah, Google block lot of Fingerprint in 29 February. The 15.9.3 have FP hardcoder inside from Xiaomi.eu

HarriBuh commented 7 months ago

Same here. I was doing fine with some random FP until the latest update from Google came in..now, my Pixel won't get any valid FP any more.

VisionR1 commented 7 months ago

Same here. I was doing fine with some random FP until the latest update from Google came in..now, my Pixel won't get any valid FP any more.

Until now the strange is the FP by Xiaomi.eu still work

Fede2782 commented 7 months ago

About 8000 pifs have been banned the 28th of February. Currently Xiaomi.eu pif is working but this story will end soon when we will run out of fingerprints

blackwind commented 7 months ago

How is this possible? What about those using phones that actually bear those fingerprints?

Fede2782 commented 7 months ago

How is this possible? What about those using phones that actually bear those fingerprints?

Some old phones lost Play Certification but most of them still pass when the bootloader is locked since the ban is only from passing without locked bl

non-bin commented 7 months ago

How is this possible? What about those using phones that actually bear those fingerprints?

I'm just repeating what someone else said, but apparently not. There must be some imperfection in the spoofing method we use.

I'm currently passing device integrity, on Evolution X ROM, Chiteroman, and PlayCurl Wallet isn't working but PlayCurl says it can take 24 hours for wallet to work again

EDIT: I just looked through the source code for PlayCurl, and it looks like it's just a wrapper for the pickaprint script, which the maintainer seems to have a abandoned in light of the bans. Maybe it's my ROM? It has a safety net fix built in which didn't work, but maybe it's using a PIF from that?

non-bin commented 7 months ago

I think what we actually need is an open source pay app. It's not like the card company is worried that we'll reverse engineer their app, if they were they would have pulled out of Google pay ages ago. Is there any reason Google doesn't want it to work other than toddler voice "it's my game, I make the rules, and you're cheating!"

non-bin commented 7 months ago

Some old phones lost Play Certification but most of them still pass when the bootloader is locked since the ban is only from passing without locked bl

Do you know why we can't run root with a locked bootloader? So far all I understand is "it doesn't work"

Fede2782 commented 7 months ago

Some old phones lost Play Certification but most of them still pass when the bootloader is locked since the ban is only from passing without locked bl

Do you know why we can't run root with a locked bootloader? So far all I understand is "it doesn't work"

Because locked bootloader devices want that all the software installed is signed by the OEM. When rooted at least one partition is modified and this would not allow to run with locked bl. Some devices like Google Pixel allow users to run a custom software with or without root even with the locked bootloader by setting a custom signature. Someone should try to pass play certification on a locked Pixel with root

non-bin commented 7 months ago

Someone should try to pass play certification on a locked Pixel with root

I have a pixel 4a and I'd be happy to try if I knew how, do you have any tips on where to start?

HarriBuh commented 7 months ago

@non-bin I've been using PlayCurl, too and for the first time in months it won't give me valid fps. I've been given around 10 new fps by now and none of them works.

non-bin commented 7 months ago

@non-bin I've been using PlayCurl, too and for the first time in months it won't give me valid fps. I've been given around 10 new fps by now and none of them works.

It's gonna stay broken for a while unfortunately. Anyone have any idea of the next steps? @chiteroman

Fede2782 commented 7 months ago

@non-bin I've been using PlayCurl, too and for the first time in months it won't give me valid fps. I've been given around 10 new fps by now and none of them works.

PlayCurl used to use pifs from TheFreeman but all of them have been banned. Now it uses the pif from xiaomi.eu

HarriBuh commented 7 months ago

@Fede2782 ...which won't work either, as it seems. This is baaaad.

Fede2782 commented 7 months ago

@Fede2782 ...which won't work either, as it seems. This is baaaad.

For me it is working the one of motorola from xiaomi.eu. for obvious reasons i won't share here the fp. In any case because of this i'm going to return to stock on my device because soon we won't be able to pass playintegrity anymore

HarriBuh commented 7 months ago

Is it bearable to ask you how one does get one from this source? I've only done it with playcurl and it's automated there.

Fede2782 commented 7 months ago

Is it bearable to ask you how one does get one from this source? I've only done it with playcurl and it's automated there.

I downloaded the apk and extracted the file of the values fps from it. By the way it has been banned right now

VisionR1 commented 7 months ago

Is it bearable to ask you how one does get one from this source? I've only done it with playcurl and it's automated there.

I downloaded the apk and extracted the file of the values fps from it. By the way it has been banned right now

You mean now is banned the FP Motorola by Xiaomi.Eu ?

Fede2782 commented 7 months ago

Is it bearable to ask you how one does get one from this source? I've only done it with playcurl and it's automated there.

I downloaded the apk and extracted the file of the values fps from it. By the way it has been banned right now

You mean now is banned the FP Motorola by Xiaomi.Eu ?

Yes. For me it is not passing anymore. Until a few hours ago it worked

VisionR1 commented 7 months ago

Is it bearable to ask you how one does get one from this source? I've only done it with playcurl and it's automated there.

I downloaded the apk and extracted the file of the values fps from it. By the way it has been banned right now

You mean now is banned the FP Motorola by Xiaomi.Eu ?

Yes. For me it is not passing anymore. Until a few hours ago it worked

Strange, for me still pass 2/3, just now test it.
Maybe the signal for block it, it hasn't come to me yet 😂

non-bin commented 7 months ago

Google pay "contactless setup" says I don't meet security standards, but I've just paid twice three times and it worked

HarriBuh commented 7 months ago

markup_1000006553.png

I just got a valid pass from FP_downloader. It's using a Motorola fp.

Fede2782 commented 7 months ago

markup_1000006553.png

I just got a valid pass from FP_downloader. It's using a Motorola fp.

Lol, is the same as Xiaomi.eu. it won't last many days

rom4ster commented 7 months ago

Some old phones lost Play Certification but most of them still pass when the bootloader is locked since the ban is only from passing without locked bl

Do you know why we can't run root with a locked bootloader? So far all I understand is "it doesn't work"

Because locked bootloader devices want that all the software installed is signed by the OEM. When rooted at least one partition is modified and this would not allow to run with locked bl. Some devices like Google Pixel allow users to run a custom software with or without root even with the locked bootloader by setting a custom signature. Someone should try to pass play certification on a locked Pixel with root

That wont work it will change it to self signed which will pass network integrity checks fs