Play Protect - HTC U11 Questions & Answers

Hi guys, I’ve been reading a lot of articles regarding a new feature that has been introduced into Play Services which checks if the bootloader is unlocked and It wont let you run banking apps or downloading (from Play Store) apps that require DRM checks like Netflix or Prime Video (in case you sideload those apps they will run but only in SD mode).
I use magisk to hide that my booloader status with magisk hide, however they say that this will not be enough with this new feature, and it raises one question for me Can I relock my bootloader? or once a I unlock it, it remains tampered so even if I manage to relock it it will be detected by google play.
P.S: my phone hasn’t been detected YET, so I’m asking for the future.
Edit: link to the article https://www.xda-developers.com/magisk-no-longer-hide-bootloader-unlock-status

Related

[Solved] EE UK (EVR) 5.1.1 installation of non-play store apps (unknown sources)

Since the EE Galaxy S6 firmware upgrade to 5.1.1 I have not been able to install (or update) apps from "unknown sources".
I don't use the Play store at all - I use F-Droid - so this means I cannot use F-Droid as a package management tool!
The "allow unknown sources" setting still exists and is enabled, but all installs or updates just hang after confirming the requested permissions...
Has anyone else noticed this problem, or might know of a way to rectify this situation?
Thanks
im on the same firmware and have had no issues installing unkown sources so it should be working
I have indeed made the assumption that the firmware upgrade is the root cause of this problem ... could the upgrade be a pure co-incidence? Stranger things have happened!
I have no idea what else could be causing this, though.
geebotron said:
I have indeed made the assumption that the firmware upgrade is the root cause of this problem ... could the upgrade be a pure co-incidence? Stranger things have happened!
I have no idea what else could be causing this, though.
Click to expand...
Click to collapse
I have finally got to the root of this! IT's a little obscure but I will document it here in case it helps anyone else.
Being an F-Droid user and not having a google account on my android phone I had disabled the Google Play Store app. Quite reasonably I thought, as not having a Google account means it isn't possible to use the Play store.
BUT ... when you set the flag to allow "non-market applications" (as you must to use F-Droid) whenever you install a (non-market) app a nag dialog box would pop up asking if I wanted Google to check the validity of these apps. If you choose "decline" the nag box appears on the next installation. Only if you accept does the nag box leave you alone.
I had previously caved in and allowed google to check the apps (annoyingly there was no "decline and never ask me again" option on the nag screen). After this, I had disabled the Play Store.
After the upgrade presumably the Play store stayed in a disabled state but the nag flag seemed to be reset.
So it wanted to nag me but the app that did the nagging was disabled, so it just hung at that point in the installation.
Re-enabling the Play Store allowed the nag screen again and thus the installation completed. :good:

Question F-droid and the Galaxy A326U

Hi I have this galaxy A32 5g here and I installed the F- Droid apk. Installed fine but when I go to download ANY content I get a error I haven't seen before (shown in picture). I go to change the install apps from unknown sources, and it's not there. Every other so I've tried, install apps from unknown sources is there. I have a galaxy S8 that I have no problem using F- Droid on. Anyone else? Any fix. (Can this bootloader really be unlocked) ..
Thanks!
Random_pH
Bootloader can be unlocked depending on your current firmware version to check go to
Settings , About Phone , Software Information and take a look at the build number.
The number in the last characters should be a 1 ,2 or a 3. If its higher then those numbers then there is no current unlock for it
Ry Knowledge said:
Hi I have this galaxy A32 5g here and I installed the F- Droid apk. Installed fine but when I go to download ANY content I get a error I haven't seen before (shown in picture). I go to change the install apps from unknown sources, and it's not there. Every other so I've tried, install apps from unknown sources is there. I have a galaxy S8 that I have no problem using F- Droid on. Anyone else? Any fix. (Can this bootloader really be unlocked) ..
Thanks!
Random_pH
Click to expand...
Click to collapse
My locked bootloader A326U is on build number 1AUxx. I disabled as much as possible (google & samsung apps & services) before adding a sim card or wifi for the first time. I did the ADB & Developer Options update blocking first so I can unlock the bootloader in the future if new roms are ever develop for it. Would love a GrapheneOS version for it. But it doesn't seem that is a possibility anytime soon.
I was really surprise how much stuff specially google services & the like I was able to Uninstall or Disable outright. Using F-Droid & Aurora Store I've been able to install & use 99% of current apps I was using before on my prior Z981. The only App that has not gotten past the nag about google services after installation has been the Little Ceasers app. Every other app that nags about google services still lets you continue using the app without it. I just silence the google services nag for each app so my notifications stop ringing over an over. I might make a walkthru of what I did later but it was nothing advanced. Just took the time to go thru each app & service & see which it would let me disable or uninstall.
Regarding the app you mentioned. I was just able to install that app from F-Droid it it runs perfectly. No errors. So not sure if the problem might be the wifi, cell or any security app you might have install that might be causing that problem. Installs & boots up perfectly here. I would recommend you redownload & reinstall F-Droid from their main site again.
Btw, I am on F-Droid v1.13.1 version.
I don't know the answer to your question but I do want to mention there are multiple F-Droid app clients that do the same things as does F-Droid, only they're designed to do it much better (using the same repositories as does the F-Droid app).
FOSS Aurora Droid F-Droid replacement client web page
Aurora Droid on F-Droid
AuroraDroid on GitLab

Question Netflix isn’t compatible with my device

Hey guys,
so i did a downgrade from C.05 to C.04 (EU) with BL and now after installing everything, Netflix is the only one needed to update in Play Store but is unable to. Tried to turn it off since it was a pre-installed app and it still was shown in PS. I even used DRM app to check my Widevine, whether that’s the problem but it’s L1 (so that should not be it imo). I’m not using Netflix these days, but it’s so that i don’t have to bother in the future if I’d want to watch. And I know I can probably find some file on the internet and install it, but it’s annoying to see it in PS. Anyone knows how to fix it?
Thanks.
EDIT: Realised i needed a Google Play Certificate, which i didn’t have and i just relocked the bootloader and everything’s fine now
Herinek said:
Hey guys,
so i did a downgrade from C.05 to C.04 (EU) with BL and now after installing everything, Netflix is the only one needed to update in Play Store but is unable to. Tried to turn it off since it was a pre-installed app and it still was shown in PS. I even used DRM app to check my Widevine, whether that’s the problem but it’s L1 (so that should not be it imo). I’m not using Netflix these days, but it’s so that i don’t have to bother in the future if I’d want to watch. And I know I can probably find some file on the internet and install it, but it’s annoying to see it in PS. Anyone knows how to fix it?
Thanks.
Click to expand...
Click to collapse
Officially Netflix don't support Realme.
Check Here :Netflix HDR Support List
Herinek said:
Hey guys,
so i did a downgrade from C.05 to C.04 (EU) with BL and now after installing everything, Netflix is the only one needed to update in Play Store but is unable to. Tried to turn it off since it was a pre-installed app and it still was shown in PS. I even used DRM app to check my Widevine, whether that’s the problem but it’s L1 (so that should not be it imo). I’m not using Netflix these days, but it’s so that i don’t have to bother in the future if I’d want to watch. And I know I can probably find some file on the internet and install it, but it’s annoying to see it in PS. Anyone knows how to fix it?
Thanks.
Click to expand...
Click to collapse
in the playstore app, is your device certified by play protect ?
Herinek said:
Hey guys,
so i did a downgrade from C.05 to C.04 (EU) with BL and now after installing everything, Netflix is the only one needed to update in Play Store but is unable to. Tried to turn it off since it was a pre-installed app and it still was shown in PS. I even used DRM app to check my Widevine, whether that’s the problem but it’s L1 (so that should not be it imo). I’m not using Netflix these days, but it’s so that i don’t have to bother in the future if I’d want to watch. And I know I can probably find some file on the internet and install it, but it’s annoying to see it in PS. Anyone knows how to fix it?
Thanks.
Click to expand...
Click to collapse
Use Aurora Store, its GPlay alternative, can install Netflix without any prob https://auroraoss.com/
IgnisGuardian said:
in the playstore app, is your device certified by play protect ?
Click to expand...
Click to collapse
Sorry for the late reply
Yea i just came to check it and it's not. Are there any solutions to this?
Herinek said:
Sorry for the late reply
Yea i just came to check it and it's not. Are there any solutions to this?
Click to expand...
Click to collapse
Hi, try to flash a magisk module called universal safetynet fix (kdragon) and if it doesn't work, you need to hide something like google play services with the new zygisk magisk hide settings, but I don't remember what exactly. There are plenty of videos explaining how to get the play protect certification just search on google. Let me know if this helped
IgnisGuardian said:
Hi, try to flash a magisk module called universal safetynet fix (kdragon) and if it doesn't work, you need to hide something like google play services with the new zygisk magisk hide settings, but I don't remember what exactly. There are plenty of videos explaining how to get the play protect certification just search on google. Let me know if this helped
Click to expand...
Click to collapse
Hi, thanks for replying
I didn't want to play with Magisk and Root, so i just relocked the bootloader and I have the certificate (but it's pain reinstalling everything ) So everything's good now
on my device also no streaming app is working (europe) rom disney plus says error 39 root and hide works i tried but now i am on stock locked.

Google Pay not working with Magisk, despite trying everything

I know this is not the only post in regards to the recent Google Pay and Wallet updates not working on rooted phones, and maybe I missed something, but I don't think I'm the only one who has seemingly tried everything, only for it to do the same thing. What I've tried:
Installing Displax's SafetyNet mod
Adding all Google Play components and Pay and Wallet to the Denylist
Editing the dg.db database, including manually and with the GPay-SQLite-Fix module
Changing the device's fingerprint to Android 10 (I have a Pixel 5, so I changed it to a 4 XL, which is the newest similar phone to mine to support Android 10) and Android 11.
Side note: This causes CTSProfileMatch to fail for me, so I see no point in changing it.
Installed DevOptsHide and Hide USB Debug Mode Xposed modules, as one suggested on the Github issue for kdrag0n's SafetyNet Fix.
That was all I could find regarding this issue. It's worth noting that once I edited the dg.db file, it would say that it meets the safety requirements until I try to add a card, at which point I can't, and the safety requirements are no longer met. If somebody can find or share something I don't know or haven't seen, I would greatly appreciate it. It really sucks how hard Google is clamping down rooted devices; it seems like they really don't like it. Anyway, have a good one, and stay safe!
Today all app developers as Google and/or OEMs without any difficulty are able to detect whether their device's OS got tampered or not: you can't prevent this.
xXx yYy said:
Today all app developers as Google and/or OEMs without any difficulty are able to detect whether their device's OS got tampered or not: you can't prevent this.
Click to expand...
Click to collapse
So are you saying that I'm SOL for now until the community comes up with a fix? It seems like what worked a month ago is already obsolete.
Bump

Question google wallet error

Device doesn't meet security requirements
Is your device rooted or do you have adb enabled? If the device is rooted you need to do some things to hide it. If your device is not rooted, maybe check to make sure adb is disabled.
Like the comment above says, if you're rooted with Magisk, install this and it should start working fine after wiping the app.
Releases · Displax/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - Displax/safetynet-fix
github.com
Adding on to this just because it's about Google Wallet...
What's the point of Google Wallet when there's Google Pay? The Pixel 7 setup kinda tried to make you download Wallet instead of Pay. Isn't Wallet just a piece of Pay that they took out?
Curiousn00b said:
Like the comment above says, if you're rooted with Magisk, install this and it should start working fine after wiping the app.
Releases · Displax/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - Displax/safetynet-fix
github.com
Adding on to this just because it's about Google Wallet...
What's the point of Google Wallet when there's Google Pay? The Pixel 7 setup kinda tried to make you download Wallet instead of Pay. Isn't Wallet just a piece of Pay that they took out?
Click to expand...
Click to collapse
Wallet is the successor to Pay. They just haven't removed the old app
synesthete said:
Is your device rooted or do you have adb enabled? If the device is rooted you need to do some things to hide it. If your device is not rooted, maybe check to make sure adb is disabled.
Click to expand...
Click to collapse
I am currently rooted I am able to pass safety net I also have hide google wallet in magisk
highgrade said:
Device doesn't meet security requirements
Click to expand...
Click to collapse
Is this when you're trying to pay with Wallet or just setting up the app?
If it's while trying to pay, it might be because you unlocked your phone via face unlock before paying. You might have to unlock with the fingerprint scanner to make sure it works.
Might not be your issue here and I hate to say it but man, the fact that this is an issue at all makes me mad, for any regular user such an error would make absolutely no sense, and you would never understand it unless someone tells you.
highgrade said:
I am currently rooted I am able to pass safety net I also have hide google wallet in magisk
Click to expand...
Click to collapse
I am rooted and wallet is working. Here is how I have set mine up:
Magisk installed:
Zygisk enabled
Enforce Denylist enabled
Denylist blocking: Wallet, Pay, Google Play Services, and some other banking apps.
Install the Safetynet Fix module from this post: https://forum.xda-developers.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87198517
Then install the MagiskHidePropsConfig module. (No need to configure it).
Force quit Wallet and wipe its data.
For quite and wiped data for Google Play Services.
Reboot
Then added card.
Those were the only modules that I needed. Maybe disable anything else you don't need while doing this in case they conflict.
JakeDHS07 said:
Wallet is the successor to Pay. They just haven't removed the old app
Click to expand...
Click to collapse
I think Pay has transitioned to being an app to send money to friends/family/etc like Venmo. I haven't used it since its split with Wallet, though.
Curiousn00b said:
What's the point of Google Wallet when there's Google Pay? The Pixel 7 setup kinda tried to make you download Wallet instead of Pay. Isn't Wallet just a piece of Pay that they took out?
Click to expand...
Click to collapse
JakeDHS07 said:
Wallet is the successor to Pay. They just haven't removed the old app
Click to expand...
Click to collapse
As I understand it, Wallet holds all your "cards" like loyalty cards, gift cards, and transportation passes (metro, train, bus) -- hence "wallet" -- while GPay handles the credit cards for transactions for in-store/shops.
I guess Wallet is the app while GPay might be classified as the process...
Also...
synesthete said:
I think Pay has transitioned to being an app to send money to friends/family/etc like Venmo. I haven't used it since its split with Wallet, though.
Click to expand...
Click to collapse
Yes I noticed that GPay is transitioning to be like Venmo. I haven't used GPay in a long time, but since setting it up on my P7P, it was pushing hard to set things up so I could "easily send/receive payments to my family & friends" (like Venmo, i imagine...)...
simplepinoi177 said:
As I understand it, Wallet holds all your "cards" like loyalty cards, gift cards, and transportation passes (metro, train, bus) -- hence "wallet" -- while GPay handles the credit cards for transactions for in-store/shops.
I guess Wallet is the app while GPay might be classified as the process...
Click to expand...
Click to collapse
Just an FYI, but Wallet is just a part of GPay. What @Curiousn00b had said earlier in this thread is correct. GPay can do everything that Google Wallet does - and more. So therefore, GPay can handle credit cards, debit cards, gift cards, loyalty cards, transit passes, tickets, etc.
The reason why Google has released the Google Wallet app - an app specifically for adding your payment cards, transit cards, loyalty cards, etc - is because a large swarm of people were complaining about GPay being too difficult to use (as the newer features were seemingly confusing to the less tech-knowledgeable folks - which is still around 75-80% of the global population). Google had announced this publicly on a blog post around 1-2 years ago.
highgrade said:
Device doesn't meet security requirements
Click to expand...
Click to collapse
Post #2 - Unlocking Bootloader / Rooting / Updating | SafetyNet | ADB/Fastboot & Windows USB Drivers:
SafetyNet
Hello,
I have a successfully rooted Pixel 7 and the November update.
Magisk modules:
AOSP Mods (Full version)
Call Recorder - SKVALEX
Systemless Hosts
Universal safety Net fix
Zygisk - LSPosed
DenyList contains enabled:
Google Wallet
Google Play Protect service
com.android.systemui.plugin.globalactions.wallet
Play Integrity API Checker
Everything was fine until now, but when I open Wallet today, I get the following information:
"Device doesn't meet security
requirements You can't tap to pay with this device. It may be rooted or running uncertified software. Contact your device manufacturer or visit Google Wallet Help for more info."
My cards were not removed, it seems that the wallet is functional, but this information worries me. This information is not displayed every time when the wallet application is turned on. Everything else works for me (banks, netflix...), I go through safetynet.
I have one more question.
I don't know exactly how these things work...
How about the safetynet? Could it happen that one day GooglePay and Bank apps will stop working for me without an OS update or some other magisk module installation??
If it works for me now, and I don't do an OS update, will it still work for me?
I ask because these applications are very important for my daily work and I can't afford to be surprised by a malfunction at an inopportune moment due to root.
Thank you very much!
efkosk said:
Hello,
I have a successfully rooted Pixel 7 and the November update.
Magisk modules:
AOSP Mods (Full version)
Call Recorder - SKVALEX
Systemless Hosts
Universal safety Net fix
Zygisk - LSPosed
DenyList contains enabled:
Google Wallet
Google Play Protect service
com.android.systemui.plugin.globalactions.wallet
Play Integrity API Checker
Everything was fine until now, but when I open Wallet today, I get the following information:
"Device doesn't meet security
requirements You can't tap to pay with this device. It may be rooted or running uncertified software. Contact your device manufacturer or visit Google Wallet Help for more info."
My cards were not removed, it seems that the wallet is functional, but this information worries me. This information is not displayed every time when the wallet application is turned on. Everything else works for me (banks, netflix...), I go through safetynet.
I have one more question.
I don't know exactly how these things work...
How about the safetynet? Could it happen that one day GooglePay and Bank apps will stop working for me without an OS update or some other magisk module installation??
If it works for me now, and I don't do an OS update, will it still work for me?
I ask because these applications are very important for my daily work and I can't afford to be surprised by a malfunction at an inopportune moment due to root.
Thank you very much!
Click to expand...
Click to collapse
I have Play Store, GPay, and Google Wallet on the DenyList and don't have this error.
And yes, Google can easily decide one day to bypass the DenyList or force hardware attestation at which point you would have to choose between your apps and root. It's been a whack a mole game for awhile now and that's just expected to become worse.
EtherealRemnant said:
I have Play Store, GPay, and Google Wallet on the DenyList and don't have this error.
And yes, Google can easily decide one day to bypass the DenyList or force hardware attestation at which point you would have to choose between your apps and root. It's been a whack a mole game for awhile now and that's just expected to become worse.
Click to expand...
Click to collapse
Thanks!
In the meantime, I cleaned the google play cache storage, added the cards again. I haven't received a bad notification yet
Do I understand correctly that at any time without any action on my part (update app, updateOS) my bank apps, gpay can stop working due to root?
efkosk said:
Thanks!
In the meantime, I cleaned the google play cache storage, added the cards again. I haven't received a bad notification yet
Do I understand correctly that at any time without any action on my part (update app, updateOS) my bank apps, gpay can stop working due to root?
Click to expand...
Click to collapse
If you turn off updates, it's extremely unlikely that it would change, but you're also taking added risk when it comes to exploits and I wouldn't recommend this path.
are we talking about an application or OS update?
If it can stop working for me after the next OS update (via pixelflasher, for example), then that is acceptable for me.
But if it can happen to me after an automatic update of the application via Google Play, it's a problem.
Sorry for possibly stupid questions, I'm trying to understand how it works.
Thank you very much for your help and giving of your time.
efkosk said:
are we talking about an application or OS update?
If it can stop working for me after the next OS update (via pixelflasher, for example), then that is acceptable for me.
But if it can happen to me after an automatic update of the application via Google Play, it's a problem.
Sorry for possibly stupid questions, I'm trying to understand how it works.
Thank you very much for your help and giving of your time.
Click to expand...
Click to collapse
Either can happen. There are ways to detect root that get past our attempts to hide it as it is so an app update can add further detection easily. Just ask my Security Service Federal Credit Union app that won't even open on a rooted phone no matter what I do.
Can I "quickly unroot" it by uninstalling magisk? Does it wipe my data? I want rooted, but I need planB in a crisis situation.
Thx for your reply!
Users with root are not afraid of the situation that they ask for a bill in a restaurant and Gpay won't work for them?
efkosk said:
Can I "quickly unroot" it by uninstalling magisk? Does it wipe my data? I want rooted, but I need planB in a crisis situation.
Thx for your reply!
Users with root are not afraid of the situation that they ask for a bill in a restaurant and Gpay won't work for them?
Click to expand...
Click to collapse
Unfortunately removing root just exposes the unlocked bootloader and GPay won't work with that condition either. It's why I rooted in the first place so I could pass SafetyNet again as Discover is 5% with mobile wallet this quarter.
I carry credit cards with me everywhere I go. It's only recently I've started using tap to pay as it wasn't really available in the Denver area. Even now I can only thing of a couple places that take it - namely the liquor store I go to with my husband lol. Interestingly I went to Dollar Tree yesterday and they have added it.
So if I want to unroot, I will lose data, because after re-locking the bootloader, the data is wiped. I'm right?
efkosk said:
So if I want to unroot, I will lose data, because after re-locking the bootloader, the data is wiped. I'm right?
Click to expand...
Click to collapse
Correct. Honestly I wouldn't say you're at immediate risk of having an issue and that dumping root and all that just for a remote possibility isn't worth it.
You can also turn off automatic app updates for the individual apps in the Play Store. As long as you leave automatic updates on for the rest of your apps, the ones you disable individually will just be sitting there showing updates and you can choose to update them when you're ready.

Categories

Resources