Question Passing security for bank apps - OnePlus Nord 2T

So, just got my Nord 2T today and figured I could not get Google Wallet to work after unlocking bootloader and flashing Magisk.
I've tried:
Enabled Zygisk
Installed safetynet-fix
Added to Deny list: Google Wallet, Google play services, Google services Framework (even though Google services Framework seems very weird by losing the checkmark any chance it has)
Clear cache and storage for the above apps
Enabled Enforce deny-list (also tried without enabling)
Also tried with Shamiko and disabled Enforce deny-list option.
I have installed YASNAC safety net test application, and it says I am passing basic.
However, Wallet still tells me "Your phone doesn't meet security requirements".
Even the bloody IKEA app tells me that running a rooted device is unsafe, so this isn't just the Wallet being smart.
I see that Google has recently been rolling out their new Play Integrity API, which is supposedly going to replace the SafetyNet. I guess it could be related. https://forum.xda-developers.com/t/discussion-play-integrity-api.4479337/
Now the only thing I have not tried is MagiskHide Props Config. I am a bit hesitant using this because as far as I understand changing props can have serious side effects such as breaking fingerprint sensor etc.
Has anyone tried MagiskHide Props Config on Nord 2T?
If yes, which fingerprint you spoofed?
Edit: it occurred to me that I have not been fully clearing data. After clearing all data (not just cache) and rebooting, Google Wallet reverted to Google Pay. However, it still won't let me add a payment method.

Actually you not only need to pass basic, you need to get CTS Profile match to get banking apps to work. The safety net fix should actually fix this. Try removing the module via magisk and reinstalling it.

Tried https://forum.xda-developers.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87198517
This fork of USFN spoofs the fingerprint but only to Google play services and makes an effort not to break Oneplus functionality.
Wallet was then failing with some unspecific 'something went wrong' error many times. Tried reinstalling, clearing data etc. Then tried to disable Enforce deny list, rebooted, wallet failed again.
Then I tried once again may be after 5 min and it suddenly went through.
Seems like it is all set now.
For reference:
Zygisk is enabled
Enforce Denylist is disabled
Denylist includes:
Google play services, Google play store, google safety center resources (probably don't need this one), google services framework, google wallet
Modules: Universal safety net fix fork by Displax

PattasuBalu said:
Actually you not only need to pass basic, you need to get CTS Profile match to get banking apps to work. The safety net fix should actually fix this. Try removing the module via magisk and reinstalling it.
Click to expand...
Click to collapse
Yes, I was getting both Basic integrity pass and CTS pass with evaluation type: basic (which is still the case), yet the unforked safetynet fix was not enough.
I've also installed Integrity Checker and it was reporting that only MEETS_BASIC_INTEGRITY was achieved with unforked safetynet fix.
Now with the forked on, I am also getting MEETS_DEVICE_INTEGRITY, which seems the one required for Google Wallet now.
I am on security patch level 2022-08-05 and Android 12 btw. I suspect not everybody is having this problem _yet_.

Try Shamiko ! And if that's not working magisk Delta

I have tried shamiko with no joy. What did it for me was Safety Net Fix fork by Displax
Thanks

Related

Apps that require Play Protect to be turned on - is there a way to spoof this?

Recently the HDFC Bank app got updated, and it now forces you to turn on Play Protect in order to function. Doing so immediately flagged Viper4AndroidFX (installed as a Magisk module) as malware, and now the HDFC app won't open unless you get rid of the malware alert by uninstalling Viper4AndroidFX! I'm running rooted RR Oreo on my OP3, using Magisk for root. Is there a way to spoof Play Protect being turned on, similar to hiding root?

Google Pay suddenly no longer detecting root??

I just installed Google Pay in order to verify it still detects root and refuses to run, however, surprisingly, it works.
I have a magisk-rooted Droid Turbo with custom ROM and xposed framework, so it cant get any worse. Can anyone confirm this?
Google Pay Version is 2.75.214349949
https://i.imgur.com/ZQJbYIp.png
Google pay is easily fooled.
But i do no attempt in fooling it (i would not call it easy either), it still works.
It was not working for me for many days. I tried different OREO roms on my S7 Edge. (TGP 2.5 and Superman 3.0.1)
I used magisk 17.1 with magisk hide for Google Pay. I also used the magisk module (props config) to change the fingerprint.
That allowed me to add my cards but I was stock at "unable to verify card". When I pushed "verify card", the screen display briefly the little blue bank logo then returned to previous screen without error.
Even when I removed magisk completely, was unable to make "google pay" working...
But I just discovered your post and tried it then VOILA, it works this morning

Google Pay stop working on Rooted u11.

So, Some days ago, out of the blue I was trying to pay with google pay and an error "you no longer can pay at store with google pay" came up.
Then I check payment methods, tried to change for other and found the error that google pay wont work on my phone since is "modified in some way"
I have 100% stock room, with magisk root. I did not installed anything recently, not even updated google pay app recently.
Anyway, I read some guides, found that my phone did not pass the SafetyNet Check. cleaned data from google play services and google play itself. run the test again and now it says true (pass) and my google play says device certified, but still no luck with google pay. I hided root for that app and other google apps just in case, cleaned data, but still says same error.
Any thought? Something that I could try?
thanks!
I had the same problem, ended up fixing it by switching to Magisk Canary release channel. AFAIK the fix has not been released in stable Magisk yet.
I can confirm that Magisk Canary Channel (v19003) fixed this issue for me on OP6.

Play Store keeps downgrading itself every time the phone reboots

Hi, I'm currently facing a very weird issue ever since I unlocked my bootloader and flashed a custom ROM on my S20 FE (4G Snapdragon variant), as mentioned by the title every time the phone reboots my Play Store downgrades itself to it's original version (29.8.13-21) and clears all of it's data. That wouldn't be such a big deal if the data wasn't cleared, as it would keep my settings, but it doesn't so apps that I don't want to update gets updated, the purchase settings are all reset to default, etc.
I have absolutely no idea on what might be causing this issue as no one that I've talked to that owns this device and/or is using this custom ROM is facing any issues like this at all.
About Magisk Modules, I use the following:
Spoiler
ADB & Fastboot for Android NDK
Adreno GPU Driver SM8x50 (was having this issue before installing this one)
App Systemizer
Audio Modification Library
AuroraServices (was having this issue before installing this one)
Busybox for Android NDK
Magisk Bootloop Protector
mindetach
OverlayFS (was having this issue before installing this one)
Shamiko
Touch Boost Disabler (was having this issue before installing this one)
Universal GMS Doze (was having this issue before installing this one)
Universal SafetyNet Fix (modded by Displax)
Viper4Android FX
xmlpak - a road to vendor apps
I don't know if there's an issue with any of them because most of the people I've talked to use at least two or more of those modules and again, no one is having any similar issue.
I was having an issue with Shamiko on my previous installation of the ROM where it would cause both Play Services and Play Store to crash randomly multiple times a day, but that was fixed by clear flashing the ROM. So I don't really know what to do anymore.
My device is Play Store certified and SafetyNet passes.
On my deny list I currently have my banking apps, Play Services (gms and gms.unstable), Play Store, Google Wallet and my banking apps. For apps that require root I'm only actively using AdAway, Naptime (the issue was happening before I started using this one), ReVanced Manager (the issue was happening before I started using this one) and Solid Explorer.
On a side note I don't manually update my Play Store, and the issue only happens when the Play Store is updated (which for some reason happens infrequently, as in most cases it can stay on the original version for days until it suddenly updates to the newest version), so if there's any way I can prevent it from auto updating that would help immensely.
On another side note the Google Play System Update is date June 1st, 2022 and if I try to update it is successful but then it reboots the device after a few seconds of use and reverts back to the June 1st, 2022 patch. I have no idea if this has anything to do with it but everyone using the ROM is on the same patch and none of them is having any issue.
I tried searching this issue up but the only answers I've found didn't help at all, so I'm hoping you guys can shed some light on what might be happening.
Thanks in advance.
Why not simply contact Google to ask for a fix?

GOOGLE WALLET HAS STOPPED WORKING 16/5/23

I have been using Google wallet all day today up until 45 minutes ago. I have just tried to pay for something in the shops and now my phone says in the wallet settings that 'I do not meet the requirements'
I have lsposed, latest magisk, shamiko, changed finger print sensor and fingerprint, I have xprivacy lua blocking wallet and Google services, I have configured deny list to include wallet.
All banking apps work fine.
I have run root beer and it shows SU BINARY not hidden 2ND SU BINARY CHECK not hidden ROOT VIA NATIVE CHECK not hidden and MAGISK SPECIFIC CHECKS not hidden.
YASNAC Pass Pass also.
I'm at a complete loss at the moment as I just can't figure it out?
Can anyone help?
Heey,
I have same problem with Pixel 3. Google Wallet stopped working last month out of the sudden, and all banking apps work perfectly, and SatefyNet check show no problem.
I get "not rooted" with root beer when I add it to DenyList in Magisk.
Have you figured it out?

Categories

Resources