Database Info

Question Samsung pay with a root Samsung

Hi,
I have one root Z flip 3 and I can pair it without problems with my galaxy watch 4, the problem is when I try to add one card to samsung pay through the Watch plug in, whenever i try to do all works fine until the last moment when the watch disconnect from the phone. I have tried this with other phones and with my own Z flip without root and It works.
Maybe, someone in the forum have found a way to make it work.
Thank you.

Samsung Pay is secured by Knox.
[Guide]Use Samsung Pay and Knox on your Rooted device
WARNING THIS IS A WIP AND SO FAR NO ONE HAS CONFIRMED THIS WORKING Samsung pay and Knox is working after Rooting. How is this possible?:confused: well, The loophole here is both Samsung pay and Knox apps check the kernel for knox status...
forum.xda-developers.com

blackhawk said:
Samsung Pay is secured by Knox.
[Guide]Use Samsung Pay and Knox on your Rooted device
WARNING THIS IS A WIP AND SO FAR NO ONE HAS CONFIRMED THIS WORKING Samsung pay and Knox is working after Rooting. How is this possible?:confused: well, The loophole here is both Samsung pay and Knox apps check the kernel for knox status...
forum.xda-developers.com
Click to expand...
Click to collapse
Yes I know but i want to use samsung pay on the watch not in the phone, i was able to use it with knox tripped but not when magisk is installed.

Zoidben said:
Yes I know but i want to use samsung pay on the watch not in the phone, i was able to use it with knox tripped but not when magisk is installed.
Click to expand...
Click to collapse
Try to hide the watch app with magisk hide, and Spay too

Rick_BR said:
Try to hide the watch app with magisk hide, and Spay too
Click to expand...
Click to collapse
I have already done that if not I couldnt even open the app of the Spay watch plugin, i dont know what can be the problem

Ive used Samsung Pay on my Pixel 2XL for over 6 months now using my Active 2, until i just swapped to the Watch 4 and can use Google Pay easily, yay
How i setup Samsung Pay (using Active 2) :
* Magisk (i still prefer older Magisk - Alpha 31 to be exact - last build before John started removing MagiskHide etc - and yes it stillworks on Android 12)
* MagiskHide Enabled - checked to pass SafetyNet
* Rename Magisk app (from settings)
* Tick apps in MagiskHide: All Samsung related apps, including watch plugins
Added modules after the above:
* Riru
* Riru-MomoHider (my mod to add all 4config options - note later Magisk builds may or not allow Riru, and if they do, some may not allow all Riru-MomoHider config options - best to check in main Magisk thread if you use the latest/bleeding edge)
The Riru/Riru-MomoHide setup will give you greater process isolation than MagiskHide itself....
Attached:
*Magisk - Alpha 31 (apk, you can sideload this apk from TWRP, TWRP doesnt care its not named as a zip, only its content- sideload apk, reboot then install the apk, as the flashed apk only installs the stub Magisk Manager, and you dont want it grabbing the latest Magisk Manager from the interwebs at the moment...)
*Riru (Riru must be installed first, and a reboot performed before adding Riru-Momohider)
*Riru-MomoHider (my mod with 4 config options set at module install, instead of having to manually do it)
Bonus info:
If youre a regular ROM flasher, you'll want to keep your watch connection and Samsung Pay working across flashes, i have a guide for that in my signature, basically involves keeping the same Android ID across flashes. I need to update it for Android 12, which ill do over the weekend...the Android ID changer app i use on Android 11 doesnt work on 12...
Note: Magisk Alpha 31 referenced in above post removed from post as its quite old now.....use either Official Magisk (details in my following post down the page) or Magisk Delta (and the modules from this post)

73sydney said:
Ive used Samsung Pay on my Pixel 2XL for over 6 months now using my Active 2, until i just swapped to the Watch 4 and can use Google Pay easily, yay
How i setup Samsung Pay (using Active 2) :
* Magisk (i still prefer older Magisk - Alpha 31 to be exact - last build before John started removing MagiskHide etc - and yes it stillworks on Android 12)
* MagiskHide Enabled - checked to pass SafetyNet
* Rename Magisk app (from settings)
* Tick apps in MagiskHide: All Samsung related apps, including watch plugins
Added modules after the above:
* Riru
* Riru-MomoHider (my mod to add all 4config options - note later Magisk builds may or not allow Riru, and if they do, some may not allow all Riru-MomoHider config options - best to check in main Magisk thread if you use the latest/bleeding edge)
The Riru/Riru-MomoHide setup will give you greater process isolation than MagiskHide itself....
Attached:
*Magisk - Alpha 31 (apk, you can sideload this apk from TWRP, TWRP doesnt care its not named as a zip, only its content- sideload apk, reboot then install the apk, as the flashed apk only installs the stub Magisk Manager, and you dont want it grabbing the latest Magisk Manager from the interwebs at the moment...)
*Riru (Riru must be installed first, and a reboot performed before adding Riru-Momohider)
*Riru-MomoHider (my mod with 4 config options set at module install, instead of having to manually do it)
Bonus info:
If youre a regular ROM flasher, you'll want to keep your watch connection and Samsung Pay working across flashes, i have a guide for that in my signature, basically involves keeping the same Android ID across flashes. I need to update it for Android 12, which ill do over the weekend...the Android ID changer app i use on Android 11 doesnt work on 12...
Click to expand...
Click to collapse
Anyone tried this on S22 Sandragon Variant, Android 12?

Gymcode said:
Anyone tried this on S22 Sandragon Variant, Android 12?
Click to expand...
Click to collapse
My post is not current except if you are using the (recent) unofficial Magisk Delta, which still has MagiskHide as an option, Delta can be found here:
[Discussion] Magisk Delta - Another unofficial third-party Magisk fork
This is not an officially supported topjohnwu project. If you are looking for official Magisk source, please go to this page Introduction Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide...
forum.xda-developers.com
For mainstream/official Magisk, you should use Zygisk:
* Magisk 25.x
* Zygisk Enabled
* Rename Magisk app (from settings)
* Tick apps in Deny List: All Samsung related apps, including watch plugins
* DenyList Not Enforced (shamiko will handle this)
Added modules after the above:
* shamiko
all required files can be found in page 1 of this thread:
[Discussion] Magisk - The Age of Zygisk.
This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...
forum.xda-developers.com
As an alternate to shamiko, you can also try DenyList Unmount
GitHub - mywalkb/DenylistUnmount
Contribute to mywalkb/DenylistUnmount development by creating an account on GitHub.
github.com
As for "has anyone tried it?", if you have already rooted with Magisk, then simply try it....waiting for some other random person to do something isnt my 1st thought process....magisk is systemless and you cant really hurt anything...

How to trick MS Intune app about mobile encryption

HI,
I have installed Pixel Experience Plus on starlte(galaxy9)
I need to install work profile with MS Teams (that's said)
It requires MS Intunes what require system encryption
1. Is there any way to trick Intune about mobile encryption (I don't want encrypt my mobile)
2. Even if I try encrypt - encrypt process was taking more than 4 hours so I stopped it and wipe in TWRP

duo_pendulum said:
HI,
I have installed Pixel Experience Plus on starlte(galaxy9)
I need to install work profile with MS Teams (that's said)
It requires MS Intunes what require system encryption
1. Is there any way to trick Intune about mobile encryption (I don't want encrypt my mobile)
2. Even if I try encrypt - encrypt process was taking more than 4 hours so I stopped it and wipe in TWRP
Click to expand...
Click to collapse
I don't have any experience with any MS product and never will. Did you already check if this Magisk module could solve your problem?
[MODULE] Microsoft Intune Company Portal Hider (Intune Hider)
Introduction: Simple Module To Hide The Root From Microsoft Intune Company Portal. - After The Installation & 1st Reboot, It Hides The Rooting & Disables Itself [P.S. Disabling Itself For Some Versions] - Enabling This Module From Magisk Manager...
forum.xda-developers.com

Yes I have my galaxy9 rooted with Magisk. I flashed recovery to TWRP 3.6.0_9-0. Works perfect.
I think the problem is not related to MS Intune. It is more related 'Settings -> Security -> Encrypt Phone' in my Pixel Experience Plus custom rom.
If I want to encrypt directly from settings encryption progress bar is never ending (after 4 hours I reboot)
I have ROM from here:
[ROM][11][S9/S9+] PixelExperience Plus [AOSP/UNOFFICIAL]
PixelExperience Plus for S9/S9+ [starlte/star2lte] What is this? PixelExperience Plus is an AOSP based ROM, with Google apps included and all Pixel goodies (launcher, wallpapers, icons, fonts, boot animation) it has some extra additions over...
forum.xda-developers.com
I know there is more fresh version of Pixel Experience Plus:
[ROM][10.0][NOTE 9] Pixel Experience Plus [AOSP/UNOFFICIAL][2020/12/12]
hi, I installed it, but when I rebooted the phone again I went to download mode, help me, thanks
forum.xda-developers.com
but download link doesn't work :-(
I also flashed DisableForceEncryption.zip but it also didn't help.
Maybe because Android 11 uses FileBaseEncryption(FBE) instead of FDE

Oswald in the link you attached there is about Magisk Hidden so far I see now it is Magisk feature and application (MS Intune) didn't complain about "hey your phone is rooted" because Magisk is hidden.
BTW. Thx for answer

duo_pendulum said:
Oswald in the link you attached there is about Magisk Hidden so far I see now it is Magisk feature and application (MS Intune) didn't complain about "hey your phone is rooted" because Magisk is hidden.
BTW. Thx for answer
Click to expand...
Click to collapse
Hi, did you get your problem solved ? I am facing the same issue.

Question Company Portal (InTune) detects root - anyone else?

I have zero interest in rooting my phone, but because 5G/VoLTE/VoWiFi are not supported in my country (Slovakia) I had to root it. After successful root, passing SafetyNet and pretty much make everything to work as expected, my Company Portal is detecting root when running Teams and Outlook provisioned by my Company Portal despite having them in DenyList. Is there anyone who managed to pass this?
Thank you.

Happened to me as well. I used Shamiko magisk module and it's all good now.

@chaos193, did you use Riru along?
Or maybe even better question if you don't mind - what modules are you using to successfully pass SafetyNet and hide root?
Can you list them one by one, please?

Either use Shamiko or MagiskHidePropsConf to mask additional properties. I can confirm that InTune Company Portal works fine with SafetyNetFix + Shamiko

p4ra said:
@chaos193, did you use Riru along?
Or maybe even better question if you don't mind - what modules are you using to successfully pass SafetyNet and hide root?
Can you list them one by one, please?
Click to expand...
Click to collapse
It's pretty much what @craigacgomez said. I used Shamiko 0.6 alongside LSposed zygisk release. I'm pretty sure LSposed is not needed but I have it just in case.

chaos193 said:
It's pretty much what @craigacgomez said. I used Shamiko 0.6 alongside LSposed zygisk release. I'm pretty sure LSposed is not needed but I have it just in case.
Click to expand...
Click to collapse
Quick question @chaos193 - I haven't updated Shamiko to 0.6 as the update states that it requires Magisk 25205+. Reckon that would be magisk canary? Or as you using 0.6 with Magisk stable?

WhoIsJohnGalt1979 said:
Quick question @chaos193 - I haven't updated Shamiko to 0.6 as the update states that it requires Magisk 25205+. Reckon that would be magisk canary? Or as you using 0.6 with Magisk stable?
Click to expand...
Click to collapse
I used it with magisk stable 25.2. I think we are all using magisk stable to root our phone right?

I have tried your suggestions, but still does not seem to work. Adding screenshots.
Can you help me, please? What is wrong with my setup?

Following steps work 100% - I had the same issue.
1. Use magisk canary.
2. Install universal safetynet fix MOD 2.0 from displax (Google for "displax github")
3. Use latest shamiko module
4. Activate zygisk
5. Don't enforce denylist
6. Go to denylist and chose all Microsoft apps and tick ALL options for each app.
7. Hide magisk app

I had issue with a specific banking app which detects root by most of the methods. I made it working by using shamiko + airfrozen which i was not really liking.
Now i wnded up with a forked project of magisk bu Husky called magisk delta which brought back magisk hide along with zygisk. With this i don't need shamiko, magiskpropshide, airfrozen or any modules for hiding the root from apps. Yes for safetynet you can use the modded veraion by D. Below is the link. If you are interested have a look at Magisk Delta by HuskyDG... I use the magisk delta canary builds...

I have made it work with first approach. I did a restart of the phone and it worked.
What I am wondering though is the following - I have used the VoLTE/VoWiFi/5G Magisk module, but I don't see the "HD" icon during the call, even though I can browse the internet (when I am not on WiFi). And despite 5G coverage of my current carrier in my area, I don't see 5G icon.
Is there any other module I am missing for this last piece of puzzle?
And last but not least. What scares me the most is that next OTA will completely screw me over after setting everything up. I wish there was a clear tutorial on how to OTA and keep the root without wiping everything out.

p4ra said:
I have made it work with first approach. I did a restart of the phone and it worked.
What I am wondering though is the following - I have used the VoLTE/VoWiFi/5G Magisk module, but I don't see the "HD" icon during the call, even though I can browse the internet (when I am not on WiFi). And despite 5G coverage of my current carrier in my area, I don't see 5G icon.
Is there any other module I am missing for this last piece of puzzle?
And last but not least. What scares me the most is that next OTA will completely screw me over after setting everything up. I wish there was a clear tutorial on how to OTA and keep the root without wiping everything out.
Click to expand...
Click to collapse
I'm not quite sure which VoLTE/VoWiFi/5G Magisk module you are referring to, but I believe enabling 5G requires modified mbn files specific to your country/region.
Regarding OTAs, there are two "How To" guides here with all the details you need.

Blaze1001 said:
Following steps work 100% - I had the same issue.
1. Use magisk canary.
2. Install universal safetynet fix MOD 2.0 from displax (Google for "displax github")
3. Use latest shamiko module
4. Activate zygisk
5. Don't enforce denylist
6. Go to denylist and chose all Microsoft apps and tick ALL options for each app.
7. Hide magisk app
Click to expand...
Click to collapse
I have done exactly this but it still detects
Oneplus 7 pro
LineageOS 19.1 Nov 27th nightly build

This should be all that's needed to pass the compliance checks for Intune
1. Magisk (Zygisk mode)
2. SafetyNet v2.3.1-MOD_2.0
3. Shamiko v0.5.1 (or higher)
4. Magisk deny-list for the following apps (without Enforce deny-list)
a. Company Portal (Intune)​b. Microsoft Authenticator (if you use it)​c. Microsoft Defender (if you use it)​5. Make sure you clear app data for the apps in the deny list after adding them to the deny list

Don't know about this specific app, but in the past I had issues with detection of an "unsecure" device, that was related to ADB debugging being enabled in developer settings...

craigacgomez said:
This should be all that's needed to pass the compliance checks for Intune
1. Magisk (Zygisk mode)
2. SafetyNet v2.3.1-MOD_2.0
3. Shamiko v0.5.1 (or higher)
4. Magisk deny-list for the following apps (without Enforce deny-list)
a. Company Portal (Intune)​b. Microsoft Authenticator (if you use it)​c. Microsoft Defender (if you use it)​5. Make sure you clear app data for the apps in the deny list after adding them to the deny list
Click to expand...
Click to collapse
s3axel said:
Don't know about this specific app, but in the past I had issues with detection of an "unsecure" device, that was related to ADB debugging being enabled in developer settings...
Click to expand...
Click to collapse
Still doesn't work. Its weird because it worked for one night and the next morning it stopped.
UPDATE: its LSPosed I think. But this is the only way to force dark mode on some apps....
UPDATE 2: I disabled forced dark mode on all Microsoft apps in LSPosed plugin and its looking good so far...
UPDATE 3: Had a full day with not a single root detection notification. Looks solid!

s3axel said:
Don't know about this specific app, but in the past I had issues with detection of an "unsecure" device, that was related to ADB debugging being enabled in developer settings...
Click to expand...
Click to collapse
one of the worse parts of it, if not the worst, is that nobody knows what it detects and there's no guide that applies to each and every device,
I tried in 3 devices, the exact same steps and files, etc, it worked on the 1st one, but on the other two.. no!

For all those who still got issues as another idea: Does Google Wallet work ? Is the device play protect certified ?
I ask because to get Wallet to work (and presumably other apps that rely on Safetynet and/or Play Protect certification) the additional step after #5 in the list above is: clear data for Google Play Services and Google Play Store, then reboot (your device will ask for Google backup configuration again).....

I got the same issue with an App called "SwissID". It recognizes magisk for some reason. All other Apps work (like banking, google wallet etc.)

chaos193 said:
It's pretty much what @craigacgomez said. I used Shamiko 0.6 alongside LSposed zygisk release. I'm pretty sure LSposed is not needed but I have it just in case.
Click to expand...
Click to collapse
Its work to me!!! Thanks

Barclays App Not working anymore

Barclays App used to work just fine until about one week ago, when the latest version has been pushed. And they are now switching to an app-only authentication method (no more SMS, no more PINSentry, and definitely not possible through their website). So, if the app can't be used, I will have to either stop using root (which has been really helpful so far), or find a different bank which has an app that works (I believe it's very unlikely).
The Barclays App Version is: 2.73.2 , released in 16/02/2023
Specs:
OnePlus 7
Android 11 (OOS 11.0.2.1GM57BA)
Unlocked Bootloader
TWRP
Rooted with Magisk (25.2):
magisk app hidden
Zygisk enabled
enforce deny list: Enabled (I tried with enabled and disabled)
Deny List:
ALL Google stuff (absolutely anything that had "google" in their name)
Phone (just for safety, I added everything related to phone and dialer)
Barclays App
Magisk Modules:
App Systemizer v17.3.1
Buybox for Android NDK v1.3.4.1
Debloater (Terminal Emulator) v17.3.3
Disable Screenshot Camera Sounds v1.4
Energized Protection v1.3.5
Magisk Hide Props Config v6.12
OnePlus 7 Volume Booster Mod v2
OOS11 Debloater v7
Shamiko v0.6
Systemless Hosts 1.0 (Magisk)
Universal SafetyNet Fix (kdrag0n, modded by Displax) v2.3.1
Play Integrity API Checker:
device integrity: YES
basic integrity: YES
strong integrity: NO
What is happening:
Barclays App is starting
It prompts for registration (asks to set up a PIN)
Throws Error 00006 (which, after some research, seems to be related to Root)
What I did:
Looked for TWRP folder to delete it (I couldn't find it, perhaps I deleted it in the past, however if you can point me to all possible locations where it could be, I'd greatly appreciate it)
Tried both Shamiko and Universal SafetyNet Fix
Deleted storage, cache, from google, barclays, reboot, even uninstalled and reinstalled apps, all the works...
I tried with both Enforce Deny List Enabled and Disabled
​Nothing of the above helped with making Barclays App work. Any Suggestions?​

Best option atm is use the last version of the Barclays app which still worked (2.72.2) and disable auto update.

Any official way to get the 2.27.2 version? Obviously, because is a banking app, I don't trust mirrors and unofficial repos.
Thanks.

derei said:
Any official way to get the 2.27.2 version? Obviously, because is a banking app, I don't trust mirrors and unofficial repos.
Thanks.
Click to expand...
Click to collapse
https://barclays-bank-plc-banking.en.uptodown.com/android/download/90801956
That is the one I used. I understand your concerns, I was in the same boat before I downloaded it.. But I really need the app working myself. Worked fine though..

Signature Spoofing in Android 10 (Android Q) (Nanodroid not working)

Hi XDA
I'm having an issue deodexing or signature spoofing, all the tutorials seem to be for Android 9, 11 or 12, but not 10. Everyone seems to recommend Nanodroid but that isn't working for me, the MicroG self-check fails on "System spoofs signature" and "Play Services (GmsCore) has correct signature", I hear this happens when spoofing is enabled system-wide, but most Gapps still don't work properly, like the Play Store crashing immediately on startup (I'd prefer to use the Aurora store so I'm just listing it as a symptom), YouTube (stock and revanced root installed) complaining that Play Services isn't enabled, no notifications and location services not working at all so Maps is useless.
I did try Smali Patcher and that didn't work either (though the Screenshot on restricted apps patch did work) and I've heard some call it "shady" though they didn't say why.
I've heard that there is a way of enabling spoofing on a per-app basis (like apps requesting root access) which I would prefer, and I wasn't really a fan of how Nanodroid disabled the app installation dialog box (I prefer to micromanage updates), though as mentioned above I did like that screenshots couldn't be blocked.
Does my ideal setup exist or it is another pipe-dream?
Thank you in advance.

Look inside here:
doc/NanoDroidPerm.md · master · Christopher Roy Bratusek / NanoDroid · GitLab
microG, F-Droid, GNU Bash, FOSS applications and more for Android
gitlab.com

jwoegerbauer said:
Look inside here:
doc/NanoDroidPerm.md · master · Christopher Roy Bratusek / NanoDroid · GitLab
microG, F-Droid, GNU Bash, FOSS applications and more for Android
gitlab.com
Click to expand...
Click to collapse
Thank you for the suggestion, I ran the script as root but it didn't change anything.
EDIT: I just read through the documentation on the nanodroid repo and it seems you can't set up MicroG using this method on a Gapps preloaded stock ROM without installing it through recovery, which I can't as there's no port of any custom recoveries like TWRP.