News for hackers. Stuff that matters.

A comment on Introducing Netflix Stethoscope. Parent comment

Re:Introducing Netflix Stethoscope by evanreichard on Tuesday February 21, 2017 @04:31PM (#13700221)
SafetyNet is pretty flexible. It actually isn't implemented inside any APK - "The SafetyNet service reaches out to a Google server and downloads a binary package with the code. It goes to great lengths to validate the integrity of the package, for example using hardcoded certificates (pinning). This binary package is essentially a JAR file that contains a classes.dex file with java bytecode. Play Services caches it in dalvik-cache (snet.dex) and loads it dynamically using reflection." [1].

I think right now the only way "around" it has been Magisk [2].

[1] https://koz.io/inside-safetynet/

[2] https://forum.xda-developers.com/apps/magisk/official-magisk...

[ Parent | on HN ]
Re:Introducing Netflix Stethoscope by cprecioso on Tuesday February 21, 2017 @04:36PM (#13700265)
And suhide [1], but that one's a cat and mouse game, as acknowledged by the developer.

[1]: https://forum.xda-developers.com/apps/supersu/suhide-t345039...

[ Parent | on HN ]