News for hackers. Stuff that matters.
Re:When an app asks for permissions, it should have a “feed ... by flutas on Saturday July 08, 2023 @12:31PM (#36645980)
FWIW: Rooting seems fairly easy at this point in time, at least for pixel devices.

Flash with magisk, install Universal Safetynet Fix (https://github.com/Displax/safetynet-fix/) and you're passing safetynet / play integrity API.

I haven't come across a single app that doesn't work due to root currently, but I limit my installed apps.

Re:When an app asks for permissions, it should have a “feed ... by kevincox on Saturday July 08, 2023 @01:05PM (#36646329)
You pass basic safety net. You do this by claiming that your device is an older device that doesn't support hardware attestation. I can only assume that in some small number of years hardware attestation is going to be required and will require software exploits to work around.
Re:When an app asks for permissions, it should have a “feed ... by e4e5 on Saturday July 08, 2023 @01:16PM (#36646427)
Thank you, I rooted my phone a few days ago and have been putting off fixing safety net.

But that worked and was absolutely painless.

Re:When an app asks for permissions, it should have a “feed ... by rocho on Saturday July 08, 2023 @04:50PM (#36648627)
Last time I tried this I wasted many hours but couldn't make Google Wallet work. SafetyNet was passing but Wallet was still disallowing any card operations.
Re:When an app asks for permissions, it should have a “feed ... by jcul on Saturday July 08, 2023 @05:03PM (#36648751)
I think you need to hide root for Google wallet and some other Google services app(s).

And wipe their storage / cache too so they start from a clean slate.

Re:When an app asks for permissions, it should have a “feed ... by Groxx on Saturday July 08, 2023 @05:02PM (#36648734)
Last time I tried to use magisk on my pixel it was a complete fustercluck (about a year ago). I ended up having to patch together multiple fixes in multiple forum threads, and manually pick apart and patch the firmware package, because nothing worked at all for months on end, on a completely stock device.

I have kinda lost faith in it. And it doesn't help that it tries to do everything internally, so you can't e.g. download your pre-patch blobs or upload them after it loses track of them, because it does everything exclusively in complicatedly-magically-named internal folders. There is some seriously bonkers decision-making going on in it.