[Announcement] No longer allowed to submit issues about SafetyNet

[MlgmXyysd]

Reason:

Google updated SafetyNet check

see: https://twitter.com/topjohnwu/status/1237830555523149824

The SN test in Magisk Manager is technically not a proper attestation. Proper SafetyNet checks will verify results on a remote server, not on device which can be manipulated by code injection frameworks

More details:
https://twitter.com/topjohnwu/status/1245956080779198464
https://t.me/EdXposed/71

Issues submitted about SafetyNet will be closed directly

[enetec1]

On my Moto Z2 Force with stock Pie some days ago I suddenly got both CTS & integrity fail, triggered by EdXposed (tested).
I was on build 4510, but 4523 failed too.
SafetyPatch failed with startup error message ("a problem with device... ") too.
Updated to EdXposed canary build 4543 solved issue at all, SafetyNet check fully passed and Google Pay working again!
Great work guys.... ;)

[second2050]

To anyone who disabled EdXposed but still fails SafetyNet:
You may need to delete the data of "Google Play Services" and "Google Play Store".
They seem to cache something like an "had (Ed)Xposed installed" flag which needs to be reset to pass SafetyNet again.

[Justsnoopy30]

I recommend re-allowing safetynet issues because Google has had their changes reverted for months and we are all passing again. In addition, EdXposed is causing SafetyNet to fail which passes without EdXposed.

[Justsnoopy30]

EdXposed is causing both ctsProfile and even basicIntegrity to fail. I hope this is fixed.

[ghost]

This may sound crazy... but is it possible EdXposed somehow flips a switch that causes SafetyNet to never ever pass again?
I'm writing this because after installing EdXposed on my phone, it was failing every single time with Response signature validation failed even if I did everything I could think of (disabling the module, enabling Magisk Core and even uninstalling Magisk altogether). It's not until I did a wipe and reinstalled both my ROM and Magisk without installing EdXposed afterwards that the issue went away... I know it's really strange but I did the same exact things both times except I didn't install EdXposed

[crooowned]

I can confirm what @zacchi4k mentioned

[jimmy200340]

same here. install EdXposed lead to Response signature validation fail

[Justsnoopy30]

You can fix that after uninstalling/disabling EdXposed by clearing the data of Google Play Services by the way.

[csin86]

Has anyone tried SafetyPatcher, this module is new to me, will it work? I'm getting basic integrity and CTS profile match failing due to edxposed on the latest canary build 0.5.0.0

[Suriyavi]

Rooting divaice

[KaMyKaSii]

Hello guys. I am managing to pass the safetynet check using the last Canary of Edxposed YAHFA. I'm running in blacklist mode, the only different configuration I made was to add all apps with "google" in the package name to the blacklist :p
Maybe someone more patient can add them one by one (and reboot) to find out which one is to blame, it’s probably not any of the Google user apps but I checked them out just because I’m paranoid

[pannal]

Yeah, the latest canary works for me as well. The device policy in my work profile still detects something, though, I don't know how. Any pointers?

Edit: YAHFA fixed that issue in the work profile. SandHook failed immediately.