Hacker News new | ask | show | jobs
by Nereuxofficial 1074 days ago
XPrivacy was incredibly cool. But on modern phones rooting and installing Xposed has either gotten massively more complicated or disabled ougright. GrapheneOS wasn't working with banking apps, Google broke rooting via Magisk multiple times on the Android Beta and at some point and i stopped bothering.

Maybe GrapheneOS or similar Projects could do this
3 comments
flutas 1074 days ago
FWIW: Rooting seems fairly easy at this point in time, at least for pixel devices.

Flash with magisk, install Universal Safetynet Fix (https://github.com/Displax/safetynet-fix/) and you're passing safetynet / play integrity API.

I haven't come across a single app that doesn't work due to root currently, but I limit my installed apps.

link
kevincox 1074 days ago
You pass basic safety net. You do this by claiming that your device is an older device that doesn't support hardware attestation. I can only assume that in some small number of years hardware attestation is going to be required and will require software exploits to work around.
link
Groxx 1074 days ago
Last time I tried to use magisk on my pixel it was a complete fustercluck (about a year ago). I ended up having to patch together multiple fixes in multiple forum threads, and manually pick apart and patch the firmware package, because nothing worked at all for months on end, on a completely stock device.

I have kinda lost faith in it. And it doesn't help that it tries to do everything internally, so you can't e.g. download your pre-patch blobs or upload them after it loses track of them, because it does everything exclusively in complicatedly-magically-named internal folders. There is some seriously bonkers decision-making going on in it.

link
e4e5 1074 days ago
Thank you, I rooted my phone a few days ago and have been putting off fixing safety net.

But that worked and was absolutely painless.

link
rocho 1074 days ago
Last time I tried this I wasted many hours but couldn't make Google Wallet work. SafetyNet was passing but Wallet was still disallowing any card operations.
link
jcul 1074 days ago
I think you need to hide root for Google wallet and some other Google services app(s).

And wipe their storage / cache too so they start from a clean slate.

link
jcul 1074 days ago
FWIW,I just installed GrapheneOS this week and banking apps have been working fine (though no Google pay).

Also, as a sibling comment mentioned, I have used magisk + safety net fix in the past, and had no issues with banking apps or Google pay.

link
jet_32951 1074 days ago
GrapheneOS has implemented storage and contact scopes. Users can set a program's permitted storage environment. Similarly, contact scopes allows users to limit access to contacts that are tagged with a keyword. On my phone the 'special' contact group includes Djimn Hovnbg, with a number in Egypt, Blin Futtum'ch with a UK number, and so on.
link