4 ms·

Well, we have root access. Can't we completely stump and destroy this stupid safety net? This should have a very high priority for anyone who cares about open s

by Kenji 10y ago

Well, we have root access. Can't we completely stump and destroy this stupid safety net? This should have a very high priority for anyone who cares about open smartphone systems. There should be a safety net remover that simply strips all safety net API calls off a program and inserts all valid flags by default.

kuschku 10y ago
The issue is the way it happens. SafetyNet actually sends its results to a Google server, which validates that they’re properly signed, and then sends a message to the backend of the app. The only way to successfully break it is by emulating or replacing SafetyNet on the device, but as part of it runs in TrustZone, that’s not easily possible.