4 ms·

I haven't looked into this at all, but isn't the point of Xposed to hook into APIs and fake the result? Or otherwise modifying apps? Isn't there a module that j

I haven't looked into this at all, but isn't the point of Xposed to hook into APIs and fake the result? Or otherwise modifying apps? Isn't there a module that just fakes SafetyNet? Probably not, or this wouldn't be a problem, just curious if anyone knows why not?

jmull 9y ago
I don't know about SafetyNet specifically, but it could be that it has to authenticate itself to the apps that call its APIs. E.g., I guess it could be code-signed and that the apps that use it have to check the signature. That uses a private key that "FakeSafetyNet" couldn't duplicate (well, assuming the SafetyNet people could keep it a secrect). It also incorporates a hash of the binary being signed so that FakeSafetyNet couldn't get away with just swiping the signature from SafetyNet to present as its own (the binary hash of FakeSafetyNet wouldn't match the signature). I'm just speculating here, though.
aerique 9y ago
Yes, there's modules to fake SafetyNet but Google's really invested in it and it is kind of a losing battle on the side of the Xposed module writers[1][2]. (tl;dr It's quite a hassle to get a workaround on your phone and it's pretty trivial for Google to update SafetyNet.) Xposed is a bit like torrents, jailbreaking, etc. A lot of people use it to pirate stuff or to cheat in games but there's also genuinly useful usage like: • why does my banking app not allow me to take a screenshot? • root permissons for Greenify and Amplify so I can make my battery last for days • better privacy management than what Google only recently implemented [1] https://phoneia.com/google-updated-safety-net-and-there-is-no-way-to-hide-your-root/ https://phoneia.com/google-updated-safety-net-and-there-is-n... [2] http://phandroid.com/2016/08/30/chainfire-suhide-root/ http://phandroid.com/2016/08/30/chainfire-suhide-root/

jmull 9y ago

I don't know about SafetyNet specifically, but it could be that it has to authenticate itself to the apps that call its APIs. E.g., I guess it could be code-signed and that the apps that use it have to check the signature. That uses a private key that "FakeSafetyNet" couldn't duplicate (well, assuming the SafetyNet people could keep it a secrect). It also incorporates a hash of the binary being signed so that FakeSafetyNet couldn't get away with just swiping the signature from SafetyNet to present as its own (the binary hash of FakeSafetyNet wouldn't match the signature). I'm just speculating here, though.

aerique 9y ago

Yes, there's modules to fake SafetyNet but Google's really invested in it and it is kind of a losing battle on the side of the Xposed module writers[1][2]. (tl;dr It's quite a hassle to get a workaround on your phone and it's pretty trivial for Google to update SafetyNet.) Xposed is a bit like torrents, jailbreaking, etc. A lot of people use it to pirate stuff or to cheat in games but there's also genuinly useful usage like: • why does my banking app not allow me to take a screenshot? • root permissons for Greenify and Amplify so I can make my battery last for days • better privacy management than what Google only recently implemented [1] https://phoneia.com/google-updated-safety-net-and-there-is-no-way-to-hide-your-root/ https://phoneia.com/google-updated-safety-net-and-there-is-n... [2] http://phandroid.com/2016/08/30/chainfire-suhide-root/ http://phandroid.com/2016/08/30/chainfire-suhide-root/