Current situation of SafetyNet - Xiaomi Mi A1 Questions & Answers

Hi there, I have an international Mi A1 that has never been modded (stock Aug. 2020 upd.).
I'm interested to switch to a custom rom, but after reading some articles about the strengthening of SafetyNet (hardware fingerprint?) I desisted.
So before I go into this operation I'd like to know if there are any problems with banking apps (that I need) and other apps that uses those APIs. I'm not interested in root permissions, so if I had to give them up in order to be sure to bypass SafetyNet, it would be fine with me.
Uh, another stupid question (sorry!), could I lock the bootloader again once the custom rom is installed (I know that SafetyNet check this, correct me if I am wrong)?
Thank you all for your attention!

Up

You can flash any android 10 rom for mia1 and safteynet shouldn't be a concern, rooting is not necessary in order to use custom roms. I myself only use custom roms for the latest android version and features without the need of rooting.
Sent from my Mi A1 using Tapatalk

i'm using Lineage OS 17 official from 7-8 months and its also rooted with Magisk and Safetynet check always passed. i use Upi apps and Netflix app but didn't face any problem

You should never ever lock bootloader after installing custom roms, it will send the device into bootloop.

Related

kernel that can pass safetynet?

Hello there,
Is there any custom kernel available that can work on lineage and pass safetynet? I would like to run lineage nonrooted and be able to use Android pay.
koftheworld said:
Hello there,
Is there any custom kernel available that can work on lineage and pass safetynet? I would like to run lineage nonrooted and be able to use Android pay.
Click to expand...
Click to collapse
Lineage without root does pass Safetynet. At least it does on the Samsung Galaxy S5.
Not sure why it would be any different on Axon 7 (but happy to be corrected).
Lineage on Axon 7 with magisk and hide applied to Play Store definitely passes Safetynet. You may need to clear Play Store cache and reboot but it definitely works.
I can't get it to pass here. I've never rooted, but obviously have unlocked my bootloader and am running a custom kernel. Anyone have any success in this circumstance?
check if the selinux state is enforcing, if it is permissive safetynet will fail
koftheworld said:
I can't get it to pass here. I've never rooted, but obviously have unlocked my bootloader and am running a custom kernel. Anyone have any success in this circumstance?
Click to expand...
Click to collapse
I passed safetynet on RR, NucleaROM (w/ radioactive kernel), and LOS (The most recent one was Nuclea with Magisk 13.2). I can't verify if Android Pay works because we're just one step ahead of trading stuff here But I think I've seen some people who have been able to use it. Just a friendly reminder:
DO NOT LOCK THE BOOTLOADER IF NOT EVERYTHING IS STOCK (recovery, system, BL)
Choose an username... said:
I passed safetynet on RR, NucleaROM (w/ radioactive kernel), and LOS (The most recent one was Nuclea with Magisk 13.2). I can't verify if Android Pay works because we're just one step ahead of trading stuff here But I think I've seen some people who have been able to use it. Just a friendly reminder:
DO NOT LOCK THE BOOTLOADER IF NOT EVERYTHING IS STOCK (recovery, system, BL)
Click to expand...
Click to collapse
Everything (including Pokemon) works for me except pay. Selinux is set to enforcing, but cts profile match fails soi fail safetynet. Play store shows me as uncertified.
Los Dark rom has the kernal patch so it passes Safety Net

Android Pay and custom ROM / rooted phone

Hi,
I am wondering which custom ROM for Oneplus 5 is working fine with Android Pay
I found this guide: https://android.gadgethacks.com/how-to/get-android-pay-working-rooted-device-0164604/ and this one: https://android.gadgethacks.com/how-to/magisk-101-switch-from-supersu-magisk-pass-safetynet-0177578/ , but none of those seems working for me.
Do you have any tips about working solution? I have Xposed installed on my device and I do not wish to stop using the framework (which is sadly one of the reasons I am not updating to Oreo right now, Xposed is kind of dealbreaker for me regarding switching to Android from Windows Phone).
Thanks for replies!
Unfortunately, Xposed is your problem. Xposed trips SafetyNet, even if you rooted with Magisk. That prevents you from using Android Pay, as well as other apps that check SafetyNet.

Cannot pass safetynet, no matter wich rom I'm using

I tried so many roms, stock based, AOSP based, every version of android, but it doesn't pass safetynet. It only pass it on the stock firmware, but the latest avaliable is android 4.4.2 and I need at least android 4.4.4.
Someone can tell me please how to pass safetynet, or link me a rom on wich passes?
Have you tried magisk? It is for passing safety.net even if you rooted your phone.
spirit_of_the_ocean said:
Have you tried magisk? It is for passing safety.net even if you rooted your phone.
Click to expand...
Click to collapse
Magisk still doesn't pass SafetyNet and the universal fix doesn't work.
Hello again. Its the same here. I can pass cts with latest LOS 14.1 but a lot of bugs and not working gps. Another compatible rom?

Is it true that samsung made it impossible to root an S8+ with the latest updates?

I seem to remember reading something some weeks ago that Samsung did something in their latest few updates for the S8+ that made it impossible to root them... is that true?
I'm running a SM-G955F - DTM here... and I'd rather keep it rooted. I'm using magisk to root my devices.
Any insights for me?
AFAIK, as long as if you have twrp installed, you can update to whatever you want.
you then can:
make a full backup with TWRP, and Samsung can't do anything against you just restoring the full backup (with the old update and root)
just flash whatever (custom)ROM you want.
You already are rooted, so OTAs aren't a thing for you. I don't know if there even exists a twrp flashable stock ROM, but why don't you just switch to a custom rom (with the newest updates installed)?
Honestly, the only custom rom i know of is lineage (nee cyanogenmod), and at least on my old S5 I found that the fingerprint reader does not work on cyanogenmod. also, anything that checks safetynet does not work either.
[Lemmy] said:
Honestly, the only custom rom i know of is lineage (nee cyanogenmod), and at least on my old S5 I found that the fingerprint reader does not work on cyanogenmod. also, anything that checks safetynet does not work either.
Click to expand...
Click to collapse
LieangeOS isn't even available for our device (infact it is, but unusable).
The custom roms available right now are all stock touchwiz roms with slight modifications (most of them aren't even necessary, thx to aroma).
Look over to a thread like the one from Renovate ICE, most of the time roms like these are based on the newest sources from Samsung with the newest security patch level. It has root (Magisk or SuperSu) included and also passes safetyNet.
As I said in the post above, you always can make a full twrp Backup, try a ROM like Renovate Ice and if you don't like it, just go back to your stock ROM in minutes. :fingers-crossed:

Custom Nougat ROM that is based off stock but doesn't break banking apps?

I've been using ambasadii's Nougat 7 ROM for a while as it enables WiFi calling and doesn't break banking apps if you don't root. Are there are newer ROMS that offer the same functionality (happy to drop wifi calling)
As far as I can tell alot of custom S7 builds change the base kernel / Nougat base which causes Barclays not to work, ambrassidi`s seems to stick to the base.
Thanks for all your help.
Erandel said:
I've been using ambasadii's Nougat 7 ROM for a while as it enables WiFi calling and doesn't break banking apps if you don't root. Are there are newer ROMS that offer the same functionality (happy to drop wifi calling)
As far as I can tell alot of custom S7 builds change the base kernel / Nougat base which causes Barclays not to work, ambrassidi`s seems to stick to the base.
Thanks for all your help.
Click to expand...
Click to collapse
I don't think that it depends what custom rom you have, it's more about what root method you use (Magisk or SuperSU) and that you pass SafetyNet. You can just use Magisk and select your banking apps in Magisk Hide. Be sure to disable Systemless Xposed in Magisk if you use it because it breaks SafetyNet. Reboot your device and check if you pass SafetyNet in Magisk. Your banking apps should be working then.

Categories

Resources