Does CarbonROM come with L1 security level and safetynet pass? - OnePlus 8 Pro Questions & Answers

Hi,
I'm planning to flash CarbonROM to my OP8P and wondering if the ROM comes with the following.
DRM Info - Security Level L1
YASNAC Safetynet - Basic Integrity & CTS profile match
I don't want to root my device, but still want to enjoy custom ROM with banking apps.
I've tried different profile for banking apps, but not quite satisfied.
Thanks

If you've got any of the 8 series. Just install EvoX.

Related

Xposed on Nougat: Yes, we can

Guys, as many of you will know, there is an unofficial port of Xposed to Nougat.
I wanted to let you know that a couple of us jumped ship, upgraded to Nougat and then flashed Magisk/Xposed.
Things worked out pretty well, all considered.
In my case, T819, Stock Nougat, Magisk 13.3 + systemless root + systemless Adaway, Xposed Sdk 24 for Magisk.
Basically all of my modules are working (with a few quirks).
For all of you who were waiting for Xposed before upgrading.
P. S. Be aware that this Xposed version is not the official release by Rovo, and is basically still a hack. You have been warned.
Could you name a few of your modules you are currently using?
Interested in Minminguard, RootCloak, and Youtube adaway.
I am currently using:
- Bootmanager : looks like it is working just fine
- Intelli3g : working fine
- Exi for SwiftKey : working fine
- AppSettings : works only with some apps
- NoDeviceCheck : works as expected, but it is best effort anyway
Roughly speaking, MinMinGuard behaves a lot like AppSettings: it definitely works, but I had a few FC, and so I have temporarily disabled it.
Greenify is not safe to enable yet. Amplify might be, but I didn't yet.
Does it need deodoxed rom?
Does SafetyNet pass?
I am on 6.0.1 and everythign is fine with Magisk until I try to install the xposed 23 module which results in a stuck booting screen.
No, I does not need deodex. In fact, I am on stock (no custom ROM for the T819).
Safety net check passes just right, until you activate Xposed, but this is known stuff.
For anyone that is interested, there is a thread in the Xposed forum with the list of modules that work with this port.
I also want to mention that rovo89 stepped in a few days ago, to announce that the official release of Xposed for Nougat is close, it will probably be out in a few weeks. I guess all of these Oreos are making Nougats start stinking a bit already... :laugh:
can you give a link?

WideVine L1 DRM and downgrade to nougat !== level 1 security :(

I got my 5t today (with a lot of scratches on screenprotector :crying
And i was shocked when i installed oxygenos 4.7.4 and DRM info... My level 1 was gone :crying::silly:
I just reverted back to oreo / oxygenos 5.0.4 and luckily the level 1 security came back.
So you cant have level 1 and nougat oxygenos 4.7.4 / 4.7.5 and 4.7.6!
But it is back when i flashed latest update 5.0.4
Why do you want Nougat? Just use Oreo, is better.
donalberto17 said:
Why do you want Nougat? Just use Oreo, is better.
Click to expand...
Click to collapse
yeah i try to upgrade tomorrow i think. But i liked nougat...was very stable.. also with all magisk modules and xposed :good:
You can use magisk and xposed on Oreo
Widevine L1 requires 5.0.3 or higher.
Check my NCNO thread on this forum.
on nougat at least blueooth was working good, on oreo it is a mess

MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0

Universal SafetyNet Fix
Magisk module​
Magisk module to work around Google's SafetyNet attestation.
This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS profile attestation, which requires a valid combination of device and model names, build fingerprints, and security patch levels.
If you still have trouble passing SafetyNet with this module, use MagiskHide Props Config to spoof a certified device profile. This is a common issue on old devices, custom ROMs, and stock ROMs without GMS certification (e.g. Chinese ROMs).
Android versions up to 13 Beta 3 are supported, including OEM skins such as Samsung One UI and MIUI.
How does it work?
The way this workaround works is relatively low-level. An in-depth explanation, as well as source code and ROM changes, can be found on GitHub.
Ideally, this workaround should be incorporated in custom ROMs instead of injecting code with a Magisk module. See the ProtonAOSP website for more information.
Downloads
Downloads and changelogs can be found on GitHub. The topmost release is the latest.
Latest release
v2.4.0
Spoiler: Changelog
Highlights
Play Integrity bypass without breaking device checks or causing other issues
Disabled use of hardware attestation on Pixel 7 and newer (@anirudhgupta109)
Other changes
Updated instructions for newer Android and Magisk versions
Better debugging for future development
This version only supports Zygisk (Magisk 24 and newer).
It's taken a while to find a way to bypass Play Integrity that doesn't require spoofing the build fingerprint permanently, but I wanted to make sure this module doesn't cause any unnecessary breakage. Just like the original goal of Universal SafetyNet Fix, this minimizes adverse effects by spoofing dynamically at runtime only when necessary. Enjoy!
If you found this helpful, please consider supporting development with a recurring donation for rewards such as early access to updates, exclusive behind-the-scenes development news, and priority support.
Alternatively, you can also buy me a coffee. All support is appreciated
Source code
Note 8 pro Android 9 and Android 10 not working
Tested succesfully on Pixel 4a 5G, but Google Pay says "Your phone doesn't meet security requirements" even though PayPal can be set up.
Magisk Hide is activated.
Magisk says SafetyNet passes but Google Pay still doesnt
Dydnlee said:
Note 8 pro Android 9 and Android 10 not working
Click to expand...
Click to collapse
Please test it again with this version: https://github.com/kdrag0n/safetynet-fix/archive/e82c3d0674e6452938e49bc6ee6848aa2a603c27.zip
[QUOTE = "kdrag0n, gönderi: 84286879, üye: 7291478"]
Lütfen bu sürümle tekrar test edin : https://github.com/kdrag0n/safetynet-fix/archive/e82c3d0674e6452938e49bc6ee6848aa2a603c27.zip
[/ALINTI]
İnstall failed
Thank you a lot, Universal SafetyNet Fix v1.1.0 working excellent on Xiaomi Mi 9T, Xiaomi.eu 21.1.6, MIUI 12.5 / Android 11 Beta
Device certified but not using Google Pay
Safety net fix 1.0.2 worked for miui Eu 12.0.3.0 Android 10 for Poco F1.
Only that the ocbc bank Singapore app still able to detect the root and became unusable.
But I know that this doesn't relate to safetynet fix here because the issue already existed before the CTS false.
tylerdurden said:
Tested succesfully on Pixel 4a 5G, but Google Pay says "Your phone doesn't meet security requirements" even though PayPal can be set up.
Magisk Hide is activated.
Click to expand...
Click to collapse
Clear app data from Google pay aswell as Google play services.
Tested on Samsung S9:
- 1.0.2 worked in MM, but Root Checker said 'cannot access GPS'.
- 1.1.0 fails ctsProfile in MM, but Root Checker now can access GPS, also returns ctsProfile fail.
Massive thanks for this. Version 1.1.0 confirmed working on my device:
- Pixel 3, stock room
- Magisk 21.2, magisk manager 8.0.5
- Magisk hide enabled and magisk manager renamed
All banking apps and google pay work correctly, including contactless payments.
working on poco f2 pro,android 11,rom one os thanks
Tested on Huawei Mediapad M5 with EMUI 9.1.0 and Magisk 20.4:
- 1.1.0 fails ctsProfile in MM, basic integrity is ok
Working OK on Mi Note 10 Lite, Android 10 and ROM xiaomi.eu
Thanks
I tried this on my Samsung Galaxy A6 (official samsung firmware patched with magisk) - and even version 1.1.0 causes bootloop when using zip inside Magisk Manager - Android 10
Good morning. Working on Redmi Note 9 Pro xiaomi.eu 12.0.1 Android 10. No MagiskHide Props Config needed: basicIntegrity passed, ctsProfile passed, evalType BASIC.
Thank you so much
MI10 Global with V12.2.8 xiaomi.eu , used V 1.0.2 works
Thank you!
Works on pixel 3a, last A10 patch, using magisk hide props config to force basic attestation. Was already using mhpc so not sure if it works without it. Fixed my CTS issue though, so thanks!
@kdrag0n Thank you so much for this awesome masterpiece!
I find it a bit interesting, that I experience a problem which nobody else seems to have reported so far. I'm using a Galaxy S10 (Exynos, G973F), rooted with latest canary Magisk, no EdXposed or whatsoever...
If I enable this module, no bootloop, basic attestation, CTS passes. "Yes", so I thought...
The problem now... My bank app tries to access the keystore and crashes. This does not happen without having this module enabled... I have attached a fully logcat and hope that you have some insights...
EDIT1: re-attached file, didn't work on the first go.
EDIT2: oh... search for "easybank" or "keystore"
EDIT3: Android 11, One UI 3
POCO F1 user here. After flashing the module the phone stucks on the Google logo at boot.
The MHPC module didn't solve the problem either.
ROM: Pixel Experience 11 Beta (20201223)/Encrypted

Rom to degoogle phone?

I'd like to increase the privacy of my phone. I'm looking for a compatible open source ROM for the Xiaomi Mi 9T with the latest stock android firmware without any bloatware from google or xiaomi. Better if it's a popular ROM so I can find support more easily.
After I install the ROM I'll follow this phone hardening guide: https://lemmy.ml/post/128667
arturojr said:
I'd like to increase the privacy of my phone. I'm looking for a compatible open source ROM for the Xiaomi Mi 9T with the latest stock android firmware without any bloatware from google or xiaomi. Better if it's a popular ROM so I can find support more easily.
Click to expand...
Click to collapse
ArrowOS
arturojr said:
I'd like to increase the privacy of my phone. I'm looking for a compatible open source ROM for the Xiaomi Mi 9T with the latest stock android firmware without any bloatware from google or xiaomi. Better if it's a popular ROM so I can find support more easily.
Click to expand...
Click to collapse
davinci
This is the official rom from MicroG based on the latest LineageOS.
I run this now since 2 years. Its awesome. You wil get every month a new build and a notification to update. So you will get allways the latest Android security patches!
My privacy combination is:
-MicroG LOS Rom
-AuroraStore with local gnerated anon account - https://auroraoss.com/download/
-AuoraDroid - https://auroraoss.com/download/
-Aurora Services (for auto updates of apks) - https://gitlab.com/AuroraOSS/AuroraServices/-/releases
-AppManager - https://f-droid.org/en/packages/io.github.muntashirakon.AppManager/
-Bromite - https://www.bromite.org/
-NewPipe - https://github.com/polymorphicshade/NewPipe/releases/
I_did_it_just_tmrrow said:
davinci
This is the official rom from MicroG based on the latest LineageOS.
I run this now since 2 years. Its awesome. You wil get every month a new build and a notification to update. So you will get allways the latest Android security patches!
My privacy combination is:
-MicroG LOS Rom
-AuroraStore with local gnerated anon account - https://auroraoss.com/download/
-AuoraDroid - https://auroraoss.com/download/
-Aurora Services (for auto updates of apks) - https://gitlab.com/AuroraOSS/AuroraServices/-/releases
-AppManager - https://f-droid.org/en/packages/io.github.muntashirakon.AppManager/
-Bromite - https://www.bromite.org/
-NewPipe - https://github.com/polymorphicshade/NewPipe/releases/
Click to expand...
Click to collapse
Rumors are that LOS for davinci will no longer be maintained.
heinhuiz said:
Rumors are that LOS for davinci will no longer be maintained.
Click to expand...
Click to collapse
Yes that's true but just because a certain developer doesn't want to update to the next Android version, it doesn't mean it's over with LineageOS for davinci.
NeoArian is apparently working on an Android 12 LOS version:
shared files by arian
Download shared files by arian for free. mostly android related. None
sourceforge.net
GitHub - xiaomi-sm6150/android_device_xiaomi_davinci
Contribute to xiaomi-sm6150/android_device_xiaomi_davinci development by creating an account on GitHub.
github.com
The nice thing about MicroG is the fact that more apps still work. Yes, many other roms offer signature spoofing which is a prerequisite for microG but it never worked as well for me as the in-house LineageOS rom build from microG itself.
I've installed lineage-17.1-20220105-nightly-davinci-signed.zip. Thanks for the suggestions. Just to be sure, since I'm going to follow the 100% FOSS Smartphone Hardening non-root 4.0 guide now, is all the software in Lineage OS 17.1 FOSS (free and open source software)?
I_did_it_just_tmrrow said:
Yes that's true but just because a certain developer doesn't want to update to the next Android version, it doesn't mean it's over with LineageOS for davinci.
NeoArian is apparently working on an Android 12 LOS version:
shared files by arian
Download shared files by arian for free. mostly android related. None
sourceforge.net
GitHub - xiaomi-sm6150/android_device_xiaomi_davinci
Contribute to xiaomi-sm6150/android_device_xiaomi_davinci development by creating an account on GitHub.
github.com
The nice thing about MicroG is the fact that more apps still work. Yes, many other roms offer signature spoofing which is a prerequisite for microG but it never worked as well for me as the in-house LineageOS rom build from microG itself.
Click to expand...
Click to collapse
Thing is that the ROM has to become official (i.e. published on the LOS site) before the microG guys start building it. Many developers hesitate to make their version official, because it comes with responsibilities (in maintenance especially).
That said, there is a Magisk module available that adds microG to custom ROMs that seems to work well with LOS.
I've taken a look at rooting the phone to make adaway more energy efficient but since the device has no ramdisk I would have to boot to recovery every time I want to have root enabled. So I'm guessing most people just don't use this phone with root since it would be too inconvenient. And I'd like to know why Lineage OS doesn't offer a simple way to enable root.
arturojr said:
I've taken a look at rooting the phone to make adaway more energy efficient but since the device has no ramdisk I would have to boot to recovery every time I want to have root enabled. So I'm guessing most people just don't use this phone with root since it would be too inconvenient. And I'd like to know why Lineage OS doesn't offer a simple way to enable root.
Click to expand...
Click to collapse
I don't use LOS but I guess it uses the stock Xiaomi boot.img
If so, then it is absolutely not needed to install Magisk to recovery - as stated elswhere, patch the boot.img and then you boot directly to Magisk with no problem (don't worry that Magisk says Ramsisk No, patching boot.umg works with no problem)
Regarding to built-in Magisk to custom ROMs (old school) - that is discoursged by TJW Magisk documentation. One of the reason is troubles if user wants to update Magisk
(All assuming Magisk for root)
arturojr said:
I've taken a look at rooting the phone to make adaway more energy efficient but since the device has no ramdisk I would have to boot to recovery every time I want to have root enabled. So I'm guessing most people just don't use this phone with root since it would be too inconvenient. And I'd like to know why Lineage OS doesn't offer a simple way to enable root.
Click to expand...
Click to collapse
I'm using it with LOS17. 1 (+ microG) and Magisk, I just installed it following the instructions. I'm using stable 23.0 without problems. Magisk even reinstalls itself after OTA updates.
heinhuiz said:
I'm using it with LOS17. 1 (+ microG) and Magisk, I just installed it following the instructions. I'm using stable 23.0 without problems. Magisk even reinstalls itself after OTA updates.
Click to expand...
Click to collapse
How did you install MicroG? Just want to know if the process is still difficult on a normal LOS.
I_did_it_just_tmrrow said:
How did you install MicroG? Just want to know if the process is still difficult on a normal LOS.
Click to expand...
Click to collapse
I just used the prebuilt version from here. New builds are made approx. every 2 weeks, and install OTA.

Zygisk cannot activate on some old Samsung devices with old kernel (3.19-) ( S7 included )

i have been trying to update my S7E and S7 herolte and have run into a road block.
i love root and have been switching to the new magisk with zygisk, but it always fails for me
and i found this at the magisk github
[Wontfix] Zygisk cannot activate on some old Samsung devices with old kernel (3.19-) #5395​Device: Samsung
Android version: N/A
Magisk version name: N/A
Magisk version code: 24102
For some old Samsung devices, there's a kernel restriction that whenever exec an ELF from /proc, the process can no longer call some systemcalls. For kernel 3.19+, the workaround is fexecve, but it does not exist for the old kernel. Users with those devices should use a custom kernel bypassing such a restriction or a newer version.
so if anyone knows of an android 11 or 12 rom for the S7 &S7E with a newer kernel please post it here. and ill test it out.
thanks for your efforts.
I'm using floyd rom android 10 with magisk 24.3 & zygisk. You also can use LOS 19.1 with magisk 24.1 & Zygisk.

Categories

Resources