Magisk: [FeatureSug][MagiskHide] SEQR root detection still works with magisk Hide enabled

[MaxRink]

As Android Pay is not available in Germany yet our best alternative is an app called SEQR.
But MagiskHide fails to hide Root, so it doesnt work.
looking at logcat, my guess is that SEQR also does a ROM-detection via the display_id, which magioskhiode does not obfuscate ( iirc it fails at anything but user)

[ckoehnen]

Is there a process to debug SEQR? E.g. filesystem/api access logging? I don't think SEQR's detection is rom signature related. I think it might be based on some filesystem/folder or configuration modifications rooting causes.

[MaxRink]

Well, by a quick look id say the root detection is ahndled inside their cryptoframework
IDA should be able to debug this on an actual device, i dont have a licence atm tho.

[sour-dough]

I had the same problem since I updated SEQR to its newest version.
A workaround is to install an old version of SEQR (if you don't have a backup, try google, but verify the apk's signature)

Also, I tried changing ro.build.displayid to something sane, but it didn't help.

[fblaese]

The HCE Compliance Checker App (https://play.google.com/store/apps/details?id=com.hce.compliance.checker) might be helpful for further investigation. It should use the same root detection methods.

For me it shows the same error as the updated (06/13/17) Seqr App does in logcat. [Root Management Apps]
For some reason the HCE Compliance Checker doesn't complain about root if it's monitored with strace...

[Iradj]

So on my side I've done some researches too and found out some hints maybe.

• The first thing that i found out is i decompiled the SEQR Version 2.6.23 and 2.6.27 the .23 works with Magisk Hide and the .27 don't. In one smali file that i have found in both, they have pretty much the same root detections (13 root entries ) BUT in the .23 version there is a line with "R_ROOT_BBOX" in the .27 version we don't have the line but instead, we have the R_ROOT_FILES line.
• I downloaded the Root-Inspector from devadvance repo and hide it with Magisk and on Java level search everything passes except the deamonsu that fails that's something that Magisk still not can Mask apparently but on native library level everything passes.
  SEQR 2.6.23:
  
  SEQR 2.6.27:
  
  Root-Inspector:
  

[vueme]

I can confirm everything that @Iradj and @ninov wrote. SEQR v2.6.23 works just fine while v2.6.27 detects modifications/root.

OxygenOS 4.5.6 (Android 7.1.1)
Magisk 13.3 / MAGISKSU (Passing SafetyNet checks)

Hopefully it's something you guys will have time to look into but going with SEQR v2.6.23 is our best bet at this time. Cheers and thanks a lot!

[zozanyo]

Same here with LineageOS 14.1 (7.1.2)...v2.6.23 works... Disabled autoupdate till MagiskHide gets fixed

[Yakie996]

someone has a v 2.6.23 apk? please :)

[BassT23]

http://www.apkmonk.com/download-app/com.seamless.seqr/3_com.seamless.seqr_2017-05-08.apk/

[warpi]

I have also now tested (Android 6.0.1, Samsung Galaxy A3 2017 SM-A320F, Magisk 13.3) the above mentioned SEQR version (it shall be 4.6.23 and not 2.6.23 right?), and with this TAP&PAY does work. SEQR 4.6.29 does not work.

Received below progress on xda-forum by searching for seqr in Magisk General Support thread.
https://forum.xda-developers.com/search/thread/3432382?query=seqr

13th July 2017, 11:02 PM
" For the moment SEQR the latest one (2.6.28) don't work with Magisk Hide because it detects the Magisk Manager and apparently some root files. "
https://forum.xda-developers.com/showpost.php?p=73019269&postcount=16000

[BassT23]

The link I've posted is 4.6.23
For me it works (Tap and Pay) - tested in several Stores in the last few days.

SGS7 flat
Android 7.0 (Superman 2.6.0)
Magisk 13.3 with Hide