-
Notifications
You must be signed in to change notification settings - Fork 111
Description
See i have seen this project github issues and i have complete idea of what you said to those peoples who were demaning for source code of actual logic and i know the purpose of this project and why you didnt provided the main thing, BUT i think it will be better to highlight this key fact on the top of the main repo in bold words that this project has frontend code only open sourced (if you want to mention those reasons of yours, you absolutely can) but atleast this much should be mentioned, so that people dont waste their time in opening files and folders of this project and seeing no valuable logic which everyone wants at the end of the day, so that they can try to fix stuff which they cannot as you also mentioned in those messages.
Btw i personally like this project, but this project's goal must be understood by everyone( or atleast by those main devs of those great modules which helps us in maintaining our root supreme powers) , so that they can improvise those projects and add more randomization in it, so that good devs like you or bank/big companies cant just read source code of those foss solutions and develop fingerprint and ulitimately detect+block us from accessing our apps. Maybe you can guide them to achieve randomness in those specific projects or something better, so that they cant be fingerprinted and easily detected by anyone. kernelsu Susfs module has many things to spoof or randomize stuff and that had made people bypass many security checks, so i guess similar approach must be followed ?
i also have a question for you. If you could answer it from a security researcher's perspective, that would be great - Why companies dont detect custom roms directly and block users ? Max custom rom users have to root their devices to pass checks of playstore and other detections like bootloader, buildprops etc. In today's world i dont think it is possible for only pure custom rom users to exist without root, and detecting custom rom is not that tough because there are specific running apps of lineage, system apps of lineage or specific custom roms in specific system directories plus there might be some specific custom os properties too (which might be not possible for us to spoof or they can combine several sus things and stop us) , so why are they not making that much efforts ?
I know that custom roms package names can be randomized as well and many can be removed too, but this is just one example. There must be some more ways to detect custom rom which cant be spoofed ? i am curious about why they are not making more efforts in detecting customs roms and making things painful for devs+users of custom roms ?
You also must have found something unique in all custom roms which might not be spoofable or removable plus it can be detected too by normal apps ? You by yourself have added some good custom rom checks, so i am just curious to know why they all are not aiming for custom rom detections.
I mean we can root in miui or other companies stock rom too. We can make sh** stock roms like miui, realmeui, etc bloatfree and still have root powers but i just dont understand why they are not making enough efforts to annoy everyone :-)) .
I also want to know how tough/time taking it was for you to create detection patch for tricky store,pif etc ? Why cant those companies devs do the same task like you did and make things painful for all community ? Is it not worth it for them to spend time on it because source code will be changed again and again ;-) or is there another reason I can't think of ?