Addressing Safetynet.
Added 2021-07-21 01:08:31 +0000 UTCSome of you may be concerned about the Safetynet/DeviceCheck situation but I'd like to let my patrons know we do in fact have plans to work around it.
And when i say "we"; we've gotten in contact with some that have already bypassed SN on other games who will be assisting us if needed.
I knew when i found the current bypass that it wouldn't be a punishable nor quickly patchable thing.
The current bypass is a problem with "SafetyNetHelper.java", it is not handling network connectivity errors such as having no internet to even fetch an attestation from Google.
However, They have a fallback in the code that is sent in case of a connection error & that's currently what we use as our bypass.
The image shown is from the Official SN attestation documentation & it shows that it is recommended to do network connectivity handling.
Many outsiders claim it's not a bypass- yet it gets around sending an attestation to the servers that do not validate them at this moment.
(It'll require an app update to start validating since the bypass would need to be fixed first.)
(no bans can be done because it's their fault for this loophole existing while also no way of telling if it's exploited externally.)
If we cannot get around the app update coming then there will have to be much progress to be made.
Link to the SN documentation:
https://developer.android.com/training/safetynet/attestation
