There are many banks that have apps that require you to pass at least the basic level attestation, if not the CTS profile matching that fails the moment you modify any system level resources, even the bootloader

luckily you can force disable CTS so it falls back on the basic level, for most apps at least. You will never have access to Google or Samsung pay though, as it actually knows your phone model should support CTS and will autofail if it no longer reports that it does.

Alongside that apps like Pokemon GO and Netflix also require at least basic attestation to function - demonstrating the DRM and anticheat capabilities of such a system.

[–] CumBroth@discuss.tchncs.de 4 points 1 year ago* (last edited 1 year ago)

https://github.com/Magisk-Modules-Repo/MagiskHidePropsConf

This can help you pass CTS. It worked for me. Funny thing is, I don't even remember which app I did it for. Whatever it was, I ended up not using it after all the trouble. As for my banking apps, they only care about root, so Magisk's denylist does the job.

[–] nudnyekscentryk@szmer.info 2 points 1 year ago (1 children)

I find it funny how the most root-resistant app I've ever encountered is McDonald's coupons app. I can trick Google Pay into working on my rooted phone, I tricked Revolut and two national banks. Heck, even my government-issued digital ID was tricky but I eventually got it working despite root and unlocked bootloader, both of which it didn't like. But McDonald's? None of the workarounds work whatsoever .

[–] CheshireSnake@iusearchlinux.fyi 2 points 1 year ago

I'm rooted and on LOS and can use any app I need (including banking apps, paypal, and netflix - i don't use samsung/google pay). The only app i can't get to work is one stupid food delivery app. It's weird af.