Skip to content

v1.0.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Jul 10:42
· 68 commits to main since this release
v1.0.2
e609c12

New keybox mirror, a far more reliable fetcher, a custom-keybox file picker in the WebUI, strong-integrity fixes, and a faster, steadier Action.

Strong integrity

  • The fingerprint reaches PlayIntegrityFork. PIF's zygisk reads custom.pif.prop from the module dir; every fetch path — native, autopif4, and the shipped fallback — now runs migrate.sh to produce that file and enforces the STRONG spoof settings (spoofProvider=0, spoofVendingFinger=1), so STRONG holds with a valid keybox (3 green).
  • Strong survives the hourly refresh. The hourly fingerprint refresh regenerated custom.pif.prop but skipped re-applying the STRONG spoof settings, so ~1 h after boot the fingerprint silently reverted to a weak config (spoofProvider=1, spoofVendingFinger=0) and STRONG dropped even though the WebUI still showed 3 green. The native fetch now enforces the STRONG settings itself, and the hourly loop re-enforces them, so every refresh stays strong.
  • Faster fingerprint. The fast native crawl (~10s) is primary; autopif4 — whose crawl stalls up to ~1 min on some devices — is the fallback.

ROM spoof

  • The disable list now matches PlayIntegrityFork's current engines (adds persist.sys.pp.*, plus AOSPA / PixelOS / Afterlife detection). Uninstalling AlwaysStrong now restores the ROM's own spoof engines — the persist props it set are cleared on uninstall (only if still unchanged), so removing the module frees PixelProps / pihooks / entryhooks again.

Keybox & status

  • Moved to the new mirror: keybox from http://evoker.qzz.io/key, status from /status.
  • The WebUI status now shows which keybox is in use (e.g. evokerrkey27) alongside the health.

Custom keybox (WebUI)

  • New "Custom keybox" toggle — use your own keybox instead of the auto one.
  • Built-in file manager to pick a keybox from storage: breadcrumb path, folder navigation, file size + date, and sort (name / newest / oldest).
  • While custom keybox is on, the module stops auto-fetching (Action shows "custom keybox — skip fetch").

Fingerprint

  • The fingerprint is now fetched by a native crawl of the same Google servers PlayIntegrityFork uses — fast and reliable on devices where autopif4's busybox-wget crawl used to hang. autopif4 is kept as a bounded fallback, and shipped static fingerprints guarantee one always lands.
  • The Action never shows a bare "offline": a failed primary is shown once as "trying with fallback", and it drops through quickly (bounded timeouts).

Fetcher (asfetch)

  • Rewritten to connect IPv4-first — fixes "keybox missing" and stuck downloads on networks that advertise IPv6 in DNS but have no working IPv6 route.
  • Handles http + https, redirects, chunked responses, and custom request headers.
  • Every download (keybox, status, fingerprint crawl, WebUI) falls back across asfetch → busybox wget → curl → wget, so it works on every device.

Misc

  • Removed the "recheck in ~1 min" line from the Action output.
Assets 3
Loading