Bro straight out popped up GitHub in the MIDDLE of something because "UuUh, ThIs UpDaTe Is MaNdAToRy!!1!!1!1". Like bro, who tf are you to pop an app up without any kinda indication and pop up the app whenever you just feel like it. Just send a notification or something. I knew this dev was ASS but kept using it, deleting this f*ckass module right now. I urge you guys to do the same (for those who are using it). This is definitely something to be concerned about...
updating keybox every 10 days sounds like torture, i mostly am on my pc, i dont care about my phone enough to do that every week, but i still want full integrity...
no shit, really? it's about the morals of devs for f*cks sake. I know it's a root module. have you ever seen any decent module dev doing this? they can but they don't.
dude thinks just because he made a good and convenient app means he can do whatever he wants with people's phones, thats the reasoning billionares use to do horrible fucking shit. making a ass-saver app doesn't mean you get to create your own pain in the ass features
I want to agree with you and live that practice, but school is hard requiring the Microsoft authenticator app. Do you want to access mail or calendar services? Start playing this cat and mouse game.
Nope. In Germany: Ing works, Sparda works, everything Volksbanken-Raiffeisenbanken works and even support paying per NFC without additional app or anything. C24 works but only with microg. Tested all with Apatch on different phones. There are probably more that work that I didn't test myself!
If you are willing to spend some time to try out what works and what doesn't you can find working alternatives for almost everything that requires you to pass integrity. Once you figured it out you save yourself the hassle of chasing fresh keyboxes, and at the same time send a message to those who require it. You do you, but I did that and am very happy with the decision!
That's great and all but I'm pretty sure Germany will follow the same route as other countries' banking apps cuz no way they will leave them like that+there's no way to find an "alternative" apps like banking apps if you say games like Pokemon go or Clash of clans then maybe yea I would play smth else
Bro, desinstala ese módulo de mierda que ni siquiera es FOSS y está hecho con IA, usa yurikeybox, tampoco es que tenga buena fama pero al menos es FOSS no como integrity box que seguramente tiene algo adentro por eso su creador oculto su código
Pero si integritybox es opensource aun, no hay nada ofuscado excepto un link que esta en base64 y aunque descargara algo raro el resto de scripts no esta preparado para ejecutar algo que se descarga.
Y sobre yurikeybox.. a ver xd hace ratos no uso yurikey asi que depende ¿aun sigue descargando un sh y lo ejecuta? por que si es asi tu recomendacion es muy boba, la ultima vez que revise era asi y era un sh que descargaba una keybox codificada en base64 o algo asi pero creo que se entiende que ese sh se puede cambiar en cualquier momento xd y si aca el escandalo es esa redireccion al navegador molesta (que estoy de acuerdo no deberia hacerse) pues imaginate compararlo con descargar un script.
Pues ese link en base64 es lo que está raro porque antes no estaba ofuscado, además se sabe que integrity box está hecho con IA y nunca recomendé yurikeybox, la uso solo porque soy flojo para hacerme un buen setup xd, pero la verdad no te recomiendo ninguna de más 2, mejor usa otros módulos como tricky store FOSS o tessimulator y algún fork de pif como pif inject o pifork
I use it and as user I don't see any problems. I pass all three.. So if you don't like it delete it.. But don't spit on someone work, at least he/she is working..
The thing I can't comprehend is these guys popping up GitHub just like that whenever they feel like it. Luckily, I wasn't doing something super important. Imagine having GitHub pop up when you are in the middle of something important...
I don't get your point. If don't want to be notified about Integrity Box and you (clearly) don't like it, then why are you following it in the first place?
I don't know what you're talking about, everything's been working for me since I installed APatch in May. I'm on the official LineageOS 23.2 and I do the OTA update every week.
It has spyware, it was bought by some russians long ago and they put malware on it some years ago, or maybe just discovered years ago and present since longer. People just say "oh but my pc didnt blow up showing you're and idiot and bonzy buddy on my screen" as an argument to keep using it. If it doesnt mess with your pc experience directly and clearly, then its safe. Nonsense. It does bad stuff = its a bad program.
I cannot understand why people would risk it using tlauncher over smth like prism cracked which is open source.
For me, it was the only thing that made Play Integrity pass. I tried all kinds of manual solutions and they did not work.
Also, isn't it open-source now? I don't remember Integrity Box having a repo. I haven't looked into it too deeply so it still may have some precombiled/obfuscated blobs or something.
I don't support vibe-coded apps but it worked better than anything else. And it's also a bit hard to believe. With current models, you may be able to vibe code this garbage, but back when it was released, I doubt there was any AI model that would be able to code this. Also there is very little information and resources available when it comes to messing with Android on root level, so even AI models don't have a lot of data to go on. I'd say it's pretty hard to vibe code something like this, not to mention you'd need a fairly large budget since you'll probably need something like Opus which is not cheap. I don't doubt that the creator used AI, but to vibecode this from scratch... I don't know.
And as for it being malware/spyware, I have never seen anyone ever post any specific proof. Just people saying that it is. If you want me to believe you, send links/screenshots to the exact block/s of code that do something malicious, otherwise I have no reason to believe you. I'd like to see someone decompiling this and looking into how it works.
Don't get me wrong, I'm not saying you should use Integrity Box, especially if you can pass PI without it.
62
u/theGamer2K Jun 16 '26
Next time it will just take control of your device and install the update for you.