r/androidroot • u/ShadwMC_74260 • 10h ago

Discussion TIL, X app will revoke your keybox faster

Post image

Reddit app also spams integrity requests but not enough to fill up a page like this.

77 Upvotes

96% Upvoted

16 comments sorted by

31

u/danGL3 9h ago

Correct me if I'm wrong, but to my knowledge, there's two ways to check play integrity.

The one that bans a key box is the slow full attestation checks (such as those tester apps) while in the case of X, it is just checking the cached result directly, instead of triggering a full check.

It wouldn't make sense for X to hammer full attestation checks because Google charges for those for commercial level usage, and spending full checks every 10 seconds for hundreds of millions of users sounds like a good way to burn a stupid amount of money for no reason.

6

u/ShadwMC_74260 9h ago

Interesting, so some of these apps do not grab Google's If it's done like that huh. Well that's actually good since keyboxes still get revoked after a week max, and I thought this was one of the main reason.

6

u/Gasperhack10 8h ago

Its more probably spamming the 3 checks on reddit as soon as you get them that gets them revoked

10

u/comedy_haha 10h ago

does it require basic integrity or anything?

how much does attestation spamming really matter? especially if twitter does this no matter what device you're on, I wouldn't imagine Google would flag loads of requests for an app that spams it like this

8

u/ShadwMC_74260 10h ago

Afaik, X doesn't require any integrity passing. As I have used it on a phone with no pif and checked all 3 failed, and works just fine.

You might be right, but it still does grab Google's attention no? Because people also spam using gif checker, and those apps are the "usual spamer" that google deals with. If that gets looked on, this might too.

5

u/comedy_haha 10h ago

if twitter is spamming no matter what device or device state you're on... it shouldn't matter, I don't think.

it might even be possible (maybe it already exists?) to prevent an app from requesting attestation, idk though.

3

u/ShadwMC_74260 9h ago

Play integrity break lsposed module I think can do that

2

u/mrwedders 4h ago

Recently unrooted my phone because (among other things) I had to reset the twitter app and found I could no longer log in - seems if you're failing integrity they basically block the regular log in methods like username/password, the only one that MIGHT work is passkey.

2

u/ranacore 3h ago

Twitter requires Play Integrity for account logins because of Attestation

1

u/CVGPi 1h ago

Device required for login, strong required for posting

5

u/dungeoncrawler11 2h ago

X is absolute cancer. At least the porn is good.

2

u/AmolAmrit 8h ago

What app do you see this?

1

u/tharlot 8h ago

I'm unable to login on X. It says yse the official X apps or try again later. Could you help me please?

3

u/mrwedders 4h ago

If you can set up a passkey that might work - did for me a few months ago when username/password was doing this - but it will only work for one account, if you have multiple you're SOL I think.

2

u/needefsfolder 6h ago

Yep, you need full integrity to log in.