Comdirect photoTAN app detecting root

[Laptapper]

If in future we can't get it working with any other tricks may we try this Methode and post the mod APK here

[GUIDE] Remove Root Detection and App Protection from an APK

Hi all! I've been using USAA mobile app for a while now but a recent updated added root detection in which the app would immediately close itself. It was incredibly annoying but I figured out how to remove it and thought I would share it here...

forum.xda-developers.com

 

[eula1977]

I am using termux and cannot access the folder. Please help

 

[CR4NKK]

I am using termux and cannot access the folder. Please help

try these 3 commands:

1. tsu
2. cd /data/data/com.comdirect.phototan/files/
3. sed -i 's/8.5.0/8.2.0/' setup-phototan.json

 

[Asellus]

Or, easier, take a file manager with built-in text editor like the file manager plus, allow it to access /, navigate to the file and edit it using the editor

 

[eula1977]

Thx

 

[eula1977]

Lthx

 

[Asellus]

The path is /data/data/...

And in the session above a blank is missing between ...8.2.0' and setup-phototan.json

 

[eula1977]

Thx

 

[eula1977]

.

 

[Asellus]

You need to get access to / in order to be able to access /data/data. /Android is wrong.

Use

sed -i...

not sed-i.

You must not install 8.5.0, because it detects root w/o Zygisk

 

[eula1977]

Thx

 

[Asellus]

It is changed if you start the phototan app with internet access. Otherwise you need to change it again.

But, to be honest, with this lack of understanding how Android and Linux work you should consider not to root your phone...

 

[hansidieter]

Another solution is using Version 6 or 7 of the photoTAN app. They do not use this PushTAN stuff and do not even need internet. (I use 6.0.6 but I read that 7 should also work)

If you cannot access your comdirect account anymore (because a TAN is needed) go to "TAN-Verfahren wiederherstellen" (TAN recovery) and then select, that you have a "Lesegerät" instead of a "Smartphone".

Now scan with your old version of the app scan the image on the Aktivierungsbrief (activation letter) and then the code on the website.

The old app gives you a TAN. Enter the TAN on the website and you are in.

Guess this will work until comdirct decides to get rid of these dedicated photoTAN devices which hopefully will not happen soon.

Only disadvantage is that "Push PhotoTAN" does not work anymore, you must always scan the photoTAN codes now.

-----------

When this workaround does not work anymore I will consider changing my Bank.

I also an account with ING Diba and they do not appear to do any serious root detection at all.

Even without MagiskHide the ING Banking app does not complain about root.

 

[diemadedrei]

Another solution is using Version 6 or 7 of the photoTAN app. They do not use this PushTAN stuff and do not even need internet. (I use 6.0.6 but I read that 7 should also work)

If you cannot access your comdirect account anymore (because a TAN is needed) go to "TAN-Verfahren wiederherstellen" (TAN recovery) and then select, that you have a "Lesegerät" instead of a "Smartphone".

Now scan with your old version of the app scan the image on the Aktivierungsbrief (activation letter) and then the code on the website.

The old app gives you a TAN. Enter the TAN on the website and you are in.

Guess this will work until comdirct decides to get rid of these dedicated photoTAN devices which hopefully will not happen soon.

Only disadvantage is that "Push PhotoTAN" does not work anymore, you must always scan the photoTAN codes now.

-----------

When this workaround does not work anymore I will consider changing my Bank.

I also an account with ING Diba and they do not appear to do any serious root detection at all.

Even without MagiskHide the ING Banking app does not complain about root.

AFAIK they cannot get rid of dedicated TAN devices because they are regulatorily obliged to offer a SCA method that works without a phone. So your workaround should just continue working

 

[endrancer]

Another solution is using Version 6 or 7 of the photoTAN app. They do not use this PushTAN stuff and do not even need internet. (I use 6.0.6 but I read that 7 should also work)

If you cannot access your comdirect account anymore (because a TAN is needed) go to "TAN-Verfahren wiederherstellen" (TAN recovery) and then select, that you have a "Lesegerät" instead of a "Smartphone".

Now scan with your old version of the app scan the image on the Aktivierungsbrief (activation letter) and then the code on the website.

The old app gives you a TAN. Enter the TAN on the website and you are in.

Guess this will work until comdirct decides to get rid of these dedicated photoTAN devices which hopefully will not happen soon.

Only disadvantage is that "Push PhotoTAN" does not work anymore, you must always scan the photoTAN codes now.

-----------

When this workaround does not work anymore I will consider changing my Bank.

I also an account with ING Diba and they do not appear to do any serious root detection at all.

Even without MagiskHide the ING Banking app does not complain about root.

Version 7.x doesn't seem to enable the camera for me. could activate 6.x though, will see if that's good enough. i have a non-rooted backup device but it's annoying to use that ....

i also can't get the regular comdirect and trading app to work anymore, while on non-rooted device there's no problem.

 

[Laptapper]

Somebody checked out this app for all?
finanzblick Online-Banking

finanzblick Online-Banking - Apps on Google Play

Secure online banking for each account and each credit card

play.google.com

 

[endrancer]

Somebody checked out this app for all?
finanzblick Online-Banking

finanzblick Online-Banking - Apps on Google Play

Secure online banking for each account and each credit card

play.google.com

I'm using Finanzblick to manage several accounts and services, however they are just accessing each banks data endpoints to request for account statement or bank transfer, which will prompt your banks method of tan authentication... So in case for Comdirect it will also send a pushtan which you would have to enable in your regular tan app ... So it's not an replacement for us here...

 

[endrancer]

Version 7.x doesn't seem to enable the camera for me. could activate 6.x though, will see if that's good enough. i have a non-rooted backup device but it's annoying to use that ....

i also can't get the regular comdirect and trading app to work anymore, while on non-rooted device there's no problem.

Ok.

Comdirect and trading app was not working because I added the Comdirect Server to my blacklist (didn't think of that) so this is resolved.

Phototan ... Have tried 6.x, 7.x which unfortunate does not help at all, because after enabling phototan-push there is no actual way back to those apps.

In trading and banking app both applications prompt you to start the phototan app to get your pushtan ... Which will fail for these older versions. So the use case is quite limited the other two apps then not being very useful

I have a working workaround and Backup non-rooted device, will have to wait and see when android 12 and zygisk stable come around for my device.

It's extremely frustrating where as any kind of transaction above 30 euro requires pushtan, ... For the time spending to get a workaround we could've just used the sms tan for the small fee. But I guess we start to take this matter personal.

 

[r4p70r]

addition:
you have to manually enable zygote option in settings after installing the canary version of magisk-app. If you miss that part you cant enable the safenet-fix module. so you should add this as 1a). (its what you basically did under bullet point 6)

unfortunately the whole process doesnt work for me... Redmi note 7, miui EU, android 10

The problem is Android 10
You need 11 or 12.

 

[bgsdeluxe]

Hello everybody.
Am following this thread and came across a strange issue. To avoid any issues with already given and working permissions I did not uninstall magisk and switched to canary version. Before I wanted to try the riru module instead.
After installing the module Magisk wanted to restart system. Unfortunately neither the installation out of Magisk, nor the installation from internal source resulted in riru showing up under installed modules.
Taking a look in the log reveals the following error: sh:20400 unknown operand, followed by a path to a local directory: line 32: install_module: not found
My device is running Android 12 (LOS 19), rooted with Magisk v23 and with working safetynet. No issues with anything so far. Magisk Hide is enabled for Playstore and is working fine. At the moment the issue turned up Magisk itself was hidden. I restored the app by now, but error is still the same.
Might be a wild guess, but do I need to create that path myself perhaps before trying to install riru?

Any hint is highly appreciated! Thanks in advance!

EDIT: Nope, that didn't solve the issue. Log still mentions install_module: not found
EDIT 2: Weird...after re-installing Magisk within Magisk itself, modules can be installed now. Safetynet still fine, but although Magisk is hidden again, riru + riru unshared are activated and all options within Magisk Hide for the photoTAN app are enabled it still detects root. Looks like this method isn't working. Although this was reported here earlier I wanted to try for myself, before going on with any other weird method (airplane mode, older versions...those are definitely no options for me!).