TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Pokemon Go, Security, and Obsolescence

172 点作者 psyonix超过 8 年前

14 条评论

pwnna超过 8 年前
Now Niantic&#x27;s decision to disallow root devices, imo, is pretty regretful, as serious botters will likely be able to get around that restriction regardless. This only serves to punish users who are stuck between having a root-enabled custom ROM or a stock ROM where critical root exploits may exist.<p>One thing that I observed is that no one seems to be interested in producing a ROM that is both stable, has a variety of features, do not rely on root, and supports the device for a long time.<p>This is a shame really, because root itself breaks the security mechanism for android and users probably are not fully aware what it means when they grant applications root.<p>I personally got around this problem by compiling a build of CyanogenMod without root enabled, but with things like FDroid (with PrivilegeExtension) and adblock built-in to the ROM itself (albeit the update mechanism is to update the ROM it self). This is not a solution for the mass majority of users.<p>This problem is pretty difficult to solve and it is pretty deep, much deeper than what I&#x27;m willing to type in a single comment, so I&#x27;ll stop here.
评论 #12717299 未加载
评论 #12717490 未加载
评论 #12717435 未加载
评论 #12718126 未加载
评论 #12717333 未加载
评论 #12719825 未加载
评论 #12719281 未加载
评论 #12720434 未加载
评论 #12717798 未加载
nfriedly超过 8 年前
I stopped playing Pokemon go when they put out the no-root update. I have never cheated, I even purchased some coins - I was a paying user. But they don&#x27;t seem to want my money, and I&#x27;m not going to unroot my phone for a stupid game. I uninstalled it and ask for a refund. (They haven&#x27;t granted it yet but I&#x27;m not giving up. I believe I&#x27;m in the right here and they owe me a refund since they&#x27;ve removed the functionality after I paid.)
evilDagmar超过 8 年前
Yes, Niantic was <i>very lazy</i> in their attempts to stop spoofers and botters. Rather than write some code to actually look for the few pieces of software the cheaters are using, they just started invoking Android&#x27;s SafetyNet. Notably, very little was accomplished.<p>The problem? SafetyNet does not care about game spoofers&#x2F;cheaters. That&#x27;s literally not what it was designed to do. Pokemon Go does not represent &quot;planned obsolescence&quot;. It represents Niantic being too damn lazy to search an array result for &quot;Xposed&quot; and instead invoking something that will make it look like they expended some effort.<p>It takes about five minutes to make a stock CyanogenMod device &quot;compatible&quot; with SafetyNet. All you have to do is rename two files, specifically &#x2F;system&#x2F;xbin&#x2F;su and &#x2F;system&#x2F;bin&#x2F;su. Boot into recovery (TWRP or whatever you have), and start a terminal from there (where you are as &quot;root&quot; as root gets, and this will always be so) and type `mount &#x2F;system` to start. Next, rename those two files. Lastly unmount &#x2F;system and boot normally. SafetyNet will be happy, which means Pokemon Go and Android Pay will also be happy. If you want &quot;root access&quot; back on your phone, all you have to do is go back into recovery and rename those two files back to what they were.
pja超过 8 年前
You can unroot CyanogenMod running on the Nexus 4 &amp; Pokemon Go will run just fine. You have to give the SuperSU app root privileges in order to unroot ironically, but it works just fine &amp; you can always root your system from the bootloader in the future if it turns out that you need root for some reason.<p>There’s an app in the Play Store that runs the tests the Google library that Niantic is using to check whether a phone is rooted or not (it’s the same tests used by the Google Pay infrastructure IIRC).
评论 #12717643 未加载
raimue超过 8 年前
After all, the root blocking in Pokémon Go is pretty weak. All I had to do was to rename&#x2F;move the &#x27;su&#x27; binary and then it worked again.
评论 #12718606 未加载
brbsix超过 8 年前
It should be pretty easy to get around this by using Magisk[0] systemless root, is it not? Magisk is able to pass Google&#x27;s SafetyNet tamper detection API which IIRC is what Pokemon Go uses to detect root. Works for Android Pay at least, which also prevents use of the app on rooted devices.<p>[0]: <a href="http:&#x2F;&#x2F;forum.xda-developers.com&#x2F;apps&#x2F;magisk&#x2F;official-magisk-v7-universal-systemless-t3473445" rel="nofollow">http:&#x2F;&#x2F;forum.xda-developers.com&#x2F;apps&#x2F;magisk&#x2F;official-magisk-...</a>
nradov超过 8 年前
I find it both hilarious and disappointing how much effort is going into an escalating arms race between video game cheaters and cheat detection. Considering that the players can&#x27;t even win anything of real value. I think future archaeologists will see this whole thing as a bizarre ritual and struggle to understand what was really going on.<p>&quot;A strange game. The only winning move is not to play. How about a nice game of chess?&quot;
评论 #12722594 未加载
minimaxir超过 8 年前
See also, a comment from a Pokémon GO map developer on the latest API changes&#x2F;rootblocking: <a href="http:&#x2F;&#x2F;www.twitlonger.com&#x2F;show&#x2F;n_1sp6pkg" rel="nofollow">http:&#x2F;&#x2F;www.twitlonger.com&#x2F;show&#x2F;n_1sp6pkg</a>
curiousgal超过 8 年前
Surprised people are still playing Pokemon Go. Niantic made all the wrong moves.
评论 #12717538 未加载
评论 #12721078 未加载
评论 #12717354 未加载
评论 #12717445 未加载
Kenji超过 8 年前
When I have a choice between Pokemon Go or root, I choose root every single time. I loathe Niantic for this stupid decision. The equivalent would be if Riot decided that League of Legends can only be played on PCs with a guest account and not an admin account. Completely pointless and dumb. I can&#x27;t believe I bought some stuff in the Pokemon Go store, I want a refund. They robbed me, a legitimate and paying customer, of the ability to play the game on my device. This borders on fraud.<p>This practice needs to be stopped. There needs to be a simple app that can be installed that completely shields from, blocks and stumps this fascist SDK that detects root. And every custom ROM should have it installed by default. The problem is obviously bigger than Niantic. The problem is that people think we shouldn&#x27;t fully own our phones and that such a mindset is acceptable.
评论 #12718618 未加载
nayuki超过 8 年前
This story hits close to home - I have the exact same problem as the blogger. I own a Nexus 4, run the latest CyanogenMod 13, played Pokémon GO for a while, and was blocked in the September update. I never used the root features of my phone, and tried some attempts to remove the root without success. Shame on Niantic for being so heavy-handed on its users.
shadowmint超过 8 年前
For all I want a good tracker, and the sympathy I have for friends I have with rooted devices who can no longer play...<p>Niantic is not beholden to anyone to release anything, add any features, or do anything.<p>Its their game.<p>If you don&#x27;t like it, either a) don&#x27;t play, or b) make something better.<p>It&#x27;s a testament to the compellingness of the AR game genre, and the brand recognition that Pokemon has they so many people are willing to put so much time and effort into the game <i>despite</i> how primitive it is.<p>People calling for an open API are fooling themselves. Why on earth would they give away the keys to the kingdom?<p>Hacking the protocol and the cheaters created this situation.<p>They have only themselves to blame for it. Cry. Me. A. River.<p>You might say that serious cheaters can bypass the restrictions &#x2F; measures, but clearly from the fuss (and that fastpokemap is still down), its doing the intended job pretty much spot on.<p>Realistically, nothing is going to change, unless someone starts offering a compelling alternative to drive innovation.
评论 #12717499 未加载
评论 #12717979 未加载
Fiahil超过 8 年前
After Niantic&#x27;s move to &quot;encrypt&quot; API calls (which was broken a few days after, btw), I&#x27;m not surprised they would arbitrarily block some devices based on phony explanations.<p>Bear in mind, bots have little to no effects on the game itself because you have little to no virtual interactions with other players. It&#x27;s not like you were able to trade Pokémons you caught with someone else.
评论 #12718165 未加载
评论 #12718290 未加载
rotub超过 8 年前
<a href="https:&#x2F;&#x2F;www.instagram.com&#x2F;p&#x2F;BLm2lNxgXco&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.instagram.com&#x2F;p&#x2F;BLm2lNxgXco&#x2F;</a>