Magisk: Google Hired the Developer Who Defeats Their Security

Source: @kanikabk.official on Threads

Content

WAIT… THIS CAN’T BE REAL. A GitHub repo with 61,030 stars defeats Google’s Play Integrity check. GPL licensed.

The repo is called Magisk. It roots your Android phone and hides root from banking apps. It runs Netflix on a phone the Play Store says is uncertified. Also, passes the same fraud detection Google built to stop it.

The Twist

The man who built it is John Wu. He has been maintaining Magisk for nine years.

Since November 2023 he has been a Senior Software Engineer at Google. On the Android Platform Security team. The exact team that builds Play Integrity.

Google hired the person who defeats their root detection. He still ships the tool that defeats it.

The repo is still online after nine years.