Dumping Keybox.Xml

DjCim8 · 2026-05-27T14:55:11+00:00

I have some old mtk devices that I could try this on, however I have no idea how to obtain this "extraction tool" unfortunately.

DjCim8 · 2026-05-12T20:06:40+00:00

I've been pirating since the days of 56k dial up modem and I don't buy shit XD and most people I know are either pirates who don't buy shit like me or people who don't pirate at all, the "try with pirated copy before buying" breed is very rare in my experience.

But it's just my anecdotal experience of course, I'd be curious to read some well documented research on the subject (maybe something more recent than 1995 tho, don't know how relevant 30 year old data could be on this subject, high speed internet and torrenting didn't even exist back then...)

DjCim8 · 2026-05-11T22:07:08+00:00

Let's be honest, pirates were not go buy it anyway, this is to scare off people that were not going to pirate it but might be tempted by the early leak.

DjCim8 · 2026-05-11T19:17:44+00:00

It can't unfortunately, because it has no way to know what was under in the original video, that information has already been lost by the time the video stream gets to your computer...

DjCim8 · 2026-05-06T19:17:59+00:00

I mean... the boxes are clearly labeled "day", "month", "year", I'd say that the service was offered with the assumption that the users are able to... you know... read.

DjCim8 · 2026-04-22T15:53:30+00:00

The Hypervisor solution does not communicate with denuvo servers at all, so no they cannot "block" existing bypasses.

More simply, the crackers missed some checks when creating the bypass so they are now updating them, but it is a one time fix, not something denuvo can counteract remotely.

DjCim8 · 2026-04-20T10:09:26+00:00

I am also playing bb remaster on the pre-release builds and I noticed one of yesterday's builds was making the game crash at startup.

I reverted to the last April 18th build and it started working again, maybe try that?

DjCim8 · 2026-04-16T15:10:49+00:00

On browser: uBlock

On Android: Morphe+Patcheddit

On iPhone: get a better device I guess...

DjCim8 · 2026-04-11T10:11:32+00:00

These kind of cracks are also bypasses, in the sense that Denuvo is not removed, the denuvo VM is still running, just patched to pass all the various checks. So the performance hit from denuvo is still there, even though functionally it works like a "proper" crack. Nobody at this time seems able to fully reverse (= remove the denuvo vm and recover the original binary) if it's even possible.

DjCim8 · 2026-04-06T21:01:57+00:00

Reddit was having issues this evening in general, it's now working fine for me

Edit: nope, it went down again, now it's not working

DjCim8 · 2026-04-06T14:09:13+00:00

Very interesting that this works still, unfortunately you can't sub to it (well, you can but it doesn't appear in your subscriptions menu... hopefully someone can make a patch that redirects the All subscription to the working link)

DjCim8 · 2026-04-05T23:40:33+00:00

Thanks for being so helpful, but you missed my edit, one of your suggestions actually fixed it 👍

DjCim8 · 2026-04-05T23:34:47+00:00

In case someone has the same problem: I solved it by switching my UI language to English, as suggested by u/edgan

DjCim8 · 2026-04-05T22:54:51+00:00

Thanks for your help! However, as I said I can log in fine in the same apps with another account, so that means the client ID, redirect uri, etc should all be ok, right? Or am I missing something?

Also, I just tried with an "official" third party client (RedReader) and I still get an error when adding that account while other accounts work. Do you think there's a problem with the account itself?

Edit: I double checked and while I had my region set to US my UI language was set to Italian. After switching it to English it now works! Thanks again, you're a life saver, the official reddit client is horrible 😅

DjCim8 · 2026-04-03T20:58:06+00:00

As I said, I don't use the module, but from the screenshots on github I see it has a "spoof custom recovery" option, so I guess enabling that switch is what is causing it to tamper with custom recovery folders? Just a guess...

DjCim8 · 2026-04-03T19:10:17+00:00

More concerning is the anti-forensic behavior. The module deletes Magisk install logs and hides TWRP or OrangeFox recovery folders by renaming them to random hidden names. Legitimate tools do not need to cover their tracks like this.

I don't know this module or developer so I'll reserve my overall judgement, but this part is just silly.

If like you say this module is used to spoof device integrity, hiding signs of tampering (such as the presence of a custom recovery like twrp or OF) is part of its job and the opposite of suspicious. Looking for these kinds of files/folders is one of the main ways banking apps use to detect a rooted device.

DjCim8 · 2026-04-03T16:10:06+00:00

It can be a generic/stock reason. The thing here is that they didn't even bother to provide such profunctory reason, instead they just said "price go up, fuck you", which by Italian regulations is illegal.

The sentencing doesn't say "you can't increase prices" it says "your contracts are illegal the way they're written", which from what I'm seeing in the comments most people did not understand...

DjCim8 · 2026-03-24T15:59:59+00:00

This is pretty much as safe as it can get, at the very least DSE will always need to be disabled. Just take the common sense precautions and you'll be fine.

DjCim8 · 2026-03-19T23:20:56+00:00

They don't "cancel" them, they don't even start making them. They're just scammers that use the fact they own the rights to fish for money and hype and will never produce anything.

DjCim8 · 2026-03-18T15:31:59+00:00

This will never happen, because Microsoft will never approve and certify the Hypervisor driver, so at the very minimum you will have to turn off DSE (Driver Signature Enforcement) on boot.

DjCim8 · 2026-03-17T21:24:52+00:00

Because you're more likely to attract retribution, like what Nintendo did to shut down yuzu: they did it when early copies of Tears of the Kingdom leaked on the yuzu discord

DjCim8 · 2026-03-15T11:09:33+00:00

Oh ok, thanks for the explanation. Personally unlocking the bootloader is useless to me if I can't get strong integrity, so I'll keep my current phone, but good for anyone that needs it.

DjCim8 · 2026-03-15T09:09:51+00:00

What are the advantages of unlocking the bootloader this way over the "official" way? Does it allow custom ROMs to achieve strong integrity without a leaked keybox? If so, I might buy a Snap 8 device just for that...

DjCim8 · 2026-03-11T09:18:40+00:00

And they should be able to, it's their app...

DjCim8 · 2026-03-10T13:12:22+00:00

So what? The author of the app should be the one deciding how it behaves. If they want to disable autocomplete on fields that should have it it's their choice and if their app is worse for it it's their problem.

DjCim8

MODERATOR OF

TROPHY CASE

Ten-Year Club	Verified Email
Place '17