development

[naive kraken]

what exactly

CS_DEBUGGED is easy to get

without krw

ptrace

idk what exactly is needed to use ptrace though

you can always use the PPL bypass of Fugu15

maybe you can get it with just PAC bypass too

idk

[hasty ruin]

15.5 betas

[steady nest]

until fugu16 drops in 9 or so months

enough time for you to call me stepfather too

[faint timber]

[naive kraken]

yeah but that's nothing new, PACless jailbreaks are dead and PPLless jailbreaks will be unstable in 15.2+

he tried saving us but nobody bothered to do anything useful with it

[steady nest]

btw why would we need to write to the physical address space

[naive kraken]

no clue the PAC bypass of Fugu15 needs it

there is an "attachme" binary in xina you can reverse

I suspect that's what xina uses to get CS_DEBUGGED

but it's really not rocket science

[steady nest]

hum

[naive kraken]

oobPCI is the kernel exploit?

badRecovery is the PAC bypass for that matter

and I know of this requirement because I read the code

[steady nest]

yep it's the kernel exploit

[naive kraken]

it uses driverkit to get phys rw

[steady nest]

yep

I had a rough idea it was because of the kernel exploit so I went into the presentation again

[naive kraken]

You can do it from a normal process too but you somehow need to get an IOBufferMemoryDescriptor mach port to your process

then you can find that object in kernel memory and patch it to get physrw

there is a twitter thread here https://twitter.com/cutesmilee__/status/1596190896915042305

Tommaso (@cutesmilee__)

@MiscMisty @opa334dev @Jakeashacks @xina520 yeah that would probably work too and it’d be way better than my hacky solution

Twitter · Nov 25, 2022, 5:15 PM

[primal perch]

john xina

hopper decomp

get ida home like evelyn its cheap

dude cant afford 1$/day

[steady nest]

it's capt what did you expect

[primal perch]

fr

[steady nest]

man can't use ida

[primal perch]

capt when he lives in the 7th richest county in virginia

[steady nest]

or ghidra

[primal perch]

but is poor

https://cdn.discordapp.com/attachments/934606253873827931/1060722414708858890/IMG_0071.png

7

but yea country

still broke

[steady nest]

yep lol

[primal perch]

me when that theme

https://tenor.com/view/facts-brother-gif-25434537

[grim sparrow]

@ocean raptor https://github.com/theos/theos/pull/687 happy now bozo

[primal perch]

@twilit jungle merge flex all

[grim sparrow]

stupidly this works

[primal perch]

evelyn eeeeeeee

[grim sparrow]

I will immediately put my hands up and say that this is not perfect and there is most definitely a more elegant solution, however it is something that will do for now

[primal perch]

it isnt perfect so its automatically garbage, come back when its perfect

• way too many people

[ocean raptor]

!!!!!!

Shouldn't it be @rpath/CydiaSubstrate.framework/CydiaSubstrate

[primal perch]

Shittia

[grim sparrow]

I don't think so?

I mean

it could be

both would work

just changed it

libsubstrate.tbd points to cydiasubstrate.framework which points to libsubstrate.dylib

its dumb

but

im just gonna keep things as they are in that regard

[ocean raptor]

The rpath should be /usr/lib, /var/jb/usr/lib and maybe /var/jb/Library/Frameworks and /Library/Frameworks

Or

Hear me out

DONT USE FRAMEWORKS

[grim sparrow]

I just changed it to only do the frameworks if you're using the mobilesubstrate generator

[ocean raptor]

FRAMEWORKS ARE DUMB AF

Go ahead, version your framework

Because you want to change the ABI

[grim sparrow]

@ocean raptor https://github.com/elihwyma/lib/invitations if you have some suggestions to make you can do that here and https://github.com/elihwyma/theos/invitations

I just invited you to edit both

and by suggestions I more mean changes

[primal perch]

it looks amazing

[grim sparrow]

@crisp frost by the way, if you ship your dpkg patch in rootless palera1n I will revoke your keyboard rights

[restive ether]

skull emoji

[ocean raptor]

What is their dpkg patch?

[grim sparrow]

recreating what xina did

[ocean raptor]

Oh god

[grim sparrow]

but for ios 15+ palera1n

[primal perch]

https://tenor.com/view/patrick-star-gif-23571967

[crisp frost]

it isn't shipped

and will never be

[grim sparrow]

dont

[restive ether]

you're gonna make cam delete the whole procursus dist

[grim sparrow]

we have rootless theos support

well

it exists

[crisp frost]

wait what

[ocean raptor]

I can't even get people to use the procursus dist 💀

[grim sparrow]

_ _

I did a thing

[restive ether]

skull emoji 2

we need theos 3.0

[grim sparrow]

hopefully mr upside down likes my quick changes and we can start to bully devs soon

[ocean raptor]

As I said before

[grim sparrow]

I will ship all of my stuff as iphoneos-arm64 soon

[ocean raptor]

Theos is deprecated

Handwritten makefiles are better

QuickActions 2 will be iphoneos-arm64 only

If only I had a repo to host it on

[grim sparrow]

chariz supports iphoneos-arm64

now all we need is devs to start using it

[primal perch]

where is the nvidia drv on procursus

[grim sparrow]

so true

[crisp frost]

windows real

[ocean raptor]

Would anybody like to donate a dcsd cable to me?

[primal perch]

windows real

i will donate 0.00 USD

[grim sparrow]

the macdirtycow exploit only allows for overwriting in /System right?

[primal perch]

it gets reset every reboot

[crisp frost]

It also works for /var

[grim sparrow]

yeah

[crisp frost]

but you need to manually do the file path

[grim sparrow]

I was just wondering if it was possible in /usr

hmm

[crisp frost]

( i think )

[primal perch]

i mean if it can write to system probably usr

[grim sparrow]

see thats my thinking

[primal perch]

cant really imagine how that would not be true

[ocean raptor]

Wen eta Cameron CVE to get arbitrary entitlements so I can finally use aemulo

[grim sparrow]

so true

[primal perch]

Psychic Paper 2

[ocean raptor]

Good idea

[brittle ravine]

I can't seem to hook into replayd. filtering plist has "com.apple.ReplayKit", "ReplayKit", "com.apple.replayd", "replayd" but none of them get a simple ctor with logging to work 🤔 any ideas?

other daemons load fine though, like backupd, runningboardd etc

[twilit jungle]

Remove dead code then

[primal perch]

no i am a windows user i always keep backwards compatibility

[hexed knot]

Win32 api when its been the same thing for 2 decades

[primal perch]

[twilit jungle]

the dead code is for newer versions

[faint stag]

i mean, still limited to sandbox but yes

[misty cradle]

https://twitter.com/0xasync/status/1607541407937339392?s=46&t=Hu8j13vOK4pcm53hdOYCrw @twilit jungle @primal perch

Async (@0xAsync)

No mom it's not a "messy pile of clothes on my chair" it's an L1 cache for fast random access to my frequently used clothes in O(1) time. It needs to be big to avoid expensive cache misses (looking in my closet). I NEED to be minimizing latency, this is important to me. Please.

Likes

7456

Retweets

1631

▶ Play video

Twitter · Dec 27, 2022, 12:58 AM

[primal perch]

fr

lmao

[faint stag]

seems legit

[twilit jungle]

[wicked summit]

The number of clothes in your closet is (presumably) on average constant so you can still say searching your closet is average O(1) 🤓

[gentle grove]

THE AMOUNT OF TIMES I KEEP SEIENG HTIS

[twilit jungle]

Its not a constant because the clothes on the chair aren't in the closet...

[silver rampart]

i've had this dmed to me by multiple people

[gentle grove]

yeah

[silver rampart]

@misty cradle late

[wicked summit]

But I have a constant number of clothes in my closet

[twilit jungle]

Its still faster to get it from L1 cache then permanent memory

[wicked summit]

[wind ravine]

i think i have a new name for my dirtycow app

[indigo peak]

The cycle of moving the clothes from the chair to the bed to sit down and then from the bed to the chair to sleep is effective, yet painful

[wind ravine]

i got a beautiful icon for it

[twilit jungle]

[indigo peak]

pov a your mom joke

[wind ravine]

no

hold on

beautiful

[indigo peak]

[wind ravine]

i wonder if people will still download it lmao

[mossy pagoda]

I will

do it fr

ong

fr fr ong

[wicked summit]

:frcow:

[grim sparrow]

oh my god

[wind ravine]

someone needs to make this

[indigo peak]

@grim sparrow just replace nfcd using dirtycow 😮‍💨😮‍💨

[wind ravine]

whats nfcd?

[indigo peak]

funky beep boop code that does all the shit with nfc on phone

[gaunt pewter]

aw dirtycow can't read files :<
there goes my idea for a dictionary manager

[faint stag]

i mean, yeah but half the things you could replace are readable files if i'm not mistaken

[faint stag]

the nfc daemon

[lime pivot]

[blazing vault]

this is me but with iPads

i have like 6 iPads

[wanton cedar]

hey all, i was wondering if i can get some developer feedback for this framework i've been making mostly as an experiment https://github.com/jjolano/HookKit
currently only Shadow is using it with success so far

[tepid olive]

Looking for devs to make me esp hacks tweaks for critical ops will pay good

Have pp and crypto

Have a source code alr

Just need a update it

[misty cradle]

Your mom!!

[tepid olive]

/home/cloudly/theos/toolchain/linux/iphone/bin/strip: changes being made to the file will invalidate the code signature in: /home/cloudly/projects/testmodmenu/.theos/obj/arm64e/testmodmenu.dylib
[cctools-port]: generating fake signature for '/home/cloudly/projects/testmodmenu/.theos/obj/arm64e/testmodmenu.dylib.strip'

help pls

theos error

[tepid olive]

It is $15

[nimble parcel]

That probably comes from AsyncDisplayKit/Texture, so learn how that works first: https://github.com/texturegroup/texture/

[naive kraken]

that looks scarily similar to what I'm doing in my projects to use libhooker API when available. Anyways if you want some advice, I think getting the function symbols at runtime using dlsym isn't the best idea. If I made a library like this I would have made 3 different packages, one for each hooking framework that links the hooker lib and translates calls to it directly. Coolstar once told me that dlsyming libhooker symbols and calling them would not work on Cheyote, but no idea if that was actually correct or whether they just wanted me to hard link libhooker. I mean this isn't a hard requirement because after all I'm also using dlsym.

[tepid olive]

how can dlsym not work

[ocean raptor]

So yes?

[naive kraken]

dont ask me

[tepid olive]

coolstar moment

[wanton cedar]

Yeah i originally was thinking of weak linking everything but was afraid of unnecessary dylib loads so i settled for dlopen with noload :/

I guess the best is what opa suggested - separate hard link version for each hooking lib. I wonder how this would look like in control depends though?

Actually maybe dependencies wouldnt be so bad if it defaulted to a substrate compatible version and the user can choose to “upgrade” it to the more specific lib version.

Virtual package maybe

[nimble parcel]

where’s the n+1 xkcd when you need it

https://xkcd.com/927/

xkcd: Standards

Fortunately, the charging one has been solved now that we've all standardized on mini-USB. Or is it micro-USB? Shit.

[primal perch]

@hasty ruin

gm

[hasty ruin]

gm

true

[primal perch]

[naive kraken]

this all wouldn't be an issue if substrate had MSHookFunctions

maybe someone could ask saurik to just implement that

[primal perch]

fr

most relevant one

[nimble parcel]

^ like it or not, Substrate IS the standard rn

[primal perch]

he’s right you know

[primal perch]

roasted

[hasty ruin]

https://tenor.com/view/roasted-patrick-patrick-star-squidward-spongebob-gif-22297416

[primal perch]

fr

[silver rampart]

never been a more appropriate time to post this

[graceful gate]

fr

[grim sparrow]

i stuck it on the wall of my electronics classroom

upon learning that every maker of transistors uses a different pin layout

[glacial matrix]

Rip interchangeability

[primal perch]

@grave sparrow aint no way man

[hasty ruin]

(capt came out in dms)

[primal perch]

[hasty ruin]

by the Coda devs

[primal perch]

done

[hasty ruin]

makes sense

[primal perch]

oh wait this isp iracy im gonna get banned

[hasty ruin]

[tepid olive]

true

@primal perch now do it without breaking the signature

[hasty ruin]

why would anyone even wanna use that

ui looks so ass

[tepid olive]

MSHookMemory

[restive ether]

this is an ad bypass

[primal perch]

__attribute__((naked))
void gorn()
{
  asm("mov w0, #9999");
  asm("ret");
}
// ...
MSHookFunction(_dyld_get_image_header(0) + 0xce2880, gorn, NULL);```

[restive ether]

nude code

[primal perch]

nsfw

not safe for nova devs

[tepid olive]

won’t work if you insert it

because the image index will be 1 then

[restive ether]

now entering troll valley

trollistan

[primal perch]

ok then get the base address properly

or use a tweak loader that doesnt nuke the image indexes

substrate my beloved

[tepid olive]

use ellekit.hook(0xce2880, &gorn, slide: _dyld_get_image_vmaddr_slide(1))

easy

[primal perch]

[tepid olive]

every single one does this

[primal perch]

0 always worked for me

[tepid olive]

they insert pspawn

so that makes no sense

[primal perch]

i use substrate and LH (Reluctantly) only

[tepid olive]

at least i don’t inject in every process

and break every single chained fixup

[primal perch]

oh right and for the x64 mfs 31 c0 ff c0 c3 @ 0x2dd9e9

[tepid olive]

@primal perch

why substrate is bad ^

[primal perch]

[tepid olive]

Should I care about libhooker’s api

[primal perch]

no cuz its not the standard

sorry but anyone who compiles their tweaks with LH apis only is a nerd

[tepid olive]

nobody does that

[primal perch]

ive seen someone in sileo server do that or something

no surprise

[pearl sail]

The time for adoption was when it was released now it is a bit too late tbh. I don’t think you can get a lot of people to use it regardless of how it is handled from now on.

[wind ravine]

my app icon looks so unprofessional but its so funny

[faint stag]

Isn't this why some cs tweaks need libhooker shim

[faint stag]

What is the app supposed to be

[restive ether]

black camera sim

[primal perch]

fr

[wind ravine]

dirtycow stuff

[faint stag]

Well what's the name

[wind ravine]

https://media.discordapp.net/attachments/1042510516536496138/1061129290059632650/Screenshot_2023-01-06_at_22.48.54.png

[primal perch]

Cowabunga

based

[faint stag]

okay it's goofy, but not bad

[wind ravine]

i dont think people would want to use it over something like fileswitcherx

[hasty ruin]

i would

[cloud yacht]

Is that the Moo Moo Meadows cow

[hasty ruin]

no it's your mother

[primal perch]

[brittle ravine]

Is this following because of objc_direct?
I see the string "-[RPClient initWithConnection:clientProxy:bundleIdentifier:]" in the disassembly of replayd, but the class is not defined there. NSBundle bundleForClass: returns that this is part of the Rapport private framework, but it doesn't have that class defined when browsing it in runtime. I have been able to hook symbols not exported before using MSFindSymbol but this is not found

[hasty ruin]

most helpful message in #dev

[brittle ravine]

what would we do without the memes

[tepid olive]

Probably

[primal perch]

fr

[wind ravine]

yes

my code looks a lot cleaner than most of the other similar apps but i think the functionality is still the same
fileswitcherx uses the evyrest method to persist changes but i heard it still doesnt work well

unfortunately the exploit is not great

[naive kraken]

No, the only stuff that can be objc_direct'ed are methods that don't need to be called from outside the binary itself, because they have no symbol and the rest of the system doesn't know about their existance

So if anything calls it, it needs to be defined somewhere

Oh wait

[brittle ravine]

I guess that makes sense, but I can’t wrap my head around why the symbols can’t be found when they seem to be used in the binary

[naive kraken]

you mean seeing the string "-[RPClient initWithConnection:clientProxy:bundleIdentifier:]" in the binary literally or do you see something calling objc_msgSend with initWithConnection:clientProxy:bundleIdentifier:

if the former, it could be objc_direct

if the latter, then no

[brittle ravine]

I see the string literally

[naive kraken]

hm idk

might be the symbol itself?

either way, the class should exists somewhere

check under Imports maybe?

[brittle ravine]

The class is defined in the Rapport framework

[grim sparrow]

ooooooooo

one thing you might need to do

is dlopen it in a constructor

the framework

[brittle ravine]

Even tho it still says loaded for the bundle?

[grim sparrow]

yeah

this is something I've come across before

https://github.com/elihwyma/MacSpoof/blob/fcf065a9d03fba9c99a6cdeb59dc1222b58aa2a6/src/Tweak/Tweak.x#L75 I had to do it here

@crisp frost i've started putting rootless packages on my repo

of my tweaks

next aemulo update will be both

(im doing ios 16 support as well as a few other things)

[restive ether]

you're gay

[grim sparrow]

shut up

!

[crisp frost]

[restive ether]

sileo developer.

[grim sparrow]

I made ROOTLESS=1 a reality in Theos

doesn't that deserve some credit

[crisp frost]

yeah wanna know smth funny

i literally checked out your fork for working on my rootless tweak

[grim sparrow]

make sure to also checkout my fork of vendor/lib

and go to the rootless branch

[restive ether]

that's worse

perl dev.

[grim sparrow]

i didn't touch any perl!

https://github.com/theos/theos/pull/687/files

its so simple

[primal perch]

[restive ether]

I wish hyperlinks worked in discord

that would be nice

[faint stag]

devs are either lazy or it hasn't been suggested enough

since it would take a few lines of js fr

[hasty ruin]

no it's just bad

[faint stag]

they've implemented like all other markdown and bots get to use them smh

[hasty ruin]

e.g: https://google.com

real link is googie

users would see google

and even in the confirmation dialogue it'll look like google

combine that with the intelligence of your average discord user

and you have a bad situation

[faint stag]

mane

yeah i can see that

just add a dialog for every link

and a tooltip on hover

[hasty ruin]

if they added whitelisted domains for no confirmation, that'd be even better for my twitter.com ip logger

[primal perch]

@hasty ruin

https://tenor.com/view/facts-brother-gif-25434537

[hasty ruin]

@primal perch

https://tenor.com/view/facts-brother-true-smoke-gif-23157983

[primal perch]

real

[next wadi]

u

[hasty ruin]

re

[next wadi]

g

[hasty ruin]

go up a key*

[next wadi]

o

i thought we were gonna spell "ure gay"

not a SLUR

[grim sparrow]

im gay!

[hasty ruin]

return

??

how is that a slur

[next wadi]

hi amy

[next wadi]

right right riiiiight...

[hasty ruin]

[grim sparrow]

hi jaidan!

[next wadi]

@hasty ruin help with Luz before i KILL YOU

[hasty ruin]

Luz?

[next wadi]

https://tenor.com/view/we-are-gunna-kill-you-sponge-bob-squidward-squidward-meme-im-a-winner-se-my-prize-gif-25631410

[next wadi]

thing i was telling u about

thats what im calling it

[hasty ruin]

ah

[next wadi]

means light in spanish

[hasty ruin]

👍

[next wadi]

WTF

[hasty ruin]

i told you to send it smh

[next wadi]

oh true

hold on

i invited you @hasty ruin

[hasty ruin]

W

[next wadi]

its an org so idk what the link is to join

[hasty ruin]

just https://github.com/settings/organizations

[next wadi]

oh true

can you see the two repos @hasty ruin

[hasty ruin]

ye

[next wadi]

my next step is converting the deb extracter and packer and shit into a library

cuz all of the components of the project are gonna need it

[hasty ruin]

real

[indigo peak]

so this legit just changes it from % to @

[hasty ruin]

can access ivars with _varname

and %property & %new work differently

• no preprocessor

[primal perch]

when you write a specification and no reference implementation

https://tenor.com/view/ralph-wiggum-simpsons-waving-gif-7797897

im helpding

[hasty ruin]

https://github.com/eswick/clang-objcs

[next wadi]

@hasty ruin i have a question i need advice

[hasty ruin]

dm

[next wadi]

ok

[primal perch]

there we go

nvm then

[hasty ruin]

it's linked at the bottom of the first repo

[primal perch]

ya who tryna read that all tho

[grim sparrow]

HI STKC

[primal perch]

true

[noble zodiac]

hey there, how can i fetch image from url and then show them in a LinkCell and running the image fetch asynchronously ?

[indigo peak]

@grim sparrow is there like something in between a reboot and a respring

that was prob the worst way to explain it

[grim sparrow]

userspace reboot

[indigo peak]

what ab on stock os

[grim sparrow]

userspace reboot

[indigo peak]

h o w

[faint stag]

are you on a version with ct bug

trol

[indigo peak]

no

16

[faint stag]

oh then good luck

[grim sparrow]

changing font is one way to do it

lmao

not font

language

[indigo peak]

i changed it to upside down english

yeah i think the only way to change icon mask is by clearing icon cache

which isnt possible

:(

hmmm

i have a stupid idea

is it possible to open a folder as a file

like read its hex or some shit

and remove all the contents of a folder that way

[grim sparrow]

erm

[ocean raptor]

What in the world does this mean

[indigo peak]

idfk

[grim sparrow]

i dont know if anyones tried this but

[indigo peak]

like read a folder

but not as its files

as text

[grim sparrow]

couldn't you in theory use dirtycow to redirect a folder

as opposed to a single file?

[indigo peak]

thats what im talking about

like just change the folder

[faint stag]

i mean, fopen is fopen regardless of it being a directory or not, right?

[indigo peak]

have a empty folder in an apps sandbox called tmp/ or some shit
use dirty cow to redirect folder at /a/b/c/d/folder to be tmp instead

so contents of folder/ become contents of tmp

[faint stag]

so you're trying to replace a folder with a link

[ocean raptor]

No?

[faint stag]

did i get that right

[grim sparrow]

no?

[indigo peak]

dont thnk so

[ocean raptor]

fopen sets errno to EISDIR if it tries to open a dir

[ocean raptor]

If you want to open a dir you use opendir(3)

[grim sparrow]

[ocean raptor]

I guess EISIDR is only if it tries to open for writing

[grim sparrow]

looks that way

[ocean raptor]

Thank you manpages for having incredibly useful information

Too bad apple doesn't like to write them for their API that don't come from BSD

[primal perch]

you use std::

c++

[indigo peak]

use std:: because your lack of female interaction will leave you with 0% chance for a std

[primal perch]

yes

tbf it’s higher chance with men anyway

don’t look at gay hiv statistics

[indigo peak]

damn we stanky

[grim sparrow]

[primal perch]

🐱

[indigo peak]

"men want one thing and it's disgusting"
"ok then wash it"

[hasty ruin]

can get HIV if you already have it

[grim sparrow]

omg

[hasty ruin]

[primal perch]

.

[primal perch]

lol

[indigo peak]

personally

all i want are lego sets

but thats me

[primal perch]

personally all i want is 12hrs of sleep a night

or to not need more than like 4

[hasty ruin]

i did that yesterday!!!

felt so weird

[indigo peak]

like look at this sexy thing

[hasty ruin]

i normally sleep for like 5

[primal perch]

bro i did all of hs and it fucked me

now i’m this guy on 8 hours

cuz i used to be on 4

[hasty ruin]

at least you got fucked somehow in hs

[indigo peak]

nah cuz i be getting 0-4 hours of sleep for school and waking up feeling perfect

[primal perch]

yea for now

[indigo peak]

and then i get 8-10 hours

and i feel like i havent slept in a week

[hasty ruin]

fr

same

[primal perch]

me in uni trying to get up for a 10am class

me in hs getting up for 7:30 school

[indigo peak]

what time would you get up

[primal perch]

6:30

[hasty ruin]

i get up at 7 on friday

[indigo peak]

dam

[hasty ruin]

11 on monday

and 10 on thursday

[indigo peak]

i get up at 5:45-6

for 7:28 school

[primal perch]

tbf it wasn’t easy either but far easier

didn’t require all my willpower

[primal perch]

yea i dont do my hair or anything dude i mlazy as fuck

i shower the night before

[indigo peak]

i shower morning of

[primal perch]

the bare minimum for the morning

i lirerallt have enough time to change and get to my car

[indigo peak]

i get out of the shower and goto school

[primal perch]

nothing more

[indigo peak]

i dont do my hair

[primal perch]

based

[indigo peak]

i let the air do my hair

air dry >>>

[primal perch]

i have 8:00 work and usually wake at 7:25

95% of the time i’m there at 7:55

hauling ass

[hasty ruin]

my week is so weird

[primal perch]

wagie cagie

yea

is that COLLEGE

[hasty ruin]

yes

[primal perch]

aint no way

3daya week

[hasty ruin]

[primal perch]

do you have work

[hasty ruin]

[primal perch]

ah no wonder ur here constantly

[hasty ruin]

[primal perch]

me when i had 15 credits and 16 hours of work a week and still spend forever here

15cr and 24 hours of work this semester

sigma grind set

[ocean raptor]

Did I ever show you my Lego set I bought recently?

[indigo peak]

no

ive only seen your cat

[primal perch]

everyone be complaining about loans

[primal perch]

literally just work ezpz

[primal perch]

based

[indigo peak]

based

[ocean raptor]

Thinking about buy either an X-wing or dalorean Time Machine set next

Maybe a tie fighter

[indigo peak]

i want to get my dad the NES set for his birthday, but its 270 dollars

[ocean raptor]

I really want the Death Star

[ocean raptor]

This set was $900

[indigo peak]

ok yeah

but i dont have a job

theres a difference

[ocean raptor]

But it's discontinued and used sets are like $1500

[ocean raptor]

Get one than

[primal perch]

fr

[indigo peak]

i have school + sports

[primal perch]

get on the grind

[ocean raptor]

I go to school 2 days a week

[indigo peak]

i also dont have a car

[ocean raptor]

I got to work 3 days a week

[hasty ruin]

i also dont have a car until later this year

[ocean raptor]

I steal my mom's car

Or my dads

[indigo peak]

my mom uses her car

[ocean raptor]

Depending on the day

[restive ether]

your mom lol

[indigo peak]

and my dad drives a pick up

he wont trust me driving that thing

[ocean raptor]

My dad has a beemer

I get to drive it on Tuesdays

Suck my german engineer dick

[indigo peak]

well

i have school 5 days a week

i have sports right after school

[primal perch]

me this semester fr

[indigo peak]

and games on weekends

so i usually only have 1 day off

[primal perch]

cope

[ocean raptor]

I want to buy a car

But I'm cheap

[primal perch]

democrat life

[indigo peak]

but you bought a 1.5k lego set instead

[ocean raptor]

The millennium falcon was only $900

[indigo peak]

"only"

ok i have an idea

ill get my dads gift by doing tweak bounties

[primal perch]

900 is like a set of tires and an oil change so

[indigo peak]

surely i dont get scammed

[primal perch]

yea

cars ain’t cheap

[ocean raptor]

A $14k car is quite a bit more than a $900 Lego set

[primal perch]

at the same time just get a cheap car

skill issue i think

mine was 2300$

running good

[ocean raptor]

Ok, serious question

[hasty ruin]

not much more than 15 of them though!

[ocean raptor]

Where am I supposed to look for cars

[wicked summit]

$2300 car

[ocean raptor]

💀

[primal perch]

used market, classifieds

[hasty ruin]

apple car icloud bypass?

[wicked summit]

[primal perch]

yea man at 236k, intermittent check engine for emissions stuff and runs great otherwise, 23mpg

it ain’t amazing but it works

[wicked summit]

Nice

How long have you had it

[primal perch]

about a year now

[ocean raptor]

A friend of mine has a benz that they bought

[primal perch]

it’s at 241k

[ocean raptor]

But they literally don't drive

[hasty ruin]

(he stole it)

[indigo peak]

only 1 of my friends paid for their own car

everyones was either a hand me down or their parents bought them a new car

[primal perch]

i just supposedly fixed the check engine today, might’ve been the pcv valve and hose

[wicked summit]

Apple car jailbreak eta wen?

[primal perch]

40$ replacement in parts so we’ll see

[indigo peak]

2 17 year olds in my school have teslas

[ocean raptor]

If I want my parents to buy my car they would have to actually trust me

[indigo peak]

daddys money really going to work

[ocean raptor]

The joys of being the problem child

[primal perch]

also i’m biased cuz my dad knows a lot about cars so if it wasn’t for his advice i’d be in the same place as y’all

[wicked summit]

I know a lot about cars

Better rotate the blinker fluid

[primal perch]

fr

[primal perch]

based tire

if suicidal that’s the best

[hasty ruin]

shep

[primal perch]

me ong

[hasty ruin]

gotta make it a smoother drive

[shy reef]

Whats the best way to respring the device in practice? I hear some people say "sbreload" and others say to "killall -9 SpringBoard"

[faint stag]

sbreload is the more native implementation

in some cases you may need to kill springboard but not usually

[primal perch]

https://github.com/shepgoba/SettingsWidgets/blob/master/SWUtils.m this according to kirb

the front board way

[ocean raptor]

No cases

[faint stag]

i guess

[shy reef]

I read that it can cause autofill to break though unless it was fixed in newer iOS versions

[faint stag]

i haven't heard of that happening

since sbreload is supposed to mimic the behavior that ios uses already

(ios never kills springboard (unless jetsam), it just reloads it, hence the name)

[shy reef]

It was an issue with U0 on iOS 13 apparently so I thought I'd ask for opinions here

[faint stag]

u0

there's your problem

u0 don't cause the userspace to malfunction challenge

[shy reef]

How would I run "sbreload" then instead of the alternative? For some reason Theos wont compile my tweak if I call it from system as "it's not included in iOS"

[hasty ruin]

lazy solution: edit your sdk to allow system()
good solution: use NSTask

[ocean raptor]

Um why

Just posix_spawn

[hasty ruin]

yeah i forgot the name

[primal perch]

nstask W

[shy reef]

So just posix_spawn /usr/bin/sbreload yeah?

[faint stag]

well that won't work rootless lol

[primal perch]

ya

[shy reef]

This is such a simple task but my brain is battered today so simple tings aren't working with me lmao

Which is the rootless path? its just in /var/ isn't it?

[faint stag]

it's /var/jb/usr/bin

[shy reef]

Yeah that's the one thanks

[gusty wagon]

   Label Ten [input]
Label Eleven [input]

How do I align the text like this with SwiftUI?

[ocean raptor]

Nobody cares about rootless

Why does it matter

[faint stag]

their name

lmao

[ocean raptor]

?

[faint stag]

they're running rootless from that

so why would they make something that doesn't work

[ocean raptor]

XinaA15 is the worst

It's definitely not rootless

Who knows wtf it is

Broken

That's what it is

[shy reef]

Agreed

[hasty ruin]

didnt you speak to that jack dude about getting xina to use the proper strap

[shy reef]

But it is the only thing iOS 15 has atm

[ocean raptor]

Then Jack started asking for donations and didn't give them to xina

So xina fired him

[hasty ruin]

fr

[ocean raptor]

And a bunch of other bs happened

And then I quit the group chat cause it was dumb af

And nobody was willing to do anything

[hasty ruin]

[shy reef]

Yeah I heard about that lmao

was having a proper giggle about it

[faint stag]

it's dumb but:
if read/exec:
check if file exists in rootfs
if true, continue
if not , redirect to /var/jb
if write, redirect to /var/jb

[hasty ruin]

you basically need to know perfect chinese for xina to understand you

[silver rampart]

jb discourse

[ocean raptor]

We had nick Chan translating for us

It was going well

But in order for rootless to work, everyone needs to make their small changes

I did my part

Amy did their part

Evelyn did their part

[primal perch]

strap (on)

[ocean raptor]

Yay victory we have the base

[hasty ruin]

[primal perch]

fr

[ocean raptor]

Good luck getting anybody else to do their parts

[native dune]

[hasty ruin]

[native dune]

[ocean raptor]

You want to compile your tweaks for rootless? Tough luck

[native dune]

amy made a pr for rootless theos but itll probably never get merged

[hasty ruin]

i say we spam ping aussie man

[primal perch]

nah i did mine

[ocean raptor]

You want to sell your rootless tweaks on a trusted repo? Tough luck

[primal perch]

all of my new tweaks will be rootless compatible

(none)

[ocean raptor]

You want to use a rootless jailbreak? Tough luck

[native dune]

palera1n is going to be all rootless eventually

[ocean raptor]

Everybody is so obsessed with making sure developers don't have to do anything to update their tweaks for rootless that no progress gets made

[ocean raptor]

Eventually? It should've been like that from the start

[hasty ruin]

will the checkra1n X palera1n thingy include blackbird?

[native dune]

yes

[hasty ruin]

W

[native dune]

we have permission to use checkra1n 0.1337.0

[primal perch]

at this point jailbreaking deserves this

[native dune]

I'm going to try to get tweak developers to update their shit

[primal perch]

just buy an android if u want root bro like damn

[ocean raptor]

Use my cock and balls

Like your mom does

[native dune]

which was the whole team's fault, including me

[gusty wagon]

please help

[primal perch]

stackoverflow.com

[hasty ruin]

i think i got my repo sorted today

[gusty wagon]

stack overflow is not helping

[hasty ruin]

need a jb to test it on tho

[native dune]

I should've not gone into the rootful stuff and instead tried to get people to update tweaks for rootless

atleast we have tweak injection now

[shy reef]

Well I'm going over tweak dev solely in rootless as I think that's prob how most jailbreaks are going to work in the future

[primal perch]

https://stackoverflow.com/search?q=align+text+swiftui

[native dune]

fakefs fucking sucks

[primal perch]

idk man skill issue perhaps

[hasty ruin]

it's how every jailbreak will work

[silver rampart]

ur mistaken this is a channel for researching land development nobody here programs

[hasty ruin]

[native dune]

Human verification

[primal perch]

fr

[shy reef]

Yeah

[hasty ruin]

only sussy wussy imposters use swift ui

[native dune]

i'm currently on palera1n rootless

[primal perch]

yea and the 2 people that do will bully you into uikit submission

[native dune]

anything you want me to do?

[silver rampart]

based

[hasty ruin]

is it public?

[gusty wagon]

me using appkit:

[primal perch]

[native dune]

uhhh partially

[silver rampart]

Qt best ios ui framewrk

[hasty ruin]

ios 15?

[native dune]

you'd need to do some hacky stuff to get it to work, for now

we need to make some other changes

[hasty ruin]

i have a device idm restoring every day

[primal perch]

SDL2.24.0 for iOS 💪

[native dune]

you will need to restore if you trigger the iOS uicache bug

[hasty ruin]

das fine

[native dune]

which I havent done yet but galaxy and nick have done many times

[primal perch]

sdl making the shittiest versioning scheme known to man

[ocean raptor]

Soon

[primal perch]

yeah we're actually going to move the bug fix version to the middle

[ocean raptor]

I still need to fix stupid locales

[gusty wagon]

why cant i just have invisible tables for alignment like with html

[primal perch]

yea i love sdl

but the versioning is dog ass

[native dune]

wheres rootless batteryboobs

[primal perch]

[ocean raptor]

I broke my AirPods and now I'm sad

[hasty ruin]

also i need to restore that device anyway @native dune

(i broke the jb within 2 mins)

[native dune]

.

[hasty ruin]

i updated all dependencies

now every process crashes

[native dune]

crazy

[ocean raptor]

I was trying to write my own jbinit thingy

[primal perch]

https://media.discordapp.net/attachments/788843316661714997/1058587442522894468/im_rarded.gif

[ocean raptor]

That didn't suck

[hasty ruin]

also were the inetcat issues sorted yet

bc palera1n master branch was broken a few days ago

[native dune]

nick was working on jbinit_rootless

[native dune]

what was broken

[hasty ruin]

ramdisk never booted

[ocean raptor]

Which sucks imho

Bind mounts suck

[native dune]

yea that was fixed

[hasty ruin]

ight

[native dune]

i cannot boot jbinit_rootless

wtf gay checkra1n

[primal perch]

based

homosexual checkrain

[native dune]

mounting rootfs
container_rootmount:2054: boot from ramdisk /dev/md0
dev_init:314: md0 device accelerated crypto: 3 (compiled @ Nov 6 2022 23:06:24)
dev_init:317: md0 device_handle block size 4096 block count 15624989 features 22 internal solidstate
disk0s1s1: device is not readable.
nx_buf_bread:625: buf_biowait() failed, error = 13, b_error = 13, buf_flags_after_io = 0x101, crypto = [unencrypted ]
_vnode_dev_read:852: *** got err 13 reading blknum 0 (num read errs: 1)
nx_dev_init:743: md0 couldn't read superblock of size 4096
nx_mount:1027: device initialization failed: 13
apfs_vfsop_mount:2069: unable to root from devvp <ptr> (/dev/disk0s1s1): 13
mount rootfs FAILED with err=13!
stat /fs/orig/private FAILED with err=13!

crazy

[gusty wagon]

the closest thing i found to useful information there

[ocean raptor]

How'd you get these logs?

[native dune]

serial

i have a dcsd cable

[elder scaffold]

works for me

[ocean raptor]

Would you like to buy me one 🥺

[grim sparrow]

And me

[native dune]

🥺

you can get a shitty one for like $10 on amazon

its the one i have

apparently they break quickly

[ocean raptor]

Think about it like a fine for doing fakefs

[native dune]

but ive had mine for a few months

[elder scaffold]

fake root edition

[native dune]

tbf fakefs wasnt my idea

[ocean raptor]

Why though

[grim sparrow]

I wonder how hard it would be to make one with the shit in the electronics lab at college

[ocean raptor]

For what benefit

[ocean raptor]

[elder scaffold]

up to 16.1.2, substitute works well, so we can use past assets as they are

[ocean raptor]

Oh goodie

Thank you for delaying the inevitable even more

[pearl sail]

Bring elu back

iOS 16 edition

[elder scaffold]

I stick to the old. Remember I was in legacyjailbreak until August 2022.

[ocean raptor]

Well I want the jailbreak scene to have a future

[grim sparrow]

Well we have rootless Theos now

[native dune]

was it merged

?!

[ocean raptor]

I would prefer if we didn't die with checkm8

[grim sparrow]

Kirb gave me a lgtm

[ocean raptor]

But did he merge

[grim sparrow]

Not yet

[elder scaffold]

There is a future if checkm9 is discovered

[grim sparrow]

Lgtm is basically merged

[ocean raptor]

And did you switch it to @rpath/MobileSubstrate.framework/MobileSubstrate and fix the -rpath flags?

[grim sparrow]

Yes

[ocean raptor]

And are you looking for this "checkm9"?

[grim sparrow]

I also changed most libs in vendor/lib to use rpath

[hasty ruin]

install captware to trigger the mem leak in A12/A13

[ocean raptor]

Or just praying that we don't have to wait 10 years for another bootrom exploit like last time

[grim sparrow]

A bootrom exploit seems a little unlikely to find

[elder scaffold]

iboot exploit may drop in the meantime.

[ocean raptor]

Ok, find it than

[elder scaffold]

i want it 🥺

[grim sparrow]

On my way!

[primal perch]

On my way!

[ocean raptor]

On my way!

[indigo peak]

@grim sparrow are there Dave and Busters in the UK

[grim sparrow]

No

[indigo peak]

hm

[ocean raptor]

@native dune send dcsd cable link

[primal perch]

gorn.dev

[grim sparrow]

What are they

[indigo peak]

Do you think it be possible to write the amount of chips and or tickets to a card Dave and Busters card using Aemulo

[indigo peak]

it’s an arcade thing

[grim sparrow]

Oh arcades!

Erm

[indigo peak]

yeah

[grim sparrow]

I remember now

Ok so

It depends

If it goes to a central database or if it’s stored directly on the card

[indigo peak]

hmmmm

[hasty ruin]

@primal perch do it

[grim sparrow]

When aemulojailed is out

[native dune]

https://www.amazon.com/dp/B0BC1HNVHJ

[primal perch]

chad

[grim sparrow]

Can I do some debugging with you

[indigo peak]

I’ll test it for you

[indigo peak]

I got you

[grim sparrow]

Im adding a thing in aemulojailed to sniff communications so it might be possible to grab their key

[ocean raptor]

How do I use it...

[grim sparrow]

If they even use a key

[primal perch]

plug it in

[indigo peak]

will aemulo jailed work on iOS 16

[primal perch]

using the male ports

[grim sparrow]

lol

[primal perch]

male port goes in female port

[indigo peak]

Do iPhone 7s have nfc

[grim sparrow]

As soon as I get entitlements!

[primal perch]

[grim sparrow]

Yes

[ocean raptor]

After I find the exploit for arbitrarily ents for Amy

[indigo peak]

I’m gonna buy a replacement screen for a 7

[native dune]

plug it in, then use a program for serial on /dev/cu.usbserial-* (115200 baud), set serial=3 boot arg

[elder scaffold]

i use swd. no dcsd

[ocean raptor]

What is that

[elder scaffold]

serial write debugger

[grim sparrow]

I looked at the circuit for the cables

They’re actually pretty simple

[frail cedar]

yes

full NFC

[grim sparrow]

Oh btw

[frail cedar]

not the limited one of the 6s and 6

[grim sparrow]

AemuloJailed will add full to iPhone 6 and 6S

It’s a software thing not a hardware thing at the end of the day

[frail cedar]

Oh

TIL

[grim sparrow]

And because I’m making my own nfcd

[ocean raptor]

Is it cheaper or more expensive than dcsd...

[grim sparrow]

I can just write the software

[ocean raptor]

Chad

[grim sparrow]

You have no idea how much effort it’s been

The core thing is done

Now it’s just programming all the card communications

Specific read things

Etc

[elder scaffold]

maybe $300~

[ocean raptor]

💀

Wtf

[native dune]

huh

[grim sparrow]

I have my college Writeup which has all of how aemulo works

[ocean raptor]

Estimated deliver Jan 25 - feb 13

Hopefully I still feel like working on this project then

[native dune]

mine came earlier

[ocean raptor]

Only $13 so not too bad

I make that in under an hour

[elder scaffold]

This is what I could post in this chat, but it's probably no longer manufactured. It also has a serial, so you can probably do the same thing as dcsd
https://shop.lambdaconcept.com/home/37-bonobo-debug-cable.html

[native dune]

€749.00

wtf

[frail cedar]

They take about a month to arrive

[native dune]

this is not aliexpress

[grim sparrow]

@ocean raptor if you know soldering you can make ur own

[frail cedar]

it still applies

[ocean raptor]

I have a soldering iron...

[grim sparrow]

All the chips arrive next day

Just splice up an existing lightning cable and get a breadboard or something

[ocean raptor]

Do all the chips total to under $13

[grim sparrow]

Per unit yes but I think you have to buy in bulk

[ocean raptor]

[grim sparrow]

Oh no

You can buy just 1

https://ftdichip.com/products/ft4232haq/

[ocean raptor]

So why did I just order a dcsd

[primal perch]

who on that clang 15

[ocean raptor]

Me

[faint stag]

that cannot be profitable

[primal perch]

based

[grim sparrow]

It’s just a serial converter, it probably costs them nothing to make anyway

[ocean raptor]

This is the only chip needed?

[grim sparrow]

No that’s just the one I can see on the circuit lmao

It just looks like a lot of resistors

[ocean raptor]

[grim sparrow]

And the LED’s of course

[ocean raptor]

I have a big bag of resisters

And LEDs

And some breadboards

[grim sparrow]

Ooooooo

You need to flash a specific accessory ID to the lightning plug

https://www.theiphonewiki.com/wiki/DCSD_Cable

[ocean raptor]

That doesn't sound easy...

[grim sparrow]

It sounds fun

[ocean raptor]

I don't mind paying $13...

Only because I hate every iOS 15-16 jailbreak method

And I can't easy debug my ramdisk without seeing the actual logs

Spite is one of the few things that motivates me 🙃

Also my AirPods broke and I'm pissed