what your favorite way
#development
elder scaffold
ocean raptor
what your favorite way
Anything that's rootless and not bind mounts
Also, injecting into launchd is completely unnecessary
elder scaffold
not bind (´･_･`)
grim sparrow
What happen
elder scaffold
you mean, start a jailbreak by launching an app like the troll store
ocean raptor
What happen
The make a squeak noise when noise cancelling or transparency mode is on
Probably cause they got very wet
grim sparrow
Do they qualify for the recall program?
ocean raptor
So they in a sandwich bag with some random silica gel packets that I had
hasty ruin
do your airpods ever play at 100% for a millisecond when starting music sometimes
so annoying
ocean raptor
do your airpods ever play at 100% for a millisecond when starting music sometime...
No??
ocean raptor
Do they qualify for the recall program?
How do I check
grim sparrow
When did you get them
ocean raptor
I would love to get them replaced
elder scaffold
How do we start a jailbreak without bind
ocean raptor
Cause the tips are completely yellow from earwax 
grim sparrow
If they were made before October 2020 then you can fr just make a Genius Bar appointment and walk out with new buds in 15 minutes
ocean raptor
When did you get them
Idk...
grim sparrow
Do you have the box still?
ocean raptor
yes!
grim sparrow
It has the date on the serial number sticker
hasty ruin
Cause the tips are completely yellow from earwax <:androidskull:8875120825248031...
same but only the left 
just get replacement tips
ocean raptor
I have the box from my old AirPods
And all my other boxes
Even have a 3G box
Found it!
primal perch
fr*ck
ocean raptor
I'll ask hayden
primal perch
nhayden
ocean raptor
I don't see a date on this box
ocean raptor
I don't see a date on this box
@grim sparrow
grim sparrow
It’s on mine!
ocean raptor
What's the number I text for apple support
primal perch
208-394-7494
ocean raptor
208-394-7494
Is this real?
primal perch
yea
silver rampart
apple should make a website with all their contact info on it that'd be cool
silver rampart
just hop on the vpn ez
ocean raptor
Alright
primal perch
my uncle that works at apple will be leaking it any day now
silver rampart
larry apple real
ocean raptor
Who's going to join apple as a new cryptography security engineer and leak this stuff
silver rampart
your mother
primal perch
that sounds fun and all but i dont want to spend life in prison
native dune
just "accidentally" start a signing party for like 10 minutes
primal perch
if however i were planning on suicide in the immediate future i would do it then go off myself
but i would never do that
ocean raptor
if however i were planning on suicide in the immediate future i would do it then...
You think you could get that job? Really?
silver rampart
"accidentally" search discord app memory for strings related to this server and brick any phones its found on
primal perch
You think you could get that job? Really?
yeah man it isnt rocket science go get a degree and dont look braindead in the interview
grim sparrow
just "accidentally" start a signing party for like 10 minutes
Last signing party I was in college and missed it
ocean raptor
There was a signing party recently?
grim sparrow
Not college
native dune
no
grim sparrow
God
silver rampart
yeah 10 minutes ago
grim sparrow
High school
silver rampart
you just missed it
primal perch
if you think apple has the most competent engineers in the industry you would be sorely mistaken
ocean raptor
if you think apple has the most competent engineers in the industry you would be...
Hey new guy, I know this is your first day, here is all of our hardware signing keys
Have at it
primal perch
dude acts like they run the tightest ship known to man
as if iboot wasnt leaked 5 years ago
grim sparrow
lol
native dune
do Tim a favor he'd give you the keys
ocean raptor
lol
native dune
ocean raptor
dude acts like they run the tightest ship known to man
I doubt they keep their signing keys on site
They're probably in a data center somewhere
silver rampart
signing? no. GUIDs?
ocean raptor
My dad is good friends with a networks engineer at Apple headquarters, I wonder if he would leak the vpn 
silver rampart
dude acts like they run the tightest ship known to man
real tightest ship is the peeps who actually get the leaked shit (except for that ios 13 guy we dont talk about that)
ocean raptor
real tightest ship is the peeps who actually get the leaked shit (except for tha...
Who's the iOS 13 guy...
primal perch
your mother
silver rampart
^
grim sparrow
I still have that ipsw on my gdrive
primal perch
apple when they start doing public betas in 2015 and the quality of GM builds continues to decline year after year
gusty wagon
i remember installing an ios 8 beta and it ended up locking the ipad i had it on
just like "beta over now you can't use your ipad since you're away from home and can't run an itunes restore"
hasty ruin
lime pivot
I still have that ipsw on my gdrive
is this that one homepod firmware
grim sparrow
No the iOS 13 internal UI build
lime pivot
the one that was publicly listed in the iTunes firmware xml and had like every internal feature enabled
ocean raptor
Guess I'm wasting 2 hours of my time to fix my AirPods some time this week 💀
cloud yacht
the one that was publicly listed in the iTunes firmware xml and had like every i...
oops
ocean raptor
When I was literally right by the Apple Store all day today
primal perch
grim sparrow
L
ocean raptor
I love apple so much 😐🔫
primal perch
so true
ocean raptor
Plus I get to drive on i95 in Florida during December
🙃🔫
For all you non-Americans and non-Floridians
That is a highway
And in Florida during December we get a ton of snowbirds
And the roads are super dangerous
lime pivot
i95 is a highway? I wouldn't have guessed
pearl sail
Interstate highways are a common thing in the US
ocean raptor
And the roads are super dangerous
Two of my coworkers got into car accidents on the same day
One of them got rear ended by a 87yo!
lime pivot
in an F-150?
ocean raptor
The other got rear ended by a woman driving without a license
lime pivot
ugh
ocean raptor
i95 is a highway? I wouldn't have guessed
I can't tell if you're being sarcastic or not
ocean raptor
Interstate highways are a common thing in the US
Oh wait, you're from California so I guess I should say "the 95" and "freeway"
pearl sail
Sir you could start naming multiple numbers and I am sure a lot of them are a freeway or highway in California
ocean raptor
Sir you could start naming multiple numbers and I am sure a lot of them are a fr...
Yes dude, that's how the highway system works
primal perch
pearl sail
I should’ve said random numbers
ocean raptor
i2446742266
primal perch
tepid olive
beach ball
indigo peak
@grim sparrow so did we come to a conclusion, is replacing a folder possible using the dirtycow shit
tepid olive
beach ball
update: successfully saved my 30gb i64 file
primal perch
grim sparrow
<@270540064512147456> so did we come to a conclusion, is replacing a folder poss...
I went to bed lmao
primal perch
indigo peak
primal perch
turbid fjord
Most hated man in America
indigo peak
I went to bed lmao
i dont think it works
- (void)replaceFolder {
NSString *replace_me = [[[NSBundle mainBundle] resourcePath] stringByAppendingPathComponent:@"replace_me"];
NSString *test = [[[NSBundle mainBundle] resourcePath] stringByAppendingPathComponent:@"test"];
dispatch_after(dispatch_time(DISPATCH_TIME_NOW, 5 * NSEC_PER_SEC), dispatch_get_main_queue(), ^{
changeAnim(
test.UTF8String,
replace_me.UTF8String
);
});
}
Jan 8 13:05:58 iPhone-2 kernel[0] <Notice>: TEST[35387] Corpse allowed 1 of 5
pearl sail
i dont think it works
You don’t work
steady nest
naive kraken
<@208334999722786816> https://github.com/zjw88282740/bluetooth_fix/blob/main/Twe...
already saw that
tepid olive
@naive kraken How hard would it be to add 15.5 support to Fugu15 with weightBufs?
naive kraken
<@208334999722786816> How hard would it be to add 15.5 support to Fugu15 with we...
impossible
tepid olive
impossible
why
naive kraken
you'd need a new PAC and PPL bypass
tepid olive
is it patched?
naive kraken
I mean, what did you expect? lol
tepid olive
i thought it wasn't
tepid olive
all fugu15 vulns were closed in 15.5
that sucks
naive kraken
actually 15.5b4 patches both the kernel exploit and the bypasses
so only 15.5b3 and below are supposedly supported
grim sparrow
opa have you tried out my theos pr?
naive kraken
opa have you tried out my theos pr?
no
grim sparrow
I've tried it with all of my tweaks but I want other developers to have a play with it just as a sanity check type thing
would you mind giving it a try?
naive kraken
I don't have a rootless jb
what do you want me to check
just if it compiles at all?
grim sparrow
tl;dr of getting it setup (for now)
- Change theos origin to https://github.com/elihwyma/theos and checkout "rootless"
- Change the origin of vendor/lib to https://github.com/elihwyma/lib and checkout "rootless"
- Build any tweak but append
ROOTLESS=1
naive kraken
that sucks
tepid olive
tl;dr of getting it setup (for now)
- Change theos origin to https://github.com/...
iCraze tried it and it doesn't work
The rpath isn't changed
grim sparrow
mr @hasty ruin
hasty ruin
gm
grim sparrow
can you confirm your findings on the newest commits of both
grim sparrow
aight
naive kraken
<@208334999722786816> how far can i get with just a kernel exploit
what device
tepid olive
SE 2
naive kraken
not far
tepid olive
Can I use the PACMAN technique for PAC
naive kraken
Can I use the PACMAN technique for PAC
😂 if you can get them to work, possibly
tepid olive
lol
naive kraken
actually probably PAC is enough for a full jailbreak
grim sparrow
tepid olive
i didn't see this
naive kraken
and more stable
tepid olive
well how am i gonna execute stuff without trustcache
grim sparrow
i didn't see this
it may be because vendor/lib wasn't checked out to my branch properly?
naive kraken
well how am i gonna execute stuff without trustcache
using the old technique
tepid olive
amfi hax?
tepid olive
detached blobs generator
what's that
naive kraken
and you can use the PAC bypass to promote vnodes to level 8 if I'm not incorrect
naive kraken
what's that
the only component of jailbreaks that has never been open sourced ever
csblob
tepid olive
Oh cool
grim sparrow
I wonder if coolstar will open source their stuff alongside libhooker now that they're dipping
tepid olive
So I give up
naive kraken
you generate a detached signature using an expired CT cert
tepid olive
Someone else do it
naive kraken
and then you NULL shit in kernel mem and attach it to every process
naive kraken
Someone else do it
do what
tepid olive
make a jailbreak
naive kraken
I'm going to start making a Fugu15 based jailbreak as part of my bachelor thesis in April probably
if all goes well
tepid olive
cool
naive kraken
but I still need physrw from weightBufs
And I'm unsure whether I can pull that off lol
rest of it should be possible tbh
although passing around primitives will be a bitch
indigo peak
@tepid olive you can edit icon mask using dirtycow, but you cant clear the icon cache to actually make it show up
like you can overwrite the mask files, but its impossible (maybe?) to make it actually work
which is sad
naive kraken
kernel stuff is the worst
also making a patchfinder will probably take up a lot of time
but maybe I can reuse stuff from Fugu
but then I'd have to write swift
: - /
tepid olive
but then I'd have to write swift
good honestly
tepid olive
like you can overwrite the mask files, but its impossible (maybe?) to make it ac...
maybe you can corrupt it
grim sparrow
fsr my vendor/lib reverted back to master <:frW:784511540120256562>
lovely
tepid olive
or straight up destroy it
tepid olive
What about on jailbroken phones
indigo peak
grim sparrow
@hasty ruin can you start hosting iphoneos-arm64 packages now
so that we can get the ball rolling a bit
tepid olive
true ^^^
indigo peak
What about on jailbroken phones
on jb phones youd just delete every file in the cache folder
grim sparrow
i've done it with some of my tweaks, aemulo coming in the next update
hasty ruin
can you check my repo setup? not 100% sure how it needs to be
dud some stuff for it yesterday
grim sparrow
can you check my repo setup? not 100% sure how it needs to be
just make the archs in the release file iphoneos-arm iphoneos-arm64
and then it should just work™️
hasty ruin
thought i had to sign it now
grim sparrow
you should yes
indigo peak
or straight up destroy it
amy and i were thinking that maybe we could use dirtycow to "redirect" the folder
grim sparrow
#!/bin/bash
script_full_path=$(dirname "$0")
cd $script_full_path || exit 1
rm Packages Packages.bz2 Packages.xz Packages.zst Release Release.gpg
echo "[Repository] Generating Packages..."
apt-ftparchive packages ./pool > Packages
zstd -q -c19 Packages > Packages.zst
xz -c9 Packages > Packages.xz
bzip2 -c9 Packages > Packages.bz2
lz4 -c9 Packages > Packages.lz4
echo "[Repository] Generating Release..."
apt-ftparchive \
-o APT::FTPArchive::Release::Origin="Amy's Repo" \
-o APT::FTPArchive::Release::Label="Amy's Repo" \
-o APT::FTPArchive::Release::Suite="stable" \
-o APT::FTPArchive::Release::Version="1.0" \
-o APT::FTPArchive::Release::Codename="ios" \
-o APT::FTPArchive::Release::Architectures="iphoneos-arm iphoneos-arm64" \
-o APT::FTPArchive::Release::Components="main" \
-o APT::FTPArchive::Release::Description="Amy's Dump of Tweaks" \
-o APT::FTPArchive::md5=true \
-o APT::FTPArchive::sha1=true \
release . > Release
echo "[Repository] Signing Release using Amy's GPG Key..."
gpg -abs -u 816C7A50B575162DC29288CD72339224580758CE -o Release.gpg Release
echo "[Repository] Finished"
this is the script my repo uses
indigo peak
basically just use dirtycow to replace a folder with another folder
so replace the cache folder with an empty folder
tepid olive
Yeah well how about replace it with an empty file
grim sparrow
that might work actually
well
in theory it would apply but I don't know how much processes would like it
tepid olive
it'll die after
grim sparrow
yeah
tepid olive
maybe not tho
indigo peak
and then i also dont know if a respring would be enough for the changes to be made on top of that
indigo peak
so its like:
- replace the mask files
- clear the icon cache
- reboot
- profit
tepid olive
launchctl reboot userspace
indigo peak
thats all the guides ive found
naive kraken
it won't work if you reboot
aren't changes on /var persistent
indigo peak
launchctl reboot userspace
iOS 16
indigo peak
thats what im scared of
tepid olive
Wholesome.
indigo peak
bc i dont have any test devices
tepid olive
Bro IOHID sucks so much
indigo peak
does dirtycow have a minimum version
tepid olive
It's impossible to do this
tepid olive
does dirtycow have a minimum version
works on 15.x iirc
indigo peak
what ab lower
grim sparrow
ive seen claims it works on 14.x
hasty ruin
@grim sparrow what's the plan with supporting rootless and rootful at once?
grim sparrow
Repos can host both archs
hasty ruin
and PM shows applicable?
hasty ruin
ight
grim sparrow
so my repo shows both but you'll only see ones for your arch
hasty ruin
bundle id can be the same i assume
grim sparrow
chariz supports iphoneos-arm64 rn too
grim sparrow
bundle id can be the same i assume
everything can be the same
hasty ruin
bet
grim sparrow
literally all you need to do is ROOTLESS=1 and Theos will handle the rest
hasty ruin
repo.icrazeios.com v2 eta son
tepid olive
@grim sparrow quick question
grim sparrow
all that needs to change is the arch but theos does that for you
tepid olive
How can I load a small chunk of a mach-o
grim sparrow
so you don't need to go around manually changing it
grim sparrow
How can I load a small chunk of a mach-o
I have no idea I cannot lie
tepid olive
FileHandle?
grim sparrow
that would work yeah
real question, is there any benefit to filehandle over FILE * and friends
naive kraken
real question, is there any benefit to filehandle over FILE * and friends
not that I'm aware
hasty ruin
anyone mind trying to install something from repo.icrazeios.com
make sure i didnt break everything
(nothing on there is built for rootless though)
pearl sail
can't access it
grim sparrow
looks good to me™️
hasty ruin
W
hasty ruin
wholesome
time to rebuild everything
ugh i need to get an xc11 tc
accidentally nuked my theos toolchain dir
grim sparrow
ugh i need to get an xc11 tc
no you don't
hidden benefit of rootless is that you only need to worry about modern versions
hasty ruin
no you don't
not for this
grim sparrow
F
hasty ruin
but i still need it for "legacy"
grim sparrow
using xc11 on arm macs is a bit annoying icl
hasty ruin
i've had no issue just using the tc for the past few years
ok im just gonna build with hikari tc but no options whilst i wait for xc11 to download
hasty ruin
everything can be the same
should be 2 iphoneos-arm64 packages on there now
grim sparrow
splendid!
indigo peak
@grim sparrow should i try deleting the icon cache folder
grim sparrow
doesnt sound like a good idea
indigo peak
using common sense, the folder should just re make itself
grim sparrow
aaaand hash mismatch
cloudflare cache screwing you over?
grim sparrow
I had to add a command to my index to clear the cache
hasty ruin
yep
indigo peak
doesnt sound like a good idea
ok, NeonBoard, hear me out
its makefile deletes the folder as a potinst
hasty ruin
that was it
grim sparrow
by default cloudflare only caches the .zst file
indigo peak
after-install::
install.exec "rm -rf /var/containers/Shared/SystemGroup/systemgroup.com.apple.lsd.iconscache/Library/Caches/com.apple.IconsCache"
fast trout
Amena
grim sparrow
so you will always be served latest release but sometimes old packages.zst
indigo peak
[[NSFileManager defaultManager] removeItemAtPath:@"/var/containers/Shared/SystemGroup/systemgroup.com.apple.lsd.iconscache/Library/Caches/com.apple.IconsCache" error:nil]; it also deletes it whenever it resprings
grim sparrow
my new fix is just host my repo on github pages and only put that through dns
tepid olive
after-install::
install.exec "rm -rf /var/containers/Shared/SystemGroup/syst...
lmao this doesn’t seem like a terrific idea
indigo peak
grim sparrow
not cache
tepid olive
deleting directories in post install
grim sparrow
after-install::
install.exec "rm -rf /var/containers/Shared/SystemGroup/syst...
this seems like possibly the worst idea ever lmao
tepid olive
deleting directories in post install
system directories at that
tepid olive
https://github.com/ArtikusHG/NeonBoard/blob/master/neonboardprefs/NBPShared.m#L3...
isn’t neonboard literally ass?
grim sparrow
https://github.com/ArtikusHG/NeonBoard/blob/master/neonboardprefs/NBPShared.m#L3...
Neonboard is known to cause bootloops
indigo peak
yeah ik
grim sparrow
if anything, use it as a reference of what not to do
tepid olive
fr
indigo peak
if anything, use it as a reference of what not to do
thats just my github
grim sparrow
the bootloops that mr bingner caused with his uicache build
I wouldn't trust that ios will handle it correctly
shy reef
thats just my github
True that
indigo peak
I wouldn't trust that ios will handle it correctly
:///
im all out of ideas in that case
grim sparrow
bear with!
indigo peak
unless someone can figure out how to overwrite a folder w dirtycow, i have -1 ideas
grim sparrow
curl -X POST "https://api.cloudflare.com/client/v4/zones/<your_zone>/purge_cache" -H "X-Auth-Email: <your email>" -H "Authorization: <your token>" -H "Content-Type: application/json" --data '{"purge_everything":true}'
indigo peak
@grim sparrow so it's NOT a good idea to [[NSFileManager defaultManager] removeItemAtPath:@"/var/containers/Shared/SystemGroup/systemgroup.com.apple.lsd.iconscache/Library/Caches/com.apple.IconsCache" error:nil];
grim sparrow
indigo peak
frick
indigo peak
so you wanna run some code?
:(
thats absurd
its almost monday
wtf
@grim sparrow ok hear me out
instead of just deleting the folder
i delelte and create a new one
😄
grim sparrow
and put what inside??
grim sparrow
but isnt that a terrible idea?
indigo peak
no? i dont think so
ive done that on past iOS versions
and its been okay
the whole point of "clearing the cache" is to make the folder empty
indigo peak
whats the worst that would happen
naive kraken
<@270540064512147456> so it's NOT a good idea to `[[NSFileManager defaultManager...
it's fine
Twitter
at least it was for me
naive kraken
But I also triggered an icon cache reload right after it
indigo peak
and then doing that worked
indigo peak
But I also triggered an icon cache reload right after it
hmm
@grim sparrow LMAO
dont even have perms to delete it
idk what i was expecting
naive kraken
<@270540064512147456> LMAO
dont even have perms to delete it
who would have seen that coming
indigo peak
idk for some reason i thought it would work
indigo peak
alright back to square one
wicked summit
stop tracking to hack my computer and steal my vbucks
hasty ruin
stop tracking to hack my computer and steal my vbucks
i will leak 300 thousand of your ifunny accounts.
wicked summit
tepid olive
{ Filter = { Bundles = ( "com.apple.springboard" ); }; }
``` how do i make this an actual plist so theos stops complaining about `ERROR: Failed to convert plist data (-1)`get gud
vivid dew
plutil -convert xml1
faint stag
```plist
{ Filter = { Bundles = ( "com.apple.springboard" ); }; }
``` how do i m...
who doesn't start with an xml to begin with
tepid olive
who doesn't start with an xml to begin with
theos nic.pl
faint stag
i use linux
just write plist manually
tepid olive
just write plist manually
how do i write it
faint stag
how do i write it
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Filter</key>
<dict>
<key>Bundles</key>
<array>
<string>com.apple.springboard</string>
</array>
</dict>
</dict>
</plist>
thank
zenith hatch
go get dev role
zenith hatch
bruh
tepid olive
elder scaffold
have dev role
hasty ruin
unkempt raft
who’s joe
ocean raptor
Zefram source code
Suck
My
Balls
stan procursus
Oh btw, next person to suggest patching realpath in libiosexec gets punched in the balls
CC: @naive kraken
naive kraken
Oh btw, next person to suggest patching realpath in libiosexec gets punched in t...
maybe you should consider patching realpath in libiosexec
ocean raptor
maybe you should consider patching realpath in libiosexec
:ntwerk:
I have been considering doing your mom
cloud yacht
"<@&355177983398641674>"
ocean raptor
developers are not real
pearl sail
The only thing I developed is depression
gentle grove
hasty ruin
terraria wholesome
indigo peak
hi
indigo peak
i was gonna do that!!!
tepid olive
well i did it
tepid olive
@indigo peak
indigo peak
tepid olive
Problem, C users?
primal perch
yea
ocean raptor
Gonna rewrite QuickActions in xml
wicked summit
Jailbreak tweaks written in webasm
tepid olive
- Nobody can write assembly
wicked summit
Do it
tepid olive
Okay
It's gonna be so slow
Lmaoo
Great. So who's gonna use it?
But you don't use jailbreaks
And Zefram is private
How will Shep use it?
hexed knot
me toooo
hexed knot
capt i've been with the development of zefram since the beginning
hexed knot
since the video with rockstar by post malone in the background
hexed knot
asahi
hexed knot
leak
tepid olive
that was funny stuff
hexed knot
this is the most "confidential" file i have
tepid olive
would you like a bit of EXC_BREAKPOINT with your EXC_BAD_ACCESS?
hexed knot
relating to this discord server ofc
tepid olive
Swift better
unsafe
// This file is licensed under the BSD-3 Clause License
// Copyright 2022 © Charlotte Belanger
import Foundation
#warning("TODO: Unhook API")
It's my new file header
Yes?
Yes
Capt I have a challenge for you
?
rewrite one file from zefram with more than 100loc in Swift
tepid olive
@grave sparrow Build Batchomatic for rootless
U know what I hate? People that use MSFindSymbol for public symbols
Like bro what is wrong with you.
hasty ruin
this is the most "confidential" file i have
hasty ruin
i believe that
tepid olive
[3 letter expression]
wind ravine
how can you loop through a folder group in your app in swift?
primal perch
gi
wind ravine
wicked summit
MSFindSymbol MSFindSymbol
tepid olive
MSFindSymbol MSFindSymbol
MSHookFunction MSHookFunction
@grave sparrow Does Zefram support hooking itself
wicked summit
Anyone currently developing an MSFindSomeoneToLoveMe?
primal perch
Anyone currently developing an MSFindSomeoneToLoveMe?
just go out the door and youll find them
egg_irl leaked
tepid olive
What the fuck.
wicked summit
primal perch
brought to you by the same group of people that think clothes shouldn't have gender associated with them
wear a skirt or dont idgaf
#developer-shitpost
go for it. i will gag but its your life
wicked summit
Capt Inc. Incorporated Inc.
tepid olive
brought to you by the same group of people that think clothes shouldn't have gen...
Kendrick Lamar is the best trans representation :pray:
u won't fit
wind ravine
femboys
primal perch
lol
grim sparrow
capt you have no ass
quick aurora
Has anyone done extensive research in what customization can be done by modifying iOS backups?
I'm working on stuff right now and was wondering if there is somewhere I can start with or if I'm on my own
indigo peak
I think you can do most things in /var
ocean raptor
Kendrick Lamar is the best trans representation :pray:
Kendrick Lamar just like me fr fr
indigo peak
but I could be very wrong
ocean raptor
Me when people get mad at me for saying the fslur repeatedly
tepid olive
Me when people get mad at me for saying the fslur repeatedly
the song is good
who cares
hexed knot
fa
cloud yacht
hexed knot
i laughed
primal perch
9/11
primal perch
nfr
tepid olive
real
(the homebrew experience)
how much would you need to be paid to do this and send a picture to #development ?
hasty ruin
how much would you need to be paid to do this and send a picture to <#6881246002...
he would pay $50
tepid olive
unfortunate. we will have to find an alternative source for funding.
an arrangement will be made, rest assured. undoubtedly our investors will also be interested in said image.
wind ravine
why is dirtycow saying file too big even tho its only 12 kb?
restive ether
because it's too big
wind ravine
i thought it could be up to 16 kb
faint stag
why is dirtycow saying file too big even tho its only 12 kb?
Are you trying to swap a file that's smaller in size
tepid olive
sometimes big is better
crude swallow
nerd channel
no this one’s a dating hub
for men
they all join to fuck
with code
glacial matrix
<@396496265430695947>
An alternative with decorators would allow registering hooks like this:
@hook(“NSObject”)
def isProxy(self, _cmd):
return 1
I’m not figuring out how to mention you as discord is not listing you as a mentionable user. Anyway:
Are you the one hosting the iPhone dev wiki? If so, it’s currently 503’ing
hasty ruin
I’m not figuring out how to mention you as discord is not listing you as a menti...
that'd be why
onyx ember
You need a video of the planes actually hitting
No lol
hasty ruin
wind ravine
Are you trying to swap a file that's smaller in size
what?
does it have to be the exact same size?
wind ravine
its smaller
faint stag
strange
wind ravine
i got it working somehow
primal perch
yea
indigo peak
how do i dump firmware keys on windows
iphone 7 (9,3) 15.7.1, so they keys arent on the wiki
hasty ruin
Fake dev
indigo peak
checkm8 isnt checkra1n tho
ocean raptor
checkm8 isnt checkra1n tho
True, I forgot that checkra1n uses checkm9 not checkm8
ocean raptor
💀
twilit jungle
Is it?
primal perch
no its actually really easy
step 1. get a job
step 2. get paid
step 3. purchase non-locked phone
twilit jungle
fr just type in password
primal perch
ong
gentle grove
step 1. get a job
step 2. get paid
step 3. purchase non-locked phone
step 2. buy a hammer
step 3. kidnap the owner
step 4
indigo peak
fr just type in password
bypass, not unlock
im too lazy
i dont wanna type the password
twilit jungle
They are the same.
ocean raptor
Anyone have the MOXii pdfs and want to share?
primal perch
Anyone have the MOXii pdfs and want to share?
broke
single developer documents and writes up about iOS
guys how do i steal this
🗿
its not even unfairly priced dawg a whole set is like what 250$
fr
250$ is like 2 days of work
lets just say only businesses are buying it
ocean raptor
250$ is like 2 days of work
It's exactly 2 days for me lol
Would anyone like to donate $250 to me 
hasty ruin
pearl sail
when did iCraze become r kelly
timid furnace
Anyone have the MOXii pdfs and want to share?
it is on the interwebz 👀
pearl sail
zlibrary exist as well
hasty ruin
true
brazen timber
lets just say only businesses are buying it
tepid olive
i did
wind ravine
can dirtycow replace caches with files of larger size?
hasty ruin
@grim sparrow your theos fork seems to break non-rootless packages
at least on xina
don't have another device with me to test another jb rn
hasty ruin
grim sparrow
Xina manually patches /Library/Frameworks/CydiaSubstrate…
It’s not looking for rpath
hasty ruin
trolled!
lime pivot
<@239564780271173642> might have to bring back the floating rpath:/
ahhhh shootttttt
god I don't want to
but if we have to...
grim sparrow
I can’t think of a better option rn icl
grim sparrow
Adam unless you want to convince him to change the rpath in future
Instead of modifying just /Library/…
ocean raptor
Xina manually patches /Library/Frameworks/CydiaSubstrate…
what?
grim sparrow
Yeah
ocean raptor
no like what is he patching
ocean raptor
grim sparrow
He’s just got a list of things to patch
ocean raptor
why does that effect @rpath?
grim sparrow
Because
He hasn’t hardcoded support for @rpath
He’s literally hardcoding the string /Library/Frameworks/Cydia….
ocean raptor
He’s literally hardcoding the string /Library/Frameworks/Cydia….
ok&?
grim sparrow
It’s because now Theos will always build with @rpath/CydiaSubstrate.framework/CydiaSubstrate
ocean raptor
yeah and xina will leave it alone
grim sparrow
And the rpath is set appropriately to /Library or /var/jb/Library
ocean raptor
And the rpath is set appropriately to /Library or /var/jb/Library
just add both all the time
💀
grim sparrow
Well that’s what we were doing originally
But I changed it so only set the right one
To avoid dangling rpath attacks
ocean raptor
"dangling rpath attacks" 🤓
grim sparrow
Hence due to shittery by Xina either he has to change his patch to change the rpath or we just revert that commit
Not entirely
ocean raptor
you realize it's super easy to gain root access on a jailbroken phone
grim sparrow
Exactly!
But I think he blocked me
Or at least muted me
Yup
I need to get better at solving problems in ways other than just being loud
ocean raptor
I need to get better at solving problems in ways other than just being loud
in this community?
grim sparrow
Mostly yeah
ocean raptor
grim sparrow
Every other community seems to have reasonable conversations
Instead of just “I don’t like your way, blocking you”
To be fair
This is not my fault
Like in the slightest
I’ve sent him another message
If he doesn’t get back in a day or two I’ll make a tweet
fiery seal
Can past .ipsw links be retrieved from phobos?
ocean raptor
Can past .ipsw links be retrieved from phobos?
fiery seal
timid furnace
Phobos is not an API
You can't request old versions from it
Use archive.org or something
Or use IPSW.me it gets everything from there anyway
fiery seal
I see
ocean raptor
it has all the links though
timid furnace
I mean yea generally you can grab it off apple's cdn
For the ones that were removed, get it from archive.org, Siguza, or someplace else
But I'm assuming they're trying to find the links to begin with
fiery seal
The usual places usually only have OTA bundles for apple watch (and appledb.dev has only a few apple watch .ipsws) but there are a lot of shady "apple watch repair" websites that ask you to pay money or register and download ipsws there
timid furnace
Watch IPSWs aren't on that link
fiery seal
How would they be acquired from Apple's servers then
timid furnace
Friend at apple™️
fiery seal
ocean raptor
Appledb grabs them from google
wdym google
timid furnace
In the right places you will find direct links, but only for a small subset of versions
There isn't a specific place I checked
ocean raptor
the usual process is someone gives the links to Nicolas who shares them
timid furnace
the usual process is someone gives the links to Nicolas who shares them
Yea I have no idea behind that, but that's not really helpful for cube anyway
The IPSWs I added were all obtained from googling
Tl;Dr: want watch IPSWs? Use what appledb has, pay for one of those shady sites, or get a friend at apple
fiery seal
zamn
timid furnace
Can you ask them for the contact details of the software update team while you're at it
Need to go off on them
Not just the tss people
Pallas is annoying
And mesu they make funny mistakes
Like hand editing plists
timid furnace
you wanna know the funny shit
Intel's API portal is used both internally and externally
i can see like 400 internal apis even though I'm just trying to get access to one external one
Thanks Intel
tepid olive
i have some
mossy raven
I have this hook:
%hook ViewController
-(void)onClick:(id)arg0 {
RLog(@"Button pressed at: %p", arg0);
if(arg0 == 0x10526d490) {
RLog(@"Its Working");
}
%orig;
}
%end
How can I check which Button was pressed because the Address changes every App start?
twin cedar
Can anyone develop a tweak that resets app permission for ios 15.6?
faint stag
Can anyone develop a tweak that resets app permission for ios 15.6?
When you remove an app the permissions get reset?
Wdym
twin cedar
yeah not trying to redownload the app every time
restive ether
😭😭😭
twin cedar
i am willing to pay
faint stag
yeah not trying to redownload the app every time
Wipe the app data i guess
twin cedar
where
twin cedar
bro what the fuck are you spitting
shell sphinx
bro just use appdata
twin cedar
oh apps manager the tweak
shell sphinx
works on palera1n 
shell sphinx
i did
twin cedar
oh ok
naive kraken
Hence due to shittery by Xina either he has to change his patch to change the rp...
I feel like the solution would be to have the rootful package be 1:1 how it was before?
Or am I too controversial?
grim sparrow
That would be too much of a pia
naive kraken
hm
idk, what happens if I want to use this rpath thing on like iOS 7
would it work?
I feel like it's too late for xina to fix this
so either you need a workaround or the old behaviour
twin cedar
are there any mcc mnc carrier name spoofers?
restive ether
I feel like it's too late for xina to fix this
not asking a whole lot from him
grim sparrow
And going forward it’s definitely a better option
naive kraken
not asking a whole lot from him
yeah but you need to acknowledge that 70% of users are stupid and don't update their jailbreaks because they think the new updates are less stable
faint stag
are there any mcc mnc carrier name spoofers?
What are you trying to do
naive kraken
so even if he fixes this, it's already too late
faint stag
yeah but you need to acknowledge that 70% of users are stupid and don't update t...
70? That's a bit low
restive ether
their sideloaded app will expire eventually they'll have to update it
restive ether
catering to a dumb minority shouldn't be the reason we lose out on an important change
once their stuff breaks they'll figure it out
naive kraken
no
I will figure this out
when I recompile Crane and a bunch of people now complain that it doesn't work
same goes for other devs
restive ether
a temporary grievance
naive kraken
they will want the old behaviour just so their users don't complain
restive ether
the sooner this is done the better
faint stag
yeah but you need to acknowledge that 70% of users are stupid and don't update t...
Ngl the new updates can break things, it's been done before
But this doesn't apply to certain jbs 
naive kraken
so they will downgrade theos and never update it
and then you get all kinds of funny issues
grim sparrow
I’ve sent messages to him so maybe mr can offer a solution
twin cedar
What are you trying to do
so my phone doesn't have a sim rn. can i spoof it somehow that it says EE or Orange or whatever at the top and also change the mcc mnc numbers. So the app would read 260 02 Verizon instead of no sim
faint stag
so my phone doesn't have a sim rn. can i spoof it somehow that it says EE or Ora...
Don't think you can spoof that
twin cedar
damn
faint stag
Sure you could probably make it appear that way in settings but no tweak exists for it specifically iirc
faint stag
Sure you could probably make it appear that way in settings but no tweak exists ...
But it's appearance only, no functionality would change
twin cedar
Sure you could probably make it appear that way in settings but no tweak exists ...
you're a genius code it for me and make some $
faint stag
you're a genius code it for me and make some $
Not that kind of genius
twin cedar
damn
cloud yacht
idk, what happens if I want to use this rpath thing on like iOS 7
I have a tweak that builds on my iOS 7 device if you want me to test.
Actually I have 2 tweaks that work on iOS 7
blazing vault
HOW TO (hopefully) PASS -[WFShortcutSigningContext validateAppleIDValidationRecordWithCompletion:]: (validation for contact signed files) // aka possibly contact sign shortcuts entirely on device on iOS without the need to use private frameworks
(info from iOS 15.2, hopefully hasn't changed since then)
-This method gets SFAppleIDClient from private framework sharing.framework
-I thought it would be impossible to replicate without private frameworks but turns out I may be wrong
-The method first checks [[[[[SFAppleIDClient alloc]init]myAccountWithError:nil]altDSID]isEqualToString:[self appleIDValidationRecord]]
-Aka, if appleIDValidationRecord corresponds to the shortcut, pass
-If not, all hope is not lost!
-Checks if private sharing is enabled
-If so, checks valid phone hashes / email hashes associated with SFAppleIDClient (they're SHA256 hashes btw)
-If hash match, allow import of contact signed shortcut
Method 1:
-If appleIDValidationRecord can be found, just copy it from the user to a fake SFAppleIDClient. Private Sharing won't even be needed to import since shortcuts just thinks it's from the user themselves.
Method 2:
-Don't fake appleIDValidationRecord
-Get phone or email, even if it's not able to be retrieved without private framework access it won't matter since you can just ask a user to input their phone number / email address
-Hash it (SHA256).
-Copy user's hashes to a fake SFAppleIDClient
-Not sure if the apple id client info is signed (assuming it is or else that's a massive oversight) but if it is that shouldn't matter, just resign with the fake SFAppleIDClient. (For resigning without directly calling WorkflowKit, just replicate it instead, https://raw.githubusercontent.com/0xilis/RandomShortcutsRev/main/WFShortcutPackageFile.m this is definitely not correct but should still sort of resemble the source so fix it up and should be good)
-Boom, contact signed shortcut entirely from an iOS app which technically doesn't use private frameworks
This is just contact signing how WorkflowKit does it so less need to worry about it breaking since this obv isn't a vuln
If appleIDValidationRecord isn't possible to retrieve without using a private framework / access to sharingd then I method 1 wouldn't be viable but really don't see any reason why method 2 wouldn't be currently
hasty ruin
<:troll:794397046706667530>
hasty ruin
I have this hook:
```objc
%hook ViewController
-(void)onClick:(id)arg0 {
RLo...
can't help too much without extra context, but if the button has text, you could try checking that (be careful of localisation, though), or you could check the selector of its target, or just check which index the button is within its superview's subviews
rain falcon
@grave sparrow listen fucker
hasty ruin
@grave sparrow listen fucker
primal perch
@grave sparrow listen fucker
indigo peak
@grave sparrow listen fucker
tepid olive
**HOW TO** (hopefully) **PASS -[WFShortcutSigningContext validateAppleIDValidati...
Very cool
primal perch
meth
ocean raptor
@lime pivot @marble perch finally fixing man-db on macOS
Still need to fix locales on rootless....
ocean raptor
@grave sparrow pls add launchctl plist 🥺
restive ether
<@434097922762735618> pls add `launchctl plist` 🥺
my suggest was attach
ocean raptor
Definitely not macho parsing...
tepid olive
<@434097922762735618> pls add `launchctl plist` 🥺
What do you even need with that
restive ether
methamphetamine
primal perch
methamphetamine
ocean raptor
What do you even need with that
Compatibility with apple launchctl
tepid olive
Compatibility with apple launchctl
what does it do
ocean raptor
what does it do
Prints the __TEXT.__info_plist segment of a macho
Run launchctl plist /bin/launchctl on your computer
may I introduce you to my friend ida
It gets the pointer and len of the segment and passes it to xpc_create_plist
Then run launchctl_xpc_object_print on it
indigo peak
ocean raptor
xpc_object_t xpc_create_from_plist(const void * data, size_t length);
Pass the pointer to the start of the __info_plist section into data
spawn_via_launchd() COOL
wind ravine
why does serializing a plist with format .binary corrupt it?
PropertyListSerialization
it works fine with xml but xml makes it too big for dirtycow
i tried dynamic cow's function
but it doesnt work
wind ravine
its the mobilegestalt plist
im using the same function as dynamic cow
and editing the same file
just a different key
wait
func setPlistValue(plistPath: String, backupName: String, key: String, value: String, completion: @escaping (Bool) -> Void) {
DispatchQueue.global(qos: .userInteractive).async {
let stringsData = try! Data(contentsOf: URL(fileURLWithPath: plistPath))
// open plist
let plist = try! PropertyListSerialization.propertyList(from: stringsData, options: [], format: nil) as! [String: Any]
func changeDictValue(_ dict: [String: Any], _ key: String, _ value: String) -> [String: Any] {
var newDict = dict
for (k, v) in dict {
if k == key {
newDict[k] = value
} else if let subDict = v as? [String: Any] {
newDict[k] = changeDictValue(subDict, key, value)
}
}
return newDict
}
// modify value
var newPlist = plist
newPlist = changeDictValue(newPlist, key, value)
// overwrite the plist
let newData = try! PropertyListSerialization.data(fromPropertyList: newPlist, format: .binary, options: 0)
let succeeded = overwriteFileWithDataImpl(originPath: plistPath, backupName: backupName, replacementData: newData)
DispatchQueue.main.async {
completion(succeeded)
}
}
}```this is the function
backup name is where the backup is stored (subfolder) in app support
overwriteFileWithDataImpl is from fontoverwrite
screw it let me try manually calling the table rather than recursion
ok nope
xml screws it up too for some reason
nvm
i was calling the wrong function
ye xml is still too big
but xml works on a smaller file while binary doesnt
this is what it looks like
nope
it happened to my system version
settings couldnt read it either
same function caused it
wdym
guard let plistData = try? PropertyListSerialization.data(fromPropertyList: plist, format: .binary, options: 0)
tepid olive
the apple open source code prolly works still
lime pivot
<@239564780271173642> <@989294977748189204> finally fixing man-db on macOS
thank youuuu
hasty ruin
indigo peak
nah fuck #freejaidan
#demotealpha
hasty ruin
wind ravine
😔
hasty ruin
primal perch
hasty ruin
