development

[visual meadow]

if the bug even does achieve the same effect as the old one, we'd have to find a way to install it for 16.2+, and, It wouldnt be named "TrollStore 2"

[manic willow]

what would it be named 🤨

[visual meadow]

TrollStore

[manic willow]

smh

trollstore exists then right

[visual meadow]

what

[primal perch]

Trollstore 2

[manic willow]

does trollstore exist?

[visual meadow]

Yes

Trollstore exists

[manic willow]

so how can I use it for ios 16

[visual meadow]

what the fuck do you mean by trollstore existing

brp

[manic willow]

you said it would be named trollstore

[visual meadow]

yes it would just be modified to use the new certificate

thats literally it

[manic willow]

so then do that

[visual meadow]

but we don't know if the new bug can achieve the same effect

someone needs to figure out what to do first

[manic willow]

how would you figure out what to do

I can totally help

[primal perch]

just buy an android

infinite apps

[indigo peak]

var body: some View {
    NavigationView {
        Form {
            TextField("First Name", text: $firstName)
                .disableAutocorrection(true)
            TextField("Middle Name", text: $middleName)
                .disableAutocorrection(true)
            TextField("Last Name", text: $lastName)
                .disableAutocorrection(true)
            Picker(selection: $gender, label: Text("Gender")) {
                ForEach(0 ..< gender_options.count, id: \.self) {
                    Text(String(self.gender_options[$0]))
                }
            }
            DatePicker("Date of Birth", selection: $dob, displayedComponents: [.date])
            
            Section {
                Button("Generate") {
                    print("test")
                }.frame(minWidth: 0, maxWidth: .infinity)
                    .buttonStyle(.bordered)
            }.listRowBackground(Color.clear)
        }
    }
}

is fine

var body: some View {
    NavigationView {
        Form {
            TextField("First Name", text: $firstName)
                .disableAutocorrection(true)
            TextField("Middle Name", text: $middleName)
                .disableAutocorrection(true)
            TextField("Last Name", text: $lastName)
                .disableAutocorrection(true)
            Picker(selection: $gender, label: Text("Gender")) {
                ForEach(0 ..< gender_options.count, id: \.self) {
                    Text(String(self.gender_options[$0]))
                }
            }
            DatePicker("Date of Birth", selection: $dob, displayedComponents: [.date])
            
            Section {
                HStack {
                    // ...
                }
            }
            
            Section {
                Button("Generate") {
                    print("test")
                }.frame(minWidth: 0, maxWidth: .infinity)
                    .buttonStyle(.bordered)
            }.listRowBackground(Color.clear)
        }
    }
}

but this isnt

im so

lost

Trailing closure passed to parameter of type 'FormStyleConfiguration' that does not accept a closure

[manic willow]

I want ifone

[primal perch]

just get udid registrations then

pragmatically it’s the same without arbitrary entitlements

good enough for me

[faint timber]

Safari autofill url correctly challenge:
Impossible!

[manic willow]

Does trollstore work on iOS 13?

[visual meadow]

no

[manic willow]

So I have to update to at least iOS 14?

[visual meadow]

yes

probably trollstore npcs

[brazen timber]

fr

[manic willow]

Should I do that or should I just stay on iOS 13

[visual meadow]

Do you even have blobs?

[manic willow]

yeah

[visual meadow]

And besides, what phone do you have?

[manic willow]

iPhone SE 2020

[visual meadow]

You can't upgrade to 14

[manic willow]

Why not >:(

[visual meadow]

Even with blobs

Sep incompatibility and baseband

and rose, etc

[manic willow]

smhhh

How lame

[zenith hatch]

gm

https://cdn.captinc.me/safentwerk.gif

capt whats the limits on your file upload thingy

lmao

[brazen timber]

gm

[faint stag]

made the restorefaq tag a few months back just for this

[visual meadow]

_ _

[faint stag]

heard her on the phone talking about how small it was

[manic wolf]

hey, i'm looking for a method to hook that'd let me conditionally block an app from launching before its trust state is checked by the OS. below is the only method i've found that's called early enough, but as expected, launches from everywhere but app icons won't go through this check:

%hook SBLeafIcon
- (void)launchFromLocation:(id)location context:(id)context {
    if (isAppAllowedToRun([self applicationBundleID])) {
        %orig;
    }
}
%end

does anyone have a clue which method(s) i should be looking at instead? feels like it has to be close by

[faint stag]

might want to take a look at appsync's code

FrontBoard handles some stuff with signatures etc and can prevent apps from launching

so you could hook it and add a block there probably

[manic wolf]

yeah i'm already hooking trustStateForApplication, but i need to send an alert to the user before that check happens

[faint stag]

you can just send an alert and depending on what happens to the alert you can return another value for truststate?

[manic wolf]

i've explored that idea—won't work. not sure how i'd set the return value of the function from the UIAlertAction handler callback

[faint stag]

so what exactly is this tweak supposed to do

just asking

[manic wolf]

the tweak's supposed to let users run untrusted apps. it's pretty much whatever is in appsyncunified-frontboard, but instead of auto-trusting every untrusted app, it'll also ask them if they want to trust it when they attempt to launch

i suppose i could let the app launch anyways and then kill it, but that seems very hacky

[faint stag]

don't think there's a need to do that

i'm not too good with objc myself but a-shields is open source and that does intercept app launches with alerts

[lime patio]

That would have been me 😁

[lime patio]

I found sudo not working on 14.8. (iPhone 7) su works fine. It works if I reset mobile passwd to default. Also, works fine in OddesseyRa1n, if that helps any? Another strange anomaly I have found is nonce gen does not show up in System Info, but does in Oddesseyra1n. I turned on sudo and sudoers logging if that can help? I can send you the logs if you wish? I wonder if the Procursus' sudoers file in /etc/sudoers.d has anything to do with it? Maybe Taurine is not registering it as I suspect it was made by Oddesseyra1n. I have tried every 1.1.7 version, both exploits and sudo with unique passwd was broken. Full disclosure, I am coming from Oddesseyra1n without doing a rootfs restore if that makes a difference...

[olive peak]

If an app detects load commands how would i make it able to not detect the load command for my tweak?

[faint timber]

Learn RE

[olive peak]

The app is very obfuscated, im very bad at RE

I thought theres a general way for that stuff

I can try to find the function but im not really sure what to look for

[faint timber]

then you aren't ready to do what you ask

[naive kraken]

@plain python this is wrong https://github.com/Odyssey-Team/Taurine/blob/main/Taurine/post-exploit/utils/extractKernel.swift#L11 the active file is not guaranteed to exist, you need to get the preboot hash like this https://github.com/opa334/Dopamine/blob/master/Packages/Fugu15KernelExploit/Sources/Fugu15KernelExploit/Bootstrapper.swift#L28

[plain python]

huh that code's worked fine for over 2.5 years now...

[naive kraken]

Idk the details but I think in some OTA cases the file might not exist

I saw someone on Twitter with this issue so it's definitely a problem now at least

[olive peak]

If i put this in a for loop it pauses the for loop but not the entire function i hook right? [NSThread sleepForTimeInterval:20.0];

[lime pivot]

it pauses the entire thread

which can have negative effects for the app, especially if you're on the main thread (the one that manages the UI/responds to touch events). I wouldn't recommend using that method

what you're probably looking for is NSTimer, or dispatch_after()

[slender glade]

You’re calling orig wrong here

[olive peak]

Will that only pause the for loop? I want the rest of the replacement function to run normally, also calling original

And like this?
#define timer(sec) dispatch_after(dispatch_time(DISPATCH_TIME_NOW, sec * NSEC_PER_SEC), dispatch_get_main_queue(), ^

[hasty ruin]

How so

[slender glade]

It’s actually correct I’m just being goofy

[hasty ruin]

intjret

[slender glade]

Go on

[hasty ruin]

That’s the full name of it

otherwise gir would censor us

[slender glade]

Ok

so what I’m gonna do now,

[hasty ruin]

[slender glade]

https://tenor.com/view/uhuh-excuseme-kanye-canttellmenothin-gif-5108203

[hasty ruin]

[pearl sail]

Abandonware it

[olive peak]

this is in my hook, how would i make it pause only the for loop and not the entire hook, so that the rest of hook continues while also doing the for loop and only the for loop waits 5 seconds

for(int i = 0; i < numStrings; i += 40) {
  for(int j = i; j < std::min(i + 40, numStrings); ++j) {
    //something
  }
  [NSThread sleepForTimeInterval:5.0];
}

[visual meadow]

Ok so this is my idea of installing trollstore to up to 16.5 (if the bug allows)

[lime pivot]

Serena going all early-2000s Microsoft on us

you may as well make a SOAP service for interacting with it as well

[velvet ivy]

What

[visual meadow]

the app doesn't open but still

[wooden yarrow]

idk objc or hooking but can't you make another thread then do that method on it

[visual meadow]

dont know coretrust bug yet

[faint stag]

that would be a large ass file

💀

[hasty ruin]

fr

[granite frigate]

so what are you doing i dont get it

[visual meadow]

Modified developer disk image

So it registers as a system app too

[tepid olive]

so its possible to get the helper app to install?

you just need the bug?

[visual meadow]

yes

then install trollstore from it

Just hope the coretrust bug achieves the same effect as the old one

[naive kraken]

what does this need? just kernel r/w?

[visual meadow]

For 16.1.2-, mdc, 16.2+, kfd

needs a pc to mount the ddi but

The app goes away on a reboot either way

Because its a ddi

Just need to figure out the coretrust bug is all

[tepid olive]

semi untethered trollstore

[visual meadow]

Trollstore will stay after the reboot after installing from said app

[tepid olive]

oh

[visual meadow]

This is just to register trollhelper as a system app

[tepid olive]

what about that other kernel exploit patched in 16.7

[visual meadow]

Probably will make it possible

[tepid olive]

cool

[visual meadow]

@naive kraken do you plan to look into the bug?

[naive kraken]

what bug

[visual meadow]

the coretrust one

patched in 16.7/17.0.1

and in macos 13.6/14 rc2

[naive kraken]

probably

[visual meadow]

The best way I could imagine to test is on a mac

with sip and stuff enabled

[bleak ingot]

where do i get started on making tweaks?

[granite frigate]

are you just asking everyone about this

[steady nest]

[brazen timber]

@granite frigate do you plan to look into the bug?

[granite frigate]

i'm too stupid to

also haha funny

[hasty ruin]

so is that a yes

[visual meadow]

yeah but i did put it into a dissasembler and looked around for credit. I just don't know what to exactly look for

[brazen timber]

diffing 17 and 17.0.1 would be a start

see if it also exists on macos since they don't have stripped symbols

[visual meadow]

Thats what i did

I checked both

[granite frigate]

https://twitter.com/zhuowei/status/1705010978922926507

Zhuowei Zhang (@zhuowei)

Bay Area smothered in smoke from burning Intel Macbooks as script kiddies scramble to diff iOS 17.0.1

Twitter · Sep 22, 2023, 12:07 AM

[hasty ruin]

an*

[olive peak]

How do i get all bytes of the memory from a loaded library in my tweak into a buffer?

[indigo peak]

assign it to a variable

🥱🥱

[olive peak]

I mean which function do i need to use to read the bytes?

vm_read?

[slender glade]

This is lowkey funny

[olive peak]

I dont think it works if i dont do it inside the hook

[tepid olive]

Bureaucracy in a nutshell

[velvet path]

I have reason to believe that cellular M1 iPad Pros have incorrect offsets:

• Taurine has not worked for anybody with a cellular M1 iPad Pro (though it works on wifi-only)
• I believe somebody with a cellular M1 iPad Pro tried the opa kfd app and it failed

[visual meadow]

weird

[naive kraken]

failed as in panics or failed as in app crashes

[visual meadow]

depending on the exploit the app either crashes or it panics

i forgot which is which

i think physpuppet is the app crash one

and smith is the kernel panic one

[velvet path]

yeah that lines up

[mossy raven]

I wanted to tinker with libkrw but i always get zsh: killed libkrwtest when i run my Programm. Is there any solution?

[mossy raven]

I used this ent:

<true/>```

Do i need another one?

[restive ether]

https://github.com/ProcursusTeam/Procursus/blob/main/build_misc/entitlements/general.xml

[mossy raven]

This worked ;))
I get return code 45 from kbase :((
errno.h: #define ENOTSUP 45 /* Operation not supported */

Is there an problem with the code?

typedef int (*krw_0_kbase_func_t)(uint64_t *addr);
static void *krw_0;
static krw_0_kbase_func_t krw_0_kbase;

int kernel_base() {
    krw_0 = dlopen("/var/jb/usr/lib/libkrw.0.dylib", RTLD_LAZY);
    if (krw_0 != NULL) {
        uint64_t base = 0;
        krw_0_kbase = (krw_0_kbase_func_t)dlsym(krw_0, "kbase");
        if (krw_0_kbase != NULL) {
            int r = krw_0_kbase(&base);
            printf("base: %d, 0x%llx\n", r, base);
        }
    }
    return 0;
}

[tepid olive]

how do you start diffing ios

[pearl sail]

https://tenor.com/view/thats-the-neat-part-you-dont-invincible-gif-27194608

[tepid olive]

that doesnt tell me anything

i would like to know how to diff on ios aswell

is ghirda a good starting point

I wish i actually knew how to do stuff

[brazen timber]

just a got a lot funnier

[strong mulch]

Been using a dev account and cert for signing apps on device with Esign for notifications. Just switched to iPhone 15 pro. Do I need to make a new cert or just add device to account? Can’t remember if udid is tied to cert or not

[primal perch]

add device to acct

[strong mulch]

That’s it? Good. Was a pain making cert on windows lol

[primal perch]

idk acutally i didnt read

@shrewd smelt

discord user stkc will know

[dawn rapids]

im trying to make cowabunga lite in winui

p a i n

[shrewd smelt]

pretty sure the certs are specific to one device

[torn oriole]

You just have to generate a provisioning profile that contains all the appropriate devices

E.G if I manually generated you certs and you didn't use AltStore then those certs would work on my device too because I told it to

[strong mulch]

Ah so just adding it to provisioning profile should work since they use the same cert right?

Will try when I get home

[strong mulch]

Yep that worked. Thanks man

[wooden yarrow]

- '0';

[gentle grove]

0x30

[wooden yarrow]

if 0x0 was '0' then what ending character should C use

0xFF?

[torn oriole]

0x7377696674

[tepid olive]

C should end

[pearl sail]

Okay C++ shall replace it

[torn oriole]

C-Pro

[tepid olive]

we should stop programming

its not that hard

collective effort to stop programming

its boring and for nerds

[pearl sail]

I agree, but money talks

[wooden yarrow]

1. make codeless creators using code
2. stop programming
3. only use codeless creators

[gentle grove]

It shouldn't have ever used one

[wooden yarrow]

wyd when people demand for the smallest possible strings without capacity nor length

[gentle grove]

you can use an 8-bit length

[wooden yarrow]

that will not fit any string greater than 255

[gentle grove]

if your string is super long then you don't care about the 3 byte penalty for a 32-bit length

[severe stream]

bro pinned his own message

[brazen timber]

[wooden yarrow]

what do you write in

Objective-C?

[primal perch]

[wooden yarrow]

i mean Rust and Swift are both sort of C derivatives

[primal perch]

d/dx

∫

WINdows 🔥

zefram.png

[pearl sail]

https://media.discordapp.net/attachments/933428639620542474/1067152949211574332/caption.gif

[cursive rampart]

bye shep

[granite frigate]

is 16.6.1 vulnerable to the webp bug?

[primal perch]

bye shep

[brazen timber]

bye shep

[wooden yarrow]

bye shep

[torn oriole]

bye shep

[pearl sail]

k

[gentle grove]

bro uses either obj or c++

[brazen timber]

https://media.discordapp.net/attachments/979231126314975259/1066946505056976936/rust.gif

[gentle grove]

https://www.reddit.com/r/privacy/comments/16qec80/2023_does_chromium_rules/

chromium is not backed by a large corporation

🎉

[primal perch]

redditors when facts

https://www.reddit.com/r/privacy/comments/16qec80/2023_does_chromium_rules/k1ynv64/?utm_source=share&utm_medium=mweb3x&utm_name=mweb3xcss&utm_term=1&utm_content=share_button

downvotes

[mossy raven]

Does libkrw work on palera1n iOS 16?

[hasty ruin]

[olive peak]

You seem to have time now, is that right?

[slender glade]

no

[manic willow]

Trollstore

[naive kraken]

Ballstore

[manic willow]

lol

Good one opa

[tepid olive]

Do you have the link to the article documenting the bug

[manic willow]

But where is the storage of balls

[tepid olive]

@naive kraken can kfd utilize storing balls inside the vm parameter

bye shep

yeah very true

shep folded 💔

[steep granite]

Coincidence ❓❓⁉️⁉️⁉️⁉️❓#general message

[primal perch]

bye shep

[hasty ruin]

[tepid olive]

⚽️🏪

Noooooooo

[tepid olive]

feels like the mass fleeing from reddit has amplified the voices of some not very bright people

[bleak ingot]

confirmed

[faint stag]

where's the goalie

[primal perch]

BALLSTORE

[blazing warren]

BALLSTORE

[tepid olive]

BALLSTORE

[primal perch]

BALLS TORE

[cloud yacht]

BALLS STORE

[limber warren]

ZXTNH CLAN

[visual meadow]

Huh

[gilded night]

fr g

[weak perch]

umm excuse me admins this guy evading a ban!!!

[gilded night]

?

[weak perch]

if only ash was here 😔

[limber warren]

#include <FREE DEBASH.h>

[native dune]

what the hell is going on here

[tepid olive]

umm excuse me admins this guy evading a ban!!!

[weak perch]

OMG !!

[limber warren]

Hes with me

[weak perch]

its the palera1n person!

[limber warren]

hey they copied gtaglitches

[weak perch]

they did?

[limber warren]

they took our emojis

[tepid olive]

who are you

[limber warren]

Delroy

[weak perch]

no icraze took all theirs ☠️

[hasty ruin]

I got supershock added here

[weak perch]

was that when you just lost nitro?

[hasty ruin]

Nah

[weak perch]

whys it one of the most used emojis whereever its added 😭

[native dune]

[primal perch]

[visual meadow]

[cloud yacht]

[blazing warren]

[tepid olive]

Anything found on the coretrust bug so far?

[blazing warren]

Anything found on the coretrust bug so far?

[manic willow]

Anything found on the coretrust bug so far?

[tepid olive]

Anything found on the coretrust bug so far?

[visual meadow]

Just wait

People are looking

[tepid olive]

Im joking

[night rover]

Anything found on the coretrust bug so far?

therefore you are

[tepid olive]

Ok

[indigo peak]

everyone diffing kernels rn

[visual meadow]

Yeah

[indigo peak]

wait what versions are affected by it

[visual meadow]

Hopefully someone finds it

[visual meadow]

I think its 16-16.6.1/17.0

Idk if it works on 15

[indigo peak]

eh that’s all I care ab

if my phone is affected

so

16.5 😄

[indigo peak]

Nah someone def has and there’s gonna be a like full PoC posted on twitter in like 14 hours

[tepid olive]

Maybe

[visual meadow]

The poc is just gonna be a specially crafted cert

But I sure hope somebody finds it soon

Opa said he even might look into it

[tepid olive]

A cert?

I thought it was like the old ct bug

[visual meadow]

The old one uses a cert too lol

[tepid olive]

oh

but doesnt it give root too?

[visual meadow]

Huh

[indigo peak]

I’m honestly surprised not a lot has come out of kfd

[tepid olive]

The bug

[visual meadow]

No

[tepid olive]

What?

A lot has

Taurine kfd

[visual meadow]

The bug allows you to get root by entitlements yeah

[tepid olive]

Cluckabunga misaka

Kernel read and write

[indigo peak]

kernel read and write is the exploit

[tepid olive]

Exactly

[visual meadow]

W tbh

[tepid olive]

And also its been like just over a month

[indigo peak]

fym exactly, that’s the whole point of the exploit 💀

I meant things that came from the exploit

[tepid olive]

.

thats what i said?

[indigo peak]

whatever

[visual meadow]

Someone rapidly ping me if anything is found overnight tho

[tepid olive]

Why

Nothing needs to come out instantly

Well thats not what i mean

Oh btw

Since you can trick ios to install a system app

Cant you already install normal apps just like they would be installed via trollstore?

[visual meadow]

Yeah but it's pointless
Codesigning would kick in anyways

Also this is a temporary install
Once you reboot the app goes away bc its on developer disk image
My idea is to have troll store helper in the image, mount it, and install trollstore from it

That will work up to 16.5

[tepid olive]

From there could you just replace a system app to be trollhelper?

[visual meadow]

Yeah like tips

[tepid olive]

What else would be needed once trollstore is installed and the ct bug is working?

[visual meadow]

Nothing really
Everything else in trollstore works
All we need is ct bug

Which we (hopefully) have

[tepid olive]

I thought opa said we need installation method?

[visual meadow]

We have that with the ddi method

Up to 16.5 atleast

He means to install trollstore itself

[tepid olive]

Oh

So once trollstore is installed its all good?

And you can just sideload apps from there?

[visual meadow]

Yes

[tepid olive]

Also

What exactly does trollstore give apps

Like what permissions

[visual meadow]

Trollstore is just to install the apps, you determine that with the entitlements you give said app

[tepid olive]

What entitlements can you give to an app?

[acoustic imp]

isnt all we needed for a JB entitlmeants?

ios 15.5+ A12?

caue thats what ppl kinda does

idk

Also like ur saying, with the tips app, why not just put like black list inthere that way you can basically install anything already? w like scarlet or sm

[tepid olive]

Scarlet bruh

Thats what trollstore is for

[acoustic imp]

huh, they are dif things

[tepid olive]

Yes bro 😭

[tepid olive]

no

ppl bypass

[acoustic imp]

ik, but like isnt that what ppl like does, like?

[tepid olive]

Does entitlements bypass ppl?

no

[acoustic imp]

oh

[tepid olive]

So we need one still

[acoustic imp]

got it👍

[acoustic imp]

like i mean now, sense there is no TS 15.5+

[tepid olive]

Oh

Uhh

[acoustic imp]

yea, ike have app installer get his blacklist app working in the tips app IG then its basically unlimited app signing, more or less

[tepid olive]

Maybe

I dont think system apps can have an installation started inside them

But i might be wrong

Also actually no i dont think so

Because of codesign

Trollstore is whats needed to replace a system app i believe

[acoustic imp]

no no, i mean just use the tips app to remove blacklist, then use another app to sideload IE scarlet or sm

[tepid olive]

Thats literally already an app

[acoustic imp]

it is?

what

[tepid olive]

Blacklist

[acoustic imp]

[tepid olive]

Wdym fr

[acoustic imp]

but if u install that w a cert

then it get black listed

[tepid olive]

Bro

Its not going to work

The app would crash

Codesign

And on reboot it would go away

[acoustic imp]

oh

we need KFD webkit

lol

[tepid olive]

????

What

Kfd is a kernel exploit

You mean a webkit exploit?

[acoustic imp]

that to, like kern exploit thru webkit

thast been down before right?

[tepid olive]

Last time i think it was done was like

Totallynotspyware jailbreak

[manic willow]

Anything found on the coretrust bug so far?

[night rover]

asking for the 8th time will magically cause new info to be found

[manic willow]

I'm asking as a joke bruh

[night rover]

im not joking fr

Anything found on the coretrust bug so far?

[manic willow]

Yeah fr

[tepid olive]

real

[manic willow]

Anything found on the coretrust bug so far?

Are we going to see trollstore soon?

[tepid olive]

I love the store made out of trolls 🥺

[manic willow]

🧌🏪

[slender glade]

What

[night rover]

we need KFD webkit

[slender glade]

Yup but only if you shut the fuck up

[manic willow]

Alright I'm sorry Oprah. Can I get a car at least?

[slender glade]

Mo

No

[manic willow]

Aww

[lime pivot]

I'm gonna get mo' car?

awesome thanks do you need my address

[young meteor]

the car auto homes to your location (and drives straight into you)

[tepid olive]

@naive kraken can i inject my balls into vm parameter

[primal perch]

troll

[primal perch]

zefram

zeframOS

i hope you lose points because it was for linux

[faint stag]

Well ofc they use fork

[primal perch]

planning on it tomorrow

tired of this shit fr

me after choosing to do 16 credits

https://tenor.com/view/fml-fuck-my-life-gif-23068190

i hate the consequences of my actions

GNU+LINUX 🔥

yeah true

[faint stag]

security 💪

no need for forking on ios
you get one process and that's it

[primal perch]

fr

@primal perch when you’re a professor at [redacted] university and one of your students has zefram

[pearl sail]

Damn what a useless student

[wheat grotto]

can someone dump an apk for me ? i don’t have an android

wait, this probably is piracy

[harsh junco]

If app's license allow redistribution its not

[wheat grotto]

nvm, they put the apk on apkpure themselves it seems

[granite frigate]

https://security.googleblog.com/2023/07/the-ups-and-downs-of-0-days-year-in.html

[lime pivot]

Apple though gladly takes advantage of using an XPC process to execute code in Playgrounds because of course they do

[restive ether]

they said use posix_spawn dork

[blazing vault]

I was bored so I've decided to look into potential optimizations in libobjc / objc runtime

I have extensively studied and re-reviewed objc_msgSend by itself for a couple days now and (as expected) it's very well optimized, I don't see any room for optimization that wouldn't require changing how the cache works

Well, ok, technically I did find that I can save a single mov instruction when we need to load from cache but other than that nothing :P

Though I have found a couple other micro-optimizations in libobjc

[visual meadow]

I have it on my phone lol

[tepid olive]

How?

you just have to modify the plist or whatever

with mdc

I don’t have mdc

😭

Is there another way

probably kfd

idk

I don’t have kfd either

Apple doesn’t allow plist editing on stock iOS apps right

[olive peak]

Is it possible for apps to detect the mobile substrate injection?

[timid furnace]

injection of substrate or injection of tweaks using substrate?

[hasty ruin]

well yeah, makes sense that msgSend would be optimised to the max

[keen estuary]

Where do you guys look except Discord/Reddit if you want to learn how to jailbreak a new device?
This is where I am currently on my quest to jailbreak iOS 16.2/16.5 on iPhone 13 Pro Max & iPhone 11 Pro Max respectively.

Will metasploiting a payload into a jailed iPhone give root access?
Use list of tools to research and attempt.
Build a visual that will allow you to attempt a jailbreak.
Follow and ask on Reddit/Discord.
Look into how apps get root access usually.

Attempt 1 -
Try jailbreak with the latest tools - Checkra1n/Palera1n/etc.
Figure out the block via viewing the source code/live hex/live binary.
Colour the various sections within the live views so you know where to look.
Make the device think its getting a native handshake.

Please don't judge I'm a passionate jailbreak enthusiast currently have an iPhone 7+ jailbroken with Checkra1n.

[tepid olive]

Uh

Take your meds

[primal perch]

unlike swiftUI

[hasty ruin]

yeah true

[slender glade]

you should tell them because they gladly pay millions each year to save a couple insns

[lime pivot]

all those high traffic funcs are definitely optimised as tight as humanly possible because of how critical they are, but hey doesn't hurt to find out for sure

[lime pivot]

can't wait for the A18 Pro graphs with unlabelled axes to show a significant improvement purely from saving one instruction in objc_msgSend

[keen estuary]

my meds are learning and positivity. care to help?

[blazing vault]

**needs to load uncached lol, bad wording

[manic willow]

Trollstore

hi snoolie

[blazing vault]

Technically (maybe) three instructions saved when objc_msgSend needs to, since in addition to the mov save in objc_msgSend I found I think I can also save another mov instruction in objc_msgSend_uncached directly. This is hoping it won't impact lookUpImpOrForward though I've checked quite extensively and I don't see anything it could mess up; I could have missed something, I'm still checking, but fairly confident right now it won't.

objc_msgSend_uncached (and a bunch of other stuff in libobjc) also call lookUpImpOrForward and I think I can save another instruction assuming it won't mess up tagged pointers (which from what I see it won't), once again maybe I'll find I missed something and I can't apply it but also fairly confident right now with it too.

[manic willow]

Hi snoolie

[blazing vault]

hiii

[tepid olive]

https://proteas.github.io/ios/2023/06/09/some-quick-and-discrete-notes-on-sptm.html

Someone pin this

[manic willow]

No perms to do that

[primal perch]

ok new idea but unironically: add a custom single instruction to do objc_msgSend and implement it in silicon

free speed up

OBJCMSGS

[slender glade]

This would be funny asf

[pale quarry]

what would be the equivalent of a screen session on linux to ios. trying to run a shell command in background on respring and can't mount fs so im going to make a shortcut to ssh and execute a command that will stay active continuously.

lol, found actual screen

yay

[gentle grove]

"EF00" is just a mnemonic for "C12A7328-F81F-11D2-BA4B-00A0C93EC93B".

[slender glade]

Please shut up

[pearl sail]

fr

[timid briar]

Adele if she made songs about execution levels and was also Australian

[olive peak]

What does msgSend do

[slender glade]

sends a message

[primal perch]

fr

[faint timber]

makes me want to kill myself when single stepping it in lldb

[faint timber]

it seems to iterate/traverse imp's and even has a cached version vs uncached

last step is calling the actual method

br x17 specifically on arm

sidenote why is step-inst-over broken?

it single steps

like tf?

[olive peak]

I see it used a lot on ghidra with some interesting strings but is it useful?

[faint timber]

its basically the be all end all of objective c class method calls

when you see it another class's method is being called

[hasty ruin]

facts

[olive peak]

So in this case it calls mainBundle function from nsbundle?

[hasty ruin]

yes

[faint timber]

it's calling the mainBundle method from the NSBundle class

[olive peak]

Isnt a function and a method the same thing

[faint timber]

ITS NOT A FUNCTION

[hasty ruin]

method belongs to a class/instance

[faint timber]

DO NOT CALL IT A FUNCTION

YOU WILL GET MURDERED DOING SO

[olive peak]

Function is static?

[hasty ruin]

@Cryptic you wanna hear a funny story? capt

[faint timber]

it's a method not a function

[olive peak]

Same thing

[faint timber]

lmao I took the test at home then came to class an hour late

[olive peak]

I will never call it methode in my head

[faint timber]

it's really not tho

any function located inside an object(class) is always called a method

[hasty ruin]

also any methods arguments just get passed along as extra function params

i saw a method with 313 fucking args the other day

[faint timber]

wait until he finds out about blocks

[hasty ruin]

i dmed it to you and you ignored me.

[faint timber]

lmao sounds like fortnite or snapchat or pogo

[hasty ruin]

snap

[faint timber]

wait really? I'm actually on the snap grind rn

porting my old research to latest version

[hasty ruin]

no that's because they started using swift

[faint timber]

their networking is still ass

they still use cronet

[hasty ruin]

i was looking into their api yesterday but idk protobuf

wrote a pinning bypass

[faint timber]

yes protobuf + cronet (libnet based I think?)

[pearl sail]

nerd

[hasty ruin]

objc games are great https://github.com/iCrazeiOS/ReBoom/

[hasty ruin]

yeah fr

[hasty ruin]

found it again

[gentle grove]

We should make more registers so you can fit that

[faint timber]

https://tenor.com/view/how-do-we-tell-him-mr-krabs-spongebob-meme-spongebob-meme-gif-24063814

[gentle grove]

What does it do

[faint timber]

vaargs????????

[gentle grove]

Who made it

[weak perch]

BOOL

[faint timber]

dev accidently defined it as constexpr

[hasty ruin]

shut up welsh

[hasty ruin]

real

[faint timber]

so it evaled every call at compile time

cursed

[hasty ruin]

i wanna hook this to see how often it's called

but i'd have to update my hooking solution

[weak perch]

Bros living in grimsby 😭

[faint timber]

@grave sparrow let’s go two discord iOS bugs just dropped

Members list won’t open

And reply ui blank

That’s what I talking about

https://tenor.com/view/weekend-craig-the-daniel-daniel-craig-gif-21192791

sry discord stupid

[cloud yacht]

What are you using?

It could have been java

[faint timber]

teaching rust in a school is a crime

my professor pokes fun at the rust kid in our class

make your own with recursion

comparevalue works on floatingpoint

[faint timber]

when in doubt, shoot your mouth

[blazing vault]

UPDATE nevermind I found another instruction I can save in objc_msgSend for when self is a tagged pointer

[manic willow]

@blazing vault eta wen

[slender glade]

and checking for that is gonna be another

[blazing vault]

nope

[slender glade]

?

does it already check

[blazing vault]

yeah

[slender glade]

link?

[tepid olive]

Kernel
Available for: iPhone XS and later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generation and later
Impact: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations
Description: The issue was addressed with improved memory handling.
CVE-2023-41981: Linus Henze of Pinauten GmbH (pinauten.de)
Kernel

does this sound like ppl bypass?

[blazing vault]

https://github.com/apple-oss-distributions/objc4/blob/c3f002513d195ef564f3c7e9496c2606360e144a/runtime/Messengers.subproj/objc-msg-arm64.s#L551

the check

https://github.com/apple-oss-distributions/objc4/blob/c3f002513d195ef564f3c7e9496c2606360e144a/runtime/Messengers.subproj/objc-msg-arm64.s#L591

change this

and    x10, x0, #0x7
asr    x11, x0, #55
cmp    x10, #0x7
csel    x12, x11, x10, eq

to

asr    x11, x0, #55
ands    x10, x0, #0x7
csel    x12, x11, x10, eq

(correct me if I'm wrong, but at least from my knowledge this should work fine)

[minor cargo]

yeah that’s def a people bypass

[torn oriole]

yeah that’s def a people bypass

[visual meadow]

PEOPLE BYPASS

[topaz yew]

wen eta people jailbreak

[tepid olive]

what ppl bypass dropped?

[blazing warren]

PEOPLE BYPASS

[untold vine]

🎉

[tepid olive]

🎉 🎉 🎉 🎉 🎉

[blazing warren]

🎉🎉🎉🎉🎉🎉🎉

[blazing warren]

🐠

Apple hired him like it did Brandon Azad
😢

[brazen timber]

yoooo Linus Henze??

[untold vine]

proof

???

that would be crazy

[blazing warren]

Just remember what Apple did, it took whoever it found the most things (Brandon Azad). I think that with Linus they will do the same

[untold vine]

did brandon make a jb?

[blazing warren]

No, but he published his things that allowed him to do so.

[untold vine]

so u think linus wont make a writeup on it?

[blazing warren]

Lol

[manic willow]

I mean Linus could also just refuse to work there...

[untold vine]

i mean yeh he made fugu15 and fugu14 i believe

[blazing warren]

So you understand what I mean, I don't know how long Linus will last before Apple invites him to work with them.

[manic willow]

He could just say no to the invite

[untold vine]

but @manic willow does have a point

[blazing warren]

Yep

[untold vine]

tbh if that ever happened i think he would go to apple after ios 16 got jailbroken

[brazen timber]

get out of #development

[hasty ruin]

yeah this is our shitposting zone

you guys have #general

[twilit jungle]

Lets make development great again

#development message

[plain python]

already did

[hasty ruin]

keep following the chain

[severe stream]

and from there, you get the tutorial of how to bypass ppl

[twilit jungle]

true

[lime pivot]

wasn’t there something about how M1/A15+ added some in-silicon optimisations to objc_msgSend

might be mistaken

they did at least implement Intel’s memory pipeline in silicon to improve Rosetta performance / more closely emulate x86_64

some apps like Chrome (and of course anything Electron) didn’t run on A12Z because 4K pages weren’t implemented as x86_64 expects, and they were hardcoded to use 4K

[indigo peak]

Just release your own hooking library /s

#development message

[harsh junco]

capthooker

zeframlib

[torn oriole]

@grave sparrow switch assembly

[unkempt magnet]

Why there's so many SVC...

[faint stag]

it's the bootrom

there's no os loaded at that point

[modern acorn]

hey guys, do you know if I can make a tweak with the regular theos and inject into a jailed app?

something simple like an alert popup?

or do i need theos-jailed

I plan to inject with sideloadly (im on windows)

[hasty ruin]

no one really uses theos jailed now

[hasty ruin]

This is fine

[modern acorn]

thanks, its hard to find updated info, I've been trying to get started

lol

[olive peak]

Yes

But you cant do some stuff

[modern acorn]

thanks ❤️

[modern acorn]

anyone has some sample code to show a simple popup on app launch?

would greatly appreciate

[main apex]

Please learn basic objective-c or swift first.

[modern acorn]

I know basic objective c, but unfamiliar with iOS tweaking

im seeing some people hook app delegate

some people hook UIApplication

Would be easier if I had a jailbroken iphone with flex

[slender glade]

@modern acorn hook applicationDidOpen

Get the view controller from the app’s key window

And present a UIAlertController

[wheat grotto]

how about i hook these nuts in your mouth

[modern acorn]

thanks will look into it

[modern acorn]

too small to hook in anything unfortunately 😦

[slender glade]

@hasty ruin that was crazy

[pearl sail]

shut yo broke ass up

[modern acorn]

Im not finding this method in documentation, found others accessible from hooking into the Application Delegate, but was looking for a more universal way, since the app delegate name changes for different apps.

[slender glade]

I guess he’s looking for a universal way because different apps have diff app delegate names

[modern acorn]

I don’t know much, but from what I saw so far different apps have different app delegate names right? What class would you go about hooking if you’d want the alert to show up in multiple apps without having to change the app delegate name within the tweak?

[visual meadow]

has anyone here compiled dyld before

i want to do just because but

i can replace on my mac and see if it works

[modern acorn]

Oh wait, did you mean that you can access the method from hooking the UIApplication class?

[visual meadow]

@grave sparrow do u know how 2 compile dyld now

ok

i think i need libc first

what is _simple.h tho

[primal perch]

_s1mple.h

[subtle scaffold]

From what I’m getting, we might have a PPL bypass for 16.6.1 and below. All we need is another kernel exploit right?

[lyric heron]

yes

[blissful sinew]

If I were interested in getting into jailbreak development, how would I go about that? I am comfortable working with several coding languages and frameworks.

[hasty ruin]

[blissful sinew]

I don’t know C already, I am confident with C++ and C# tho, is it close so I can learn easily?
I am learning assembly.
What is objc? I am unfamiliar with it.

Ok, thank you for the info!

[turbid fjord]

Stay away from swift

[blissful sinew]

I have no idea what this is lol

I’ll need to do some research on this

Ok thanks!

[hasty ruin]

https://media.discordapp.net/attachments/688122301975363591/1077671431875346494/caption.gif

[pearl sail]

https://media.discordapp.net/attachments/688122301975363591/1077671431875346494/caption.gif

[blissful sinew]

Yeah, good advice! What decompiler and compiler do you use so I have an idea on where to start?

Ok thanks!

Lol

Ok! Thanks for the help!

[vivid dew]

capt when the stack grows up instead of down

[bleak wagon]

https://github.com/apple-oss-distributions/xnu/commit/1031c584a5e37aff177559b9f69dbd3c8c3fd30a

this was added to pmap

/**
         * Since 'state' may be an attacker-controlled variable, we use nested_no_bounds_ref_state
         * to ensure that pmap_trim_subord (which may free page tables from subord) can only be
         * called once grand's nested tables have been fully trimmed, and can only be called once
         * for each 'grand' pmap.  We use release ordering for the atomics above to ensure that
         * the state update is visible only once the preceding trim operation is complete.  An
         * attacker may be able to trigger multiple concurrent trims on the same 'grand' region,
         * but locking within pmap_trim_range() should make that harmless (and all but one will
         * ultimately panic due to a failed atomic state CAS).  We use acquire ordering here to
         * ensure that modifications performed by pmap_trim_subord() can't be reordered ahead
         * of the state CAS.
    */

[manic willow]

any news on the exploits?

[visual meadow]

oh my god

Why not.. you know.... Just watch the chat, Maybe check other discord servers and see if people are talking about it, Or giving crucial information about the exploits...

[prime ingot]

nahhh you’re being too generous

dont you mean 2 bits of ram

fr

[tepid olive]

Is the full xnu kernel Public and open source ?

Or just some I’m confused what the Apple oss xnu documentation is on GitHub

[native orbit]

2 vacuum tubes for ram

[primal perch]

wtf

white gigachad

https://cdn.discordapp.com/emojis/944168960633491476.webp?size=44&quality=lossless

[snow python]

Any news on exploits?

[slender glade]

No not full

The important kexts aren’t

[real nova]

so how can you access them? is it hard?

[primal perch]

reverse engineer the binary

kinda

[real nova]

oh right

[harsh junco]

icrazeware

[primal perch]

fr

[bleak wagon]

Which kexts aren’t?

I’ve noticed certain parts of kexts aren’t

Mb that’s because I load all that it’s actually from a diff kext but I’ll try and trace some panic strings and not be able to find them

[manic willow]

you could've just told me

[timid furnace]

Most kexts aren't OSS

[trail venture]

Anyone interested in finishing a rust checkm8 clone later? (I think) it's mostly there but it's not functional yet

[hasty ruin]

https://tenor.com/view/programming-rust-c-lang-cpp-cplusplus-gif-26743262

[trail venture]

Yes
However this was a fail for me as of rn

I need to learn C

[turbid fjord]

GM fellow nerds
Does anyone know what these characters and numbers represent?

There’s an issue in WatchTube where it just spits out random stuff for non English characters like “フットボール” (football in Japanese) or “新聞” (news in Chinese traditional)

This is what it should look like if it was an English string

[tepid olive]

https://tenor.com/view/wow-apple-meme-tim-cook-wow-apple-event-meme-tim-cook-meme-gif-26571525

[fiery seal]

these appear to be unicode codepoints

[turbid fjord]

https://media.discordapp.net/attachments/1155109597456109659/1156939676171649024/image0.jpg?ex=6516cb89&is=65157a09&hm=f2afcd2f4219ee25c3aa939458ee4f24125f12d16d4a0dd745e9692089f1efe6&

I’ve got somewhere

Ty for this

No some NSAttributedString funniness

`extension String {
var decodeHTMLEntities: String {
guard let data = data(using: .utf8) else { return self }
let options: [NSAttributedString.DocumentReadingOptionKey: Any] = [
.documentType: NSAttributedString.DocumentType.html,
.characterEncoding: String.Encoding.utf8.rawValue
]

    if let attributedString = try? NSAttributedString(data: data, options: options, documentAttributes: nil) {
        return attributedString.string
    } else {
        return self
    }
}

}`

I’m on mobile sorry

Yeah I’m not

Yeah. I mean it works with everything else like æ and ě ľ ǒ and stuff like that

I’ve only tested Chinese simplified, traditional and Japanese with all the same results

I’m just stunned no one has reported this issue in 18 months considering how large our East Asian user base is

Oh do they? Interesting

interesting

I’ve got no way of testing if this fix works on simulator lol.

iPhone and watch sim just won’t communicate with each other so I can’t change the language of my keyboard to test it

Hmm ok I’ll charge my watch and see what happens.
Thank you for your explanation

[turbid fjord]

As above, it wasn’t Unicode but Ty anyway

https://docs.invidious.io/api/#get-apiv1searchsuggestions

That’s the end point

[fiery seal]

unicode utf-8 whatever

[turbid fjord]

It could be
I mean @zenith hatch wrote the function for it as well

Search suggestions request
https://github.com/WatchTubeTeam/Invidious-Swift/blob/c325778e3ef84ec32a8ad85e63bb14fd8e1eff8c/Sources/Invidious-Swift/Invidious.swift#L199

Fetch function
https://github.com/WatchTubeTeam/Invidious-Swift/blob/c325778e3ef84ec32a8ad85e63bb14fd8e1eff8c/Sources/Invidious-Swift/Invidious.swift#L278

Fair enough

Oh is it

Worth opening an issue about it then?

Of course

[wooden yarrow]

@trail venture did u push your code

[trail venture]

Nah it'll be later

[wooden yarrow]

新聞 is japanese as well

[turbid fjord]

Oh is it

[trail venture]

Like, hours

Btw

[gaunt helm]

kanji, yes

they have three different alphabets

[olive peak]

Whats appsFlyer

Is it only logging stuff?

[zenith hatch]

the old package sucked

[olive peak]

They dont say anything on their website

I want to know if it also does stuff like jb detection

[zenith hatch]

i mean my old code for wrapping the api sucked

theres new code that uses generics now

ik

i just hated the old code i wrote

[slender glade]

same i hate your old code

[zenith hatch]

wow

[hasty ruin]

Yeah well I hate his new code

[olive peak]

How can i dump objc classes and functions again?

Also how should i hook custom objc functions?

[zenith hatch]

????

[pearl sail]

I hate all code

But especially @grave sparrow code

That shit is straight malware

Y’all should petition to get rid of his dev role

[hasty ruin]

<@&558709886397972481>

[tepid olive]

https://tenor.com/view/google-logo-meme-animate-logo-google-gif-24209368

[olive peak]

I did

Otherwise i wouldnt be asking here

[tepid olive]

https://tenor.com/view/future-internet-computer-penguin-smart-gif-2609129379754675065

[slender glade]

mfs like u r insufferable

@olive peak I don't remember the way to do it by some CLI cmd, but i do remember there was some app that did it and showed the headers in UI

I can't quite remember the name

somethingdumper/

classdumper?

perhaps

i forgot

[olive peak]

Objc functions from another library of an app

[manic willow]

any news?

[steady nest]

bruh

@restive ether deal with the eta kid pls

this is for development related stuff, not asking when trollstore releases, every single fucking day mate

[manic willow]

wdym

how am I

a prick

[primal perch]

yeah true

[steady nest]

We're usually friendly and helpful (not capt) but please be respectful

Whenever and if it's released, you'll know

[fiery seal]

start revoking individuals' permission to send messages in #development

[timid furnace]

please

[manic willow]

hey wait hold on a minute

don't do that

[fiery seal]

the nintendo homebrew server does that when people are continually disruptive in the assistance channels

they call it getting no-helped

[primal perch]

chad homebrew moment

[manic willow]

if you are taking any of these seriously I am sorry

[native dune]

don't care if it's serious or not, it's annoying

[hasty ruin]

me when capt does literally anything

friday

[torn oriole]

Bro realised and is now brushing it off

[pearl sail]

Me banning them cause I have no chill

And then of course @grave sparrow

And then I get removed like Alex

<@&558709886397972481> that is my mod application btw

[slender glade]

They call me a string cause I’m easy to manipulate and hard to support everywhere 🗣️🗣️🗣️

[pearl sail]

They call me a memory leak cause I’m shit I forgor the rest tbh

[slender glade]

Lmfaoo

[torn oriole]

They call me a memory leak because uhhh, uhhhhhh

Dementia

Cry

[torn oriole]

Coward

[torn oriole]

That would be rude

Only person who can block me is @grave sparrow

Real Mf

(He blocks me so I can't see his racism)

[blazing vault]

They call me no wait they don't because no one remembers me because I'm not important

[torn oriole]

(All your friends have dementia and forgot you)

[blazing vault]

Thankfully I don't have any friends so this can't happen to me

[pearl sail]

I wouldn’t be surprised

[tepid olive]

@visual meadow will your script allow restoring a checkm8 device but allowing it to stay on a very old iOS version

ITunes updates it I think

I just need to factory reset it

[torn oriole]

Reset, not restore

Its only able to do the equivalent of hitting reset in settings

[tepid olive]

That’s fine

It’s a demo device

As long as it stays on the same iOS version idc

[hasty ruin]

@native ginkgo

[tepid olive]

@torn oriole will this work?

[torn oriole]

So you stole da phone

Nice

[tepid olive]

No I bought it from eBay

[torn oriole]

So it's probably still stolen

[tepid olive]

Bruh

@torn oriole please just answer my question

Will it work

[torn oriole]

Resetting it might not even work if it's fully demo enrolled

As soon as it sees internet it'll probably lock

Also this is not really a #development topic anymore

[timid furnace]

Hydrate about to add "no bypassing demo devices" into the bypass tag

[torn oriole]

I mean

[timid furnace]

Also how is it still on demo mode if it's on iOS 11

[torn oriole]

Stolen and left in a drawer for 5 years 💀

[timid furnace]

💀

[hasty marsh]

my bad

[blazing warren]

I don’t get it

[tepid olive]

I don’t get it

[slender glade]

You bought a stolen phone

[steady nest]

Demo isn't always equal to stolen

[tepid olive]

It’s okay I’m going to return it

[slender glade]

[steady nest]

Check for the iCloud lock, if it's not locked, it's not stolen

[tepid olive]

It’s not I checked imei

[lyric heron]

maybe the demo model can goto ios 17

[steady nest]

Then it's not stolen

[tepid olive]

Yeah

[hasty marsh]

fr

[torn oriole]

Demo units get the mdm treatment majority of the time

As soon as they see internet they kick the lock in

[native dune]

lol

[shrewd smelt]

💀

☠️

[tepid olive]

Have hackintoshes helped jailbreak development in any way

[faint stag]

surprisingly, it'll only be about 5 years until only apple silicon is supported by the latest version of macOS

[exotic spire]

Why does everything on macOS has to revolve around the xcode toolchain

Can't even use python properly without installing a 10gb Xcode toolchain

[flint gyro]

I had 2 iPhone 4s from my cousin and they were iCloud locked to their iCloud’s and they weren’t stolen so I dropped it off a boom lift

[exotic spire]

Literally can't code bc I gotta install that dev tools toolchain and I'm on mobile data rn

“144 hours remaining” in hotspot

Lmao

[slender glade]

It’s inaccurate lol

That changes drastically

[exotic spire]

Still I am not fond of using my hotspot for it

[olive peak]

Do you have time now?

[manic willow]

Trollstore?

[naive kraken]

I really wish the bug would have never appeared just because of people like you

[manic willow]

I'm trolling lol

[steady nest]

@torn oriole

[manic willow]

NO PLS I'M SORRY

[slender glade]

[native dune]

brew install python@3.11

[visual meadow]

Look! He thinks he's funny!

[slender glade]

this requires the toolchain too, headass

[native dune]

should just be the command line tools

which I guess is the toolchain

but it's not that big

[native orbit]

xcode takes up like 300gb on my laptop cause like 8 versions installed and cache

[slender glade]

300gbs is fucking insane

8 versions is fucking insane too

[hasty ruin]

Average swifter

[zealous elbow]

Damn

[native orbit]

[steady nest]

accurate

[exotic spire]

Exactly for this. Python works fine but everytime I use pip it errors out because of this

[granite frigate]

this is just fearmongering

[wooden yarrow]

people who actually have a risk of getting hacked already get hacked through nation-state 0day chains

[granite frigate]

exactly

no attacker's bored or paid enough to spy on a discord dweller

(i will be attacked soon for saying this)

[wooden yarrow]

there's this weird middle zone where nation-states don't care because it's a n-day which isn't relevant to their targets who keep updating due to them knowing they get attacked and script kiddies don't understand the exploits enough

so basically the only people who work on this shit is like

jb devs

💀

[granite frigate]

i got pinged by some arch linux server over this

[wooden yarrow]

lmao

[brazen timber]

makes sense, a lot of them are at the top of the dunning kruger curve

[hasty ruin]

[exotic spire]

I mean Python is an interpreted language

Also I don't remember ever needing a toolchain on Windows

[brazen timber]

python still compiles to bytecode

[exotic spire]

Yes but the thing is, Python works just fine alone

Pip is the one giving trouble for select packages

Not all of them either

[brazen timber]

wha

i haven't looked at the above convo btw

oh macos skill issue

i thought brew avoided the xcode toolchain

but im not a macos user so no clue

[exotic spire]

Tbh I don't know what a “wheel” is, but yeah I guess I'll bite the bullet and just get the toolchain

[slender glade]

gamers, as the resident tech nerd just reeks

i jus tknow this dude smell

being a "resident tech nerd" is fine but when u say it

ew

[primal perch]

gonna be sick

[slender glade]

fr

[primal perch]

hes not even being ironic too

[slender glade]

right??

that's the craziest part abt all this

this part is just ugh

okay im being nitpicky now

but THIS is fucking crazy dude