development

[torn oriole]

(Not as fire as zefram)

Go build a clone of it in zefram

Can zefram even make apps idk

[radiant idol]

which private entitlement specifically, btw?

ah oke

cool cool

[torn oriole]

Yeah

Persona-mgmt

xpc services

[grim sparrow]

Can’t remember rn

[torn oriole]

I happen to have zero clue but I know keybagd uses them in Sonoma

Tl;dr, useless on prior versions

[acoustic imp]

why wount this work i copy pasted basically form a tutorial?

#import <UIKit/UIGestureRecognizerSubclass.h>

@interface SBRootFolderController : UIViewController 
@end

%hook SBRootFolderController
- (void)didMoveToWindow{
    %orig;
    
    UIView *bluerectangle = [[UIView alloc] initWithFrame:CGRectMake(20,20,200,200)];
    [bluerectangle setBackgroundColor:[UIColor blueColor]];
    [self.view addSubview:bluerectangle];
}
    
%end```

probly 5year old videos

where do i see logs?

does the device need to be conected to the mac?

ssh?

[hasty ruin]

just use idevicesyslog on mac

fuck console.app

shitware

[acoustic imp]

i dont have mac thats the thing

i use a VM

[hasty ruin]

as long as usb pass through works

[acoustic imp]

well no USB pasthru

[hasty ruin]

else just read logs on your host OS

no prob

[acoustic imp]

yes

[radiant idol]

can someone make a proper crashlogger for rootless pretty please

[acoustic imp]

it doesnt appear

[hasty ruin]

Just use idevicesyslog on your main os

[acoustic imp]

windows suport?

or could i jus use Chinese spyware?

i alr have it so

ok il get idevicesyslog

?

[hasty ruin]

show the full thing

[acoustic imp]

nvm sys log is going

but like theres alot

like to much

hod do i like chnage that?

[hasty ruin]

idevicesyslog.exe -m "filter-text-here"

(where filter-text-here is inside your NSLog text)

[hexed knot]

rich coming from you

[primal perch]

@hasty ruin

[hasty ruin]

@primal perch

[primal perch]

gm

[hasty ruin]

gm

[radiant idol]

gn

tro

[grave orchid]

How do I begin making tweaks?

So I can become a

[hasty ruin]

check the latest pin

[grave orchid]

thank you

[hasty ruin]

[primal perch]

@vivid dew happy birthday big man

[old geyser]

@vivid dew happy birthday big man

[granite frigate]

@vivid dew happy birthday big man

[acoustic imp]

my code ...

#import "MedaiRemote.h"

@interface SBHomeScreenViewController : UIViewController
@end
@interface blueFrame : UIView
@end

%hook SBHomeScreenViewController

- (void)viewDidLoad {
    %orig;
   
 
    // Create a blue frame view
    UIView *blueFrame = [[UIView alloc] init];    
    blueFrame.frame = CGRectMake(0,0,200,200);
    blueFrame.backgroundColor = [UIColor blueColor];

    // Add the blue frame view as a subview
    [self.view addSubview:blueFrame];
    
    // Create gesture recognizers
    UITapGestureRecognizer *singleTapRecognizer = [[UITapGestureRecognizer alloc] initWithTarget:self action:@selector(handleSingleTap:)];
    singleTapRecognizer.numberOfTapsRequired = 1;

    UITapGestureRecognizer *doubleTapRecognizer = [[UITapGestureRecognizer alloc] initWithTarget:self action:@selector(handleDoubleTap:)];
    doubleTapRecognizer.numberOfTapsRequired = 2;

    UITapGestureRecognizer *tripleTapRecognizer = [[UITapGestureRecognizer alloc] initWithTarget:self action:@selector(handleTripleTap:)];
    tripleTapRecognizer.numberOfTapsRequired = 3;
    
    [singleTapRecognizer requireGestureRecognizerToFail:doubleTapRecognizer];
    [doubleTapRecognizer requireGestureRecognizerToFail:tripleTapRecognizer];
    
    // Add gesture recognizers to your frame
    [self.blueFrame addGestureRecognizer:singleTapRecognizer];
    [self.blueFrame addGestureRecognizer:doubleTapRecognizer];
    [self.blueFrame addGestureRecognizer:tripleTapRecognizer];
}

- (void)handleSingleTap:(UITapGestureRecognizer *)recognizer {
MRMediaRemoteSendCommand(kMRTogglePlayPause, nil);
}
     
- (void)handleDoubleTap:(UITapGestureRecognizer *)recognizer {
            MRMediaRemoteSendCommand(kMRNextTrack, nil);
}

- (void)handleTripleTap:(UITapGestureRecognizer *)recognizer {
            MRMediaRemoteSendCommand(kMRPreviousTrack, nil);
}


%end```

the error

    [self.blueFrame addGestureRecognizer:singleTapRecognizer];
          ^
Tweak.x:37:11: error: property 'blueFrame' not found on object of type 'SBHomeScreenViewController *'
    [self.blueFrame addGestureRecognizer:doubleTapRecognizer];
          ^
Tweak.x:38:11: error: property 'blueFrame' not found on object of type 'SBHomeScreenViewController *'
    [self.blueFrame addGestureRecognizer:tripleTapRecognizer];
          ^
3 errors generated.```
how do i like tell the things that the blue frame exsist? do i need to make another %hook thing and hook blurFrame?

[radiant idol]

please just learn objc first before doing tweaks

[acoustic imp]

oh ok

[radiant idol]

the fix would probably be this

[acoustic imp]

chat gpt got me

[radiant idol]

#import <UIKit/UIKit.h>
#import "MedaiRemote.h"

@interface SBHomeScreenViewController : UIViewController
@end

%hook SBHomeScreenViewController

- (void)viewDidLoad {
    %orig;
   
 
    // Create a blue frame view
    UIView *blueFrame = [[UIView alloc] init];    
    blueFrame.frame = CGRectMake(0,0,200,200);
    blueFrame.backgroundColor = [UIColor blueColor];

    // Add the blue frame view as a subview
    [self.view addSubview:blueFrame];
    
    // Create gesture recognizers
    UITapGestureRecognizer *singleTapRecognizer = [[UITapGestureRecognizer alloc] initWithTarget:self action:@selector(handleSingleTap:)];
    singleTapRecognizer.numberOfTapsRequired = 1;

    UITapGestureRecognizer *doubleTapRecognizer = [[UITapGestureRecognizer alloc] initWithTarget:self action:@selector(handleDoubleTap:)];
    doubleTapRecognizer.numberOfTapsRequired = 2;

    UITapGestureRecognizer *tripleTapRecognizer = [[UITapGestureRecognizer alloc] initWithTarget:self action:@selector(handleTripleTap:)];
    tripleTapRecognizer.numberOfTapsRequired = 3;
    
    [singleTapRecognizer requireGestureRecognizerToFail:doubleTapRecognizer];
    [doubleTapRecognizer requireGestureRecognizerToFail:tripleTapRecognizer];
    
    // Add gesture recognizers to your frame
    [blueFrame addGestureRecognizer:singleTapRecognizer];
    [blueFrame addGestureRecognizer:doubleTapRecognizer];
    [blueFrame addGestureRecognizer:tripleTapRecognizer];
}

%new
- (void)handleSingleTap:(UITapGestureRecognizer *)recognizer {
            MRMediaRemoteSendCommand(kMRTogglePlayPause, nil);
}
    
%new 
- (void)handleDoubleTap:(UITapGestureRecognizer *)recognizer {
            MRMediaRemoteSendCommand(kMRNextTrack, nil);
}

%new
- (void)handleTripleTap:(UITapGestureRecognizer *)recognizer {
            MRMediaRemoteSendCommand(kMRPreviousTrack, nil);
}


%end```

[acoustic imp]

nvm it dont

oh

[radiant idol]

LEARN THE LANGUAGE 😭

[acoustic imp]

i thoguht abotu that

[acoustic imp]

but like where thats up to date and isnt like a nunch of mumbo jumbo i wount ever use

[radiant idol]

"up to date" means nothing in terms of Objective-C

objective-c was effectively last updated in 2006

[acoustic imp]

well thoes videos examples dont work on IOS 15 ig

[radiant idol]

no I mean making apps and whatnot, not tweaks

[acoustic imp]

but there is a difference?

[radiant idol]

yes

apps - you use stuff that Apple allows you to use (e.g. public frameworks [you could also use the private ones but yk]) and you dont have to worry about other tweaks interfering with your code causing conflicts

[hexed knot]

Wheres the learning objective c in 24 days article at

@acoustic imp look up learning objective c in 24 days

Cuz ur code hate to break the news makes no sense

[acoustic imp]

Why can’t I flex my UIView/frame ?

Don’t mind the apps *

[hasty ruin]

check SBBacklightController

[hexed knot]

you are flexing it

see the purple outline

[acoustic imp]

Yea but I can’t open it and like change stuff like w other stuff

[hexed knot]

sure you can

you just need to navigate the flex menu

[acoustic imp]

?then what look for blueFrame

its not there

[hexed knot]

look for uiview

[acoustic imp]

ah

got it

[hexed knot]

with a purple or whatever color its outlined in dot next to it

[hasty ruin]

your variable name will not show within flex

only the class of the view

if you want to rename it, create a subclass

[hasty ruin]

rename what shows in flex

why are you deleting everything

[naive kraken]

why is there an apple event at 1am

[hasty ruin]

good question

[restive ether]

because only americans exist

[graceful gate]

cuz earth’s round 🥴

[pearl sail]

So true

[vivid dew]

go ahead

tell us the racist comment

[acoustic imp]

@radiant idol

#import "MediaRemote.h"

@interface SBHomeScreenViewController : UIViewController

@end


%hook SBHomeScreenViewController

- (void)viewDidLoad {
    %orig;
   
 
    // Create a blue frame view
    UIView *blueFrame = [[UIView alloc] init];    
    blueFrame.frame = CGRectMake(0,0,200,200);
    blueFrame.backgroundColor = [UIColor blueColor];

    // Add the blue frame view a s a subview
    [self.view addSubview:blueFrame];


    UITapGestureRecognizer *singleTap = [[UITapGestureRecognizer alloc] initWithTarget:self action:@selector(handleSingleTap)];
singleTap.numberOfTapsRequired = 1; 
[blueFrame addGestureRecognizer:singleTap];

UITapGestureRecognizer *doubleTap = [[UITapGestureRecognizer alloc] initWithTarget:self action:@selector(handleDoubleTap)];
doubleTap.numberOfTapsRequired = 2; 
[blueFrame addGestureRecognizer:doubleTap];

UITapGestureRecognizer *trippleTap = [[UITapGestureRecognizer alloc] initWithTarget:self action:@selector(handleTripleTap)];
doubleTap.numberOfTapsRequired = 3; 
[blueFrame addGestureRecognizer:doubleTap];

[singleTap requireGestureRecognizerToFail:doubleTap];
[doubleTap requireGestureRecognizerToFail:trippleTap];

}

- (void)handleSingleTap:(UITapGestureRecognizer *)recognizer {
   
        MRMediaRemoteSendCommand(kMRTogglePlayPause, nil);
    
}
     
- (void)handleDoubleTap:(UITapGestureRecognizer *)recognizer {
            MRMediaRemoteSendCommand(kMRNextTrack, nil);
}

- (void)handleTripleTap:(UITapGestureRecognizer *)recognizer {

        MRMediaRemoteSendCommand(kMRTogglePlayPause, nil);
}


%end```

why is it throughin me into safemdoe when ever i do one of the gesutures

wait

ik

whats the import for the gestures thing

[radiant idol]

no

[acoustic imp]

oh

[radiant idol]

you need %new before methods that you add yourself

so like

[acoustic imp]

i need to define them beofee the hook

nvm

[radiant idol]

%hook Something

// This method was there originally, you are just overriding it
- (void)method1 {
    // ...
}

// This method is new, you are adding onto the existing class with this method
%new 
- (void)method2 {
    // ..
}

%end

[acoustic imp]

wait so only for the seconda one?

or like this?

[radiant idol]

read the comments smh

[acoustic imp]

yea so this

but it doesnt work

i think i need to import the gestures thing

[radiant idol]

they're in uikit smh

[acoustic imp]

oh

[radiant idol]

and you need to add %new to EVERY method you add that was not there originally...

[acoustic imp]

ah ok

so id be like this?

[radiant idol]

yes

[acoustic imp]

when i make do it and install it it goes straight into safemode

but i can repsring thne its fine but then if i try a gesture it safemoded

[radiant idol]

well you kinda have to provide a crashlog

[acoustic imp]

k leme get both

how do u read them?

[radiant idol]

send it and I'll try and explain

[acoustic imp]

k

[hasty ruin]

if only we had cr4shed

[radiant idol]

true

[hasty ruin]

im so glad my tweaks support ios 14

[hasty ruin]

so i can get useful logs

🙏

[acoustic imp]

what was cr4shed like?

like no IOS mubo jumbo?

idk

or it would like make sense of it ?

Here others

[radiant idol]

it actually helped out a ton

[acoustic imp]

why cant it be made for rootless?

is it "closed source"

like dev left?

[hasty ruin]

the main issue is libmryipc iirc

[radiant idol]

its open source

just no one has completely remade it

Lightmann made some progress on it though

[acoustic imp]

yea flow needs that and flow is fricked on rootless

[radiant idol]

the main issue is libnotifications, which has not been updated to rootless

so this part of the crashlog shows the stack trace

[hasty ruin]

is that really the main issue?

[radiant idol]

yes

[hasty ruin]

it's open source anyway

tf

[radiant idol]

lemme find the forks

[hasty ruin]

what if we just

disable notifications

[radiant idol]

https://github.com/Muirey03/MRYIPC/pull/24 & https://github.com/Muirey03/Cr4shed/pull/81

[hasty ruin]

change your things like @selector(handleDoubleTap) to @selector(handleDoubleTap:) @acoustic imp

your methods take an argument

but your selector left that out

[acoustic imp]

oh

so if i jus deleted it from the methods it would be fine or...?

[hasty ruin]

yeah because youre not using the argument

[acoustic imp]

OMG it works

[hasty ruin]

ez

[acoustic imp]

well

single tap

and tripple no double tho

wth its like the two end gestures work

like if i disbale tripple double works

[cloud yacht]

I was thinking the other day about how hard it owuld be to read crash reports and parse them

I'm assuming its probably doing more than that

but it might be enough to get the culprit

[acoustic imp]

@grave sparrow for the thing I’m trying to do. Could I just make a “invisible” UIView and give it the single, double, trippple guesture recognizerr then when ever you click the volup&voldown together it “simulates” a tap/click on the UIView?

Or could I somehow use these/this

[misty cradle]

what da hell are you trying to do

[acoustic imp]

Single, double, trilpple taps of both volume up/down at same time -> pause, next track, privuos track .

[misty cradle]

hook the action method for those buttons and use MediaRemote for controlling the media

[acoustic imp]

Well i don’t want to use these buttons. I want to make a new/different gestures thing for clicking both volume buttons at same time

Like VolPaue tweak by icraze

[sly knoll]

how can I fix this?

set LC_RPATH?

how can I do it

[native orbit]

install readline

[sly knoll]

already installed

[timid furnace]

did you build this yourself

[native orbit]

hit em with the brew link force

[sly knoll]

yes

built from source

[timid furnace]

no wonder

check the install name of your readline dylib

[sly knoll]

oh it works now

but I have to install libplist from homebrew

cant use built from source one

[timid furnace]

if you build from source and use rpath for the install name, then you have to pass rpath to all your built downstream stuff

[sly knoll]

hmm

ill just install one from homebrew

[acoustic imp]

is there a way i can see like the other/rest of the code here?

or whats in the/a .m file

[cloud yacht]

you would have to reverse engineer the binary

The headers are only accesible because they need to be used in other code

Maybe if you crash your program in the double click handler, the stack trace could have something useful for you

[hasty ruin]

then explain how it works

in great detail

[blazing warren]

[olive peak]

guys stop using swift and switch to r, im sure it fits you

[cloud yacht]

Just write raw assembly

[granite frigate]

is there a way to hook how calls are made in whatsapp

how do i find what is responsible for this in the app

ive been trying to make the whatsapp call button use the normal phone call function instead of whatsapp calls

[native dune]

im curious as to why

[granite frigate]

because i have like 1000 minutes

[minor cargo]

Is a m1 MacBook Pro good enough for developing jailbreak tweaks?

[granite frigate]

yes

m1 air is fine

[minor cargo]

Really?

[granite frigate]

yes

[minor cargo]

I thought it would be a little for developing stuff now

Especially since it’s 3 years old

[zenith hatch]

hm

gm

[granite frigate]

gm

[minor cargo]

Do you think I could use an intel mac instead of apple silicon

[zenith hatch]

hi oomfie

[granite frigate]

hi oomfie

[granite frigate]

yes

[minor cargo]

Okay

[torn oriole]

@grave sparrow Monterey supremacy

airpods dont try to automatically connect

get a discord notification and Sonoma STEALS my airpods off my phone like

mf

[pearl sail]

just like your mother

once again get her off my dick bro

[torn oriole]

so REAL

[tepid olive]

i would feel bad for his dad if she didnt

[pearl sail]

sad news for him is I am not his father

[hearty flower]

Yo guys, little help. There’s any way to bypass this? Mod some plist file from the app maybe? I’ve change Iohone date to yesterday and the app opens again. I’ve realize if I mod some file with the date limit to update it could work.

[acoustic imp]

3dappversionspoofer

[manic willow]

don't use whatsapp

ez

[neat hearth]

dont use whatsapp

🔥

[proper reef]

hello people. I am having an issue with the IOKit. When I do IOServiceOpen on certain services, it returns error 0xe00002c7. How are these services to be interacted with?

[primal perch]

do you have entitlements to access it via the plist

[hasty ruin]

https://cdn.discordapp.com/attachments/1013496098347819091/1169461199872729108/caption.gif?ex=65557c9d&is=6543079d&hm=84fac9fa4e55aff46565d4280b3424415848a1970161ea8021d615300c83320a&

[vivid dew]

https://cdn.discordapp.com/attachments/1013496098347819091/1169461199872729108/caption.gif?ex=65557c9d&is=6543079d&hm=84fac9fa4e55aff46565d4280b3424415848a1970161ea8021d615300c83320a&

[torn oriole]

release zefram then you get speaking rights back

[hasty ruin]

true

[torn oriole]

/mute member: 883412614699446283 duration: -1 reason: shut up capt

no its icraze's

[proper reef]

no, which entitlements do i need

[primal perch]

i dont remember

ask capt

[hasty ruin]

[primal perch]

https://cdn.discordapp.com/attachments/1013496098347819091/1169461199872729108/caption.gif?ex=65557c9d&is=6543079d&hm=84fac9fa4e55aff46565d4280b3424415848a1970161ea8021d615300c83320a&

[hasty ruin]

https://cdn.discordapp.com/attachments/1013496098347819091/1169461199872729108/caption.gif?ex=65557c9d&is=6543079d&hm=84fac9fa4e55aff46565d4280b3424415848a1970161ea8021d615300c83320a&

https://cdn.discordapp.com/attachments/1169461256386785290/1169463619407319120/caption.gif?ex=65557ede&is=654309de&hm=70fc909b4eb02daedf21b5864761e7e6eb3a7ee18f7fd18ad6dd2de5f5dacfcc&

[torn oriole]

/mute member: 434097922762735618 duration: -1 reason: shut up capt

/mute member: 434097922762735618 duration: -1 reason: shut up capt

/mute member: 434097922762735618 duration: -1 reason: shut up capt

/mute member: 434097922762735618 duration: -1 reason: shut up capt

[hasty ruin]

true

[proper reef]

AppleARMNORFlashDevice

[hasty ruin]

wtf

@torn oriole he's suppressing

censoring

[torn oriole]

https://tenor.com/view/1984-gif-19260546

@grave sparrow

[hasty ruin]

ban him!!!!

[torn oriole]

literally one result on google

[proper reef]

and thats for an ipod touch 2g.

oh and i just found the header

hopefully that'll help?

[proper reef]

who knew reading syscfg would be this difficult

[gentle grove]

https://cdn.discordapp.com/attachments/1013496098347819091/1169461199872729108/caption.gif?ex=65557c9d&is=6543079d&hm=84fac9fa4e55aff46565d4280b3424415848a1970161ea8021d615300c83320a&

[pearl sail]

https://cdn.discordapp.com/attachments/1013496098347819091/1169461199872729108/caption.gif?ex=65557c9d&is=6543079d&hm=84fac9fa4e55aff46565d4280b3424415848a1970161ea8021d615300c83320a&

[primal perch]

https://cdn.discordapp.com/attachments/1013496098347819091/1169461199872729108/caption.gif?ex=65557c9d&is=6543079d&hm=84fac9fa4e55aff46565d4280b3424415848a1970161ea8021d615300c83320a&

[hasty ruin]

https://media.discordapp.net/attachments/1013496098347819091/1169461199872729108/caption.gif

[harsh junco]

https://media.discordapp.net/attachments/1013496098347819091/1169461199872729108/caption.gif

[turbid fjord]

https://media.discordapp.net/attachments/1013496098347819091/1169461199872729108/caption.gif

[bleak ingot]

https://media.discordapp.net/attachments/1013496098347819091/1169461199872729108/caption.gif

[worthy rune]

https://media.discordapp.net/attachments/1013496098347819091/1169461199872729108/caption.gif

[native dune]

https://media.discordapp.net/attachments/1013496098347819091/1169461199872729108/caption.gif

[hasty ruin]

https://media.discordapp.net/attachments/1013496098347819091/1169461199872729108/caption.gif

[zenith hatch]

https://media.discordapp.net/attachments/1013496098347819091/1169461199872729108/caption.gif

[granite frigate]

#development became shitposting

true

[hasty ruin]

“became”

[granite frigate]

even more*

[misty cradle]

buddy was not here during the 2021 days..\

2020/2021 .............

[granite frigate]

i was sort of

then i left

[misty cradle]

not real enough.

[granite frigate]

https://cdn.discordapp.com/emojis/1085060228241969192.webp?size=48&name=sadge&quality=lossless

[cloud yacht]

https://cdn.discordapp.com/attachments/1052374999148793946/1169660494764855326/attachment.gif?ex=65563639&is=6543c139&hm=997f74e24a5d669812435fc4f5bb83a692f98b356f2ab55f396093fa88791d0f&

[turbid fjord]

Sent in DMs earlier

[misty cradle]

ok who is good with tailwind here

i cannot figure out why this page got horizontal scrolling, instead of just having everything at an eye glance

[cloud yacht]

Not me

but probably something is too wide

[misty cradle]

i may have figured it out omg

it may have been the browser just acting funny...

[gentle grove]

time to open the dev console

[pearl sail]

https://cdn.discordapp.com/attachments/688124600269144162/1169667346898632734/caption.gif?ex=65563c9a&is=6543c79a&hm=1d2829f4787689d823b81f793b752ad49404796a64e18c0818e4290c21d35081&

[hasty ruin]

https://cdn.discordapp.com/attachments/688124600269144162/1169667346898632734/caption.gif?ex=65563c9a&is=6543c79a&hm=1d2829f4787689d823b81f793b752ad49404796a64e18c0818e4290c21d35081&

[harsh junco]

https://cdn.discordapp.com/attachments/688124600269144162/1169667346898632734/caption.gif?ex=65563c9a&is=6543c79a&hm=1d2829f4787689d823b81f793b752ad49404796a64e18c0818e4290c21d35081&

[primal perch]

https://cdn.discordapp.com/attachments/688124600269144162/1169705028236365824/caption.gif?ex=65565fb2&is=6543eab2&hm=e22552f12f323e11f10b4b5c13475ec842347affced1bce7b74f1fc094fb9c6b&

[young meteor]

https://media.discordapp.net/attachments/688124600269144162/1169651886123646986/caption.gif?ex=65562e34&is=6543b934&hm=341bcc06de8e6374eda8e37ce14f04f66d3da18fa7043595edf061199ad2427e&

[blazing warren]

https://tenor.com/view/go-to-sleep-spanking-tom-and-jerry-gif-14477118

[primal perch]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[blazing warren]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[primal perch]

@hasty ruin @grave sparrow

[hasty ruin]

True

[native orbit]

imagine not using monterey

[primal perch]

fr

[torn oriole]

i present to you

[primal perch]

also based

ventura is where my hate goes though ios 17 has been much better and sonoma seems mostly ok now too

[torn oriole]

Not good enough

Must be PERFECT like Monterey

This gives me the idea for another gif

[hasty ruin]

had a funny iOS 17 bug yesterday

an app icon just got stuck on the screen

[primal perch]

i feel like i’ve seen that once

when i did some weird swipe combo

very quickly

[hasty ruin]

I just went into jiggle mode

And it fucked up

[primal perch]

lol

[hasty ruin]

except Mojave

I guess the “M” OS names are just better

[fiery seal]

catalina was good

[primal perch]

fr

we need macos mammoth next year badly

[hasty ruin]

macOS Morn

[primal perch]

fire

[hasty ruin]

macOS miscarriage goes hard

[torn oriole]

True

macOS Mavericks went crazy too

M macOS names are just built different

[cloud yacht]

https://cdn.discordapp.com/attachments/1052374999148793946/1169722899351994429/attachment.gif?ex=65567057&is=6543fb57&hm=849abf1eda093da952d306437508e2df019649c9f3952936d352fad7b9ddd1ea&

[primal perch]

real

[cursive rampart]

do it jiggle?

[hasty ruin]

Only on Fridays

[cursive rampart]

oh

[minor cargo]

😭

[native dune]

Sonoma so good

[manic willow]

slow-noma*

[native dune]

Not slow for me

Betas weren't great

[manic willow]

is release faster?

[native dune]

Yeah

Make sure to clean install

[manic willow]

ah

oke

[tepid olive]

i think everyone who develops for ios should be permanently banned from here

[cloud yacht]

is tweak development for ios?

cause it doesn't really work on stock iOS?

[main apex]

What?

[visual meadow]

sonoma operates fine for me

sonoma rc1 master race

[timid furnace]

Bro I don't know if I have display issues or if macOS is just stupid 😢

[torn oriole]

[blazing warren]

[hasty ruin]

skill issue

[vivid dew]

void *mymalloc(int sz) {
return malloc(sz);
}

[hasty ruin]

[wooden yarrow]

not even a sz != 0 check

woe

[hasty ruin]

🤓

[wooden yarrow]

nvm it's not undefined it's implementation defined

[primal perch]

bad code

not size_t

[vivid dew]

name one case where anyone would need more than 2 gb

[steady nest]

mfw OSSafeRelease releases the object but doesn’t null

[cloud yacht]

When loading 3 gb

[hasty ruin]

[wooden yarrow]

photoshop

[primal perch]

fr

doesn’t matter bad code anyway

[native orbit]

every electron app probably

[timid furnace]

What did you use lmao

[hasty ruin]

https://cdn.discordapp.com/attachments/1169461256386785290/1169825253707501588/caption.gif?ex=6556cfaa&is=65445aaa&hm=7c036ece7781ef6b0fa05c1359adf260336c12f216895bfd17992afa8601e29a&

@primal perch

[worthy rune]

@import hell

[hasty ruin]

https://cdn.discordapp.com/attachments/1169461256386785290/1169831797866123385/caption.gif?ex=6556d5c3&is=654460c3&hm=22123e5914ac0d3c4e5c456b1aeaadd21409c6af6a900a21cdf554bb395276e6&

[pearl sail]

@grave sparrow look a GIF of you irl

[hasty ruin]

no he only uses C

🤝

[pearl sail]

No I meant the lonely part

[hasty ruin]

oh true 👍

[primal perch]

TRue

[gentle grove]

memory mapping a large file

[primal perch]

that’s not allocating it all though

[gentle grove]

still putting it in virtual address space and therefore consuming addresses

[hasty ruin]

https://media.discordapp.net/attachments/688121419980341282/1139608104447791256/capt.gif

[torn oriole]

GIR

[sly knoll]

help me again

I have openssl3 installed

[faint timber]

how do you not know

[sly knoll]

...

ok fixed

[cursive rampart]

i'm not like the other girls

[tepid olive]

https://tenor.com/view/coding-hello-world-c-programming-programming-gif-21075258

[primal perch]

me

[pearl sail]

So true

[twilit jungle]

me using copilot

[hasty ruin]

copilot my beloved

[hasty ruin]

https://cdn.discordapp.com/attachments/688124600269144162/1170184270120235058/caption.gif?ex=65581e06&is=6545a906&hm=194ea1ec084c99437cfd2055b3e03542f8fc9359d499b3ba7be6f5321030e0cd&

[blazing warren]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[gentle grove]

this is a fake error

it would not know how much you would alolocate

[pearl sail]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

@grave sparrow

[minor cargo]

Is a 256gb M2 MacBook Pro has enough space for tweak development?

Or should I go with more storage space

[hasty ruin]

yeah

[minor cargo]

Okay

Should I just go with a M1 MBP then?

[pearl sail]

The M1 will be goated for a while so you might as well

[minor cargo]

okay

[zenith hatch]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[visual meadow]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[night rover]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[blazing warren]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[granite frigate]

i regret buying 256gb space only

[cloud yacht]

I mean it could

[primal perch]

more ram is more important

[sly knoll]

can someone test opa334’s kfd on iPadAir2 15.3.1? It never worked for me

worked on 15.7.1 but never on 15.3.1

[minor cargo]

okay. i decided i’m gonna spend a bit more and buy a M1 pro

[placid kraken]

hi so i have an issue with this little hook thingie i wrote

basically discord provides a native module to do some file operations on the native side, such as reading and writing, but not deleting

so i wrote this hook that adds a third type to the writeFile function to provide a bridge to delete a file from the js side because creating a new custom native module without having access to the source code of the discord app is too complicated ```objc
/**

• Adds a way to delete a file at a specific path on the JS side.

• ---

• This acts as a 3rd "type" to pass into the original writeFile from the JS side
• So, instead of calling with "documents" or "cache" and passing a partial path,
• You would call with "delete" and must pass the full path of the dirent to delete
• You can either delete a file or dir, just pass the appropriate path (hence "dirent")
  */
  %hook DCDFileManager

  • (void) writeFile:(NSString*)type path:(NSString*)path data:(NSData*)data encoding:(NSString*)encoding resolve:(RCTPromiseResolveBlock)resolve reject:(RCTPromiseRejectBlock)reject {
    if ([type isEqualToString:@"delete"]) {
    NSLog("Attempting to delete dirent at path %@...", path);

      @try {
          id result = [FileSystem delete:path];
    
          if (![result isKindOfClass:[NSError class]]) {
              NSLog("Successfully deleted dirent at path %@.", path);
              resolve(path);
          } else {
              NSLog("Failed to delete dirent at path %@: %@", path, [result localizedDescription]);
              reject(@"err", [NSString stringWithFormat:@"Failed to delete dirent at path %@.", path], result);
          }
      } @catch (NSException *e) {
          NSLog(@"Failed to call promise methods: %@", e);
      }
    

    } else {
    %orig(type, path, data, encoding, resolve, reject);
    }
    }
    %end

IDEALLY calling resolve and reject should just work, however it crashes the app as soon as theyre called

i did my research and the above is indeed how resolve and reject should be called for native modules

i even used the exact typedef for the blocks from RN in RCTBridgeModule.h

im kind of stuck now because no matter how i call resolve, it crashes the app

discord themselves call the resolve block with the path as an NSString*

and they call reject with err, some error description, and i dont remember if they pass an NSError or if they just use nil

i could just not settle the promise and simply NSLog on the native side if the operation was successful, but now the app will crash again if i call writeFile afterwards with the correct type (documents or cache) which DOES settle, because the first promise from calling writeFile with delete was never settled and it just causes more issues

i also tried passing in a special resolve block to see what their resolve is being called with, and i was indeed correct

void (^specialResolve)(id) = ^(id result) {
   NSLog("Called resolve on writeFile with %@", result);
   resolve(result); // just the path that the file was written to
};

%orig(type, path, data, encoding, specialResolve, reject);
``` it just resolves with the path which the file was written to

an NSString*

which i tried to resolve with

that makes the app crash when i do it

im really confused

(ive been messing with this for the past few days and i feel like ive tried everything idk what to do anymore)

their official native modules look like this

@implementation RCTClipboard

RCT_EXPORT_MODULE()

- (dispatch_queue_t)methodQueue
{
  return dispatch_get_main_queue();
}

RCT_EXPORT_METHOD(setString : (NSString *)content)
{
  UIPasteboard *clipboard = [UIPasteboard generalPasteboard];
  clipboard.string = (content ?: @"");
}

RCT_EXPORT_METHOD(getString : (RCTPromiseResolveBlock)resolve reject : (__unused RCTPromiseRejectBlock)reject)
{
  UIPasteboard *clipboard = [UIPasteboard generalPasteboard];
  resolve((clipboard.string ?: @""));
}

- (std::shared_ptr<TurboModule>)getTurboModule:(const ObjCTurboModule::InitParams &)params
{
  return std::make_shared<NativeClipboardSpecJSI>(params);
}

@end
``` so yeah literally just resolve block being called with a string

example of reject

RCT_EXPORT_METHOD(readAsDataURL
                  : (NSDictionary<NSString *, id> *)blob resolve
                  : (RCTPromiseResolveBlock)resolve reject
                  : (RCTPromiseRejectBlock)reject)
{
  RCTBlobManager *blobManager = [_moduleRegistry moduleForName:"BlobModule"];
  dispatch_async([blobManager executionQueue], ^{
    NSData *data = [blobManager resolve:blob];

    if (data == nil) {
      reject(
          RCTErrorUnspecified,
          [NSString stringWithFormat:@"Unable to resolve data for blob: %@", [RCTConvert NSString:blob[@"blobId"]]],
          nil);
    } else {
      NSString *type = [RCTConvert NSString:blob[@"type"]];
      NSString *text = [NSString stringWithFormat:@"data:%@;base64,%@",
                                                  type != nil && [type length] > 0 ? type : @"application/octet-stream",
                                                  [data base64EncodedStringWithOptions:0]];

      resolve(text);
    }
  });
}

[shy veldt]

Hey

I’m trying to create a tweak and when I use ‘make do’ in THEOS (I’m using dopamine) and it’s prompt me to enter root password it’s always says the password is wrong

Can’t I use make do with dopamine?

[hasty ruin]

the root password is disabled by default

you can enabling by running sudo passwd as the mobile user

[blazing warren]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[manic willow]

Guys how do I put up a tweak bounty

[radiant idol]

https://reddit.com/r/tweakbounty

[manic willow]

Ty

LMAO

fair enough

[radiant idol]

what even is the bounty

[manic willow]

uh

Fixing edited images being sent as adjustments.plist on discord 175+

[radiant idol]

if its a vcam tweak i swear

oh

what

[manic willow]

on iOS 13 if you send an edited image on discord it sends as adjustments.plist

Here I'll show you

[radiant idol]

ok

[manic willow]

See

[radiant idol]

was the image a png or what

[manic willow]

oh no it's a screenshot but discord sends the adjustments file instead of the edited image

Brb

[pearl sail]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[radiant idol]

is this an iOS 13 issue only or what

[manic willow]

Yep

[turbid fjord]

Discord malware

[manic willow]

It's not lol

[feral mirage]

@manic willow any news ?

[timid furnace]

post crash

[placid kraken]

thats the most confusing thing, i get no real stack trace / crash log

the most i get is No error handler for XPC error: <private>

other than that there are no faults or errors filtering by the Discord process

[timid furnace]

you said it crashes

there should be a log in analytics

[placid kraken]

oh that one

sure

[manic willow]

Yes

[placid kraken]

it doesnt seem to generate crash logs there when i crash it like this

yeah there are no recent incident reports here

im looking in the right place right?

[native dune]

Analytics data

[timid furnace]

yes

[placid kraken]

i know

the most recent ips is from august of this year lmao

[radiant idol]

Is it possible to get the value of an ivar from a pure Swift class that is a subclass of _TtCs12_SwiftObject (Swift._SwiftObject)? The type of it is a Swift String, I just need to get its value in Objective-C, if that is at all possible

@grave sparrow Feel like you'd know best, thanks in advance :) ^

Right, but am I able to then get the value of a Swift String and put it into an NSString somehow?

Or is that just impossible from Objective-C

uh oh

uh oh

ok I see lol

curse you apple for making this so difficult

so obj in this case is the ivar? or is it the swift str

thats what im confused on

ohhh I see

so all the ivar goofiness would be done in Swift then, not objc

I get it

[placid kraken]

@indigo peak youve messed with discord on the native side for a little while, do you have any idea about this? :c

[radiant idol]

uh

ok yeah that is weird

For reference, this is what I need to get the value of: https://github.com/Sileo/Sileo/blob/18e0ac2c90e8658ed9b787dca25a4c7c34edf93a/Sileo/Backend/Objects/Package.swift#L20

(if that helps)

rip

woeisfade

guess ima find some other way to do this

this way would've been so convenient though, had there been @objc

(last bullet point is put in question)

ok well thanks, appreciate the help

I'll just find a better way

yeah that would probably be cleaner

real

[hasty ruin]

[manic willow]

Any news?

[vivid dew]

yes

your mother is with child

and it's @primal perch 's

[primal perch]

[hasty ruin]

impossible

[shy veldt]

Any one knows what can be the cause of a tweak that work on 15.1 iPhone 13 but not on 15.4.1 iPhone 13 pro max?

I’m trying to update cozybadges to support dopamine but for some reason it’s working on my 13 15.1 but it’s not working on my 13 pro max 15.4.1, both latest dopamine

[primal perch]

ios code changes

[shy veldt]

Well it’s weird because the same code did worked, it’s not working since I tried to fix the settings save functionality

I have the tweak in my GitHub but the save functionality is broken, I’m trying right now to fix it - and it’s working on my 13 15.1 but not the 15.4.1

[hasty ruin]

does the settings plist already exist on just one of the devices?

[shy veldt]

Right now yes, in both devices

[hasty ruin]

very weird

[shy veldt]

But even if I start over and delete everything related, it’s still working on 15.1 and not 15.4.1

[naive kraken]

Any news?

[hasty ruin]

[placid kraken]

why do you guys keep asking any news 😭

any news of what

sorry i havent been here for a month or two

https://cdn.discordapp.com/emojis/1019732813941067908.webp?size=48&name=skulley&quality=lossless

[viral osprey]

any news on JB scene

[placid kraken]

oh

[brazen timber]

it's a meme now bc of this one kid who kept spamming it in this channel

[gentle grove]

any news?

[timid briar]

@ NYT any news?

[young meteor]

@manic willow any news on yogurtJB?

[manic willow]

Soon when I get the Rx 580 from @minor cargo

[hexed knot]

ANY NEWS?

[primal perch]

ANY NEWS?

[minor cargo]

whats yogurt JB

my birthday tomorrow

ship on monday

ill sell you my entire PC for 500$

its liquid cooled or whatever

[hasty ruin]

capt came out as having below average iq

[primal perch]

https://cdn.discordapp.com/attachments/710659805710254141/1169714148075110421/caption.gif?ex=65566831&is=6543f331&hm=27515155eca816cbd21afb04249565ad02f01a81072d5ac34e5df0952cfe82c4&

[hasty ruin]

https://cdn.discordapp.com/attachments/1169461256386785290/1169831797866123385/caption.gif?ex=6556d5c3&is=654460c3&hm=22123e5914ac0d3c4e5c456b1aeaadd21409c6af6a900a21cdf554bb395276e6&

[gentle grove]

@primal perch @zenith hatch

@turbid fjord

[main apex]

Add "I use swift" to this gif as well.

[hasty ruin]

https://cdn.discordapp.com/attachments/1169461256386785290/1170536530327130122/caption.gif?ex=65596618&is=6546f118&hm=b8ca0cf8fd303b6316d29b85970726a4fb315a7f7911bd587dea55b9072e54bd&

https://cdn.discordapp.com/attachments/1169461256386785290/1170536682278359150/caption.gif?ex=6559663c&is=6546f13c&hm=2bdf6a2b9e84cb970c3bca0705cea6b9d6079b48207f9bcd8fa0c2bb76d0d336&

[placid kraken]

does it get worse if i update or something

my 13.1 install seems to work as it should

i dont see any major downsides from monterey

all i know is that i dont want sonoma because it breaks sideloading stuffs iirc

[zenith hatch]

rosie hiii

[placid kraken]

hiiii

[placid kraken]

im here because im stuck on this :3

[zenith hatch]

i have no idea how to help

[placid kraken]

:C

[primal perch]

it’s definitely better on 13.6

most of my complaints were fixed 13.5+

maybe 13.4

before that it was just stuttery draggin windows and buggy settings

but settings still kind of buggy

[native orbit]

12.7.1

[zenith hatch]

@native orbit

[native orbit]

omg

coverflow

[cloud yacht]

no way is that coverflow

does it have the cool animation when you click one?

[zenith hatch]

hopefully i can get it fully working and put it in ipod

[zenith hatch]

not yet

[cloud yacht]

ok fair

[zenith hatch]

idk if i wanna copy the anim 1 to 1

might do something thats a little faster

somethin like the album flies off screen whilst its tracks fly in

[cloud yacht]

theres the iPod one too

I think its faster

but might not work well on a phone screen

it like flips and the albums are on the back, iirc

or is the iPhone one

I don't remeber at this point

the other one is it moves to the side and the albums fade in

[hasty ruin]

https://cdn.discordapp.com/attachments/1169461256386785290/1170572842790834247/caption.gif?ex=655987e9&is=654712e9&hm=65015a3409009ea00bbd1d9eaf414c58f63a841c6c938465d4ad847a80a91f4f&

he finally went upstairs 🙏

[primal perch]

https://cdn.discordapp.com/attachments/966830763968430180/1170572565958381689/caption.gif?ex=655987a7&is=654712a7&hm=85f5e9bebfd9c716e15ac4f1f95c15c4d93055c5df3239dbe96ef22acb109a60&

[manic willow]

Ong

[indigo peak]

ill try taking a look at this in the morning, im fucking hammered rn

[wooden yarrow]

Mojave

[torn oriole]

Mojave was only good because of 32bit

[topaz yew]

in what case would i need a symbol from another process or the kernel

or a file

[shy veldt]

Hey

In rootless plist files stored here /private/preboot/653FC16D8C4A9E1091202655C20C8D4A9858A47B6A2734688144CDF136D2126E2C1C688809609628395F0277066C2B56/jb-uoCyBT/procursus/var/mobile/Library/Preferences

I’m not sure how I should create the plist file thru my tweak in here. What is the path I should use?

What the path should be?

[main apex]

Was Mojave the first one to finally introduce dark mode as well?

[torn oriole]

Correct

[main apex]

So another reason why Mojave was goated cause dark mode is the best.

[torn oriole]

[naive kraken]

ROOT_PATH_NS(@"/var/mobile/Library/Preferences/<whatever>.plist")

[shy veldt]

Thanks!

[placid kraken]

nevermind dont worry i ended up hooking DCDPhotosManager.deletePhotos which resolves and rejects promises perfectly

%hook DCDPhotosManager
    - (void) deletePhotos:(NSArray*)uris resolve:(RCTPromiseResolveBlock)resolve reject:(RCTPromiseRejectBlock)reject {
        if ([uris[0] isEqualToString:@"enmity"]) {
            NSString* path = uris[1];
            NSLog("Attempting to delete dirent at path %@...", path);

            @try {
                id result = [FileSystem delete:path];
                NSString* message = nil;

                if (![result isKindOfClass:[NSError class]]) {
                    message = [NSString stringWithFormat:@"Successfully deleted dirent at path %@", path];

                    NSLog("%@", message);
                    resolve(message);
                } else {
                    message = [NSString stringWithFormat:@"Failed to delete dirent at path %@: %@", path, [result localizedDescription]];

                    NSLog("%@", message);
                    reject(@"err", message, nil);
                }
            } @catch (NSException *e) {
                NSLog(@"Failed to call promise methods: %@", e);
            }
        } else {
            %orig(uris, resolve, reject);
        }
    }
%end

and this time the promise actually settles

https://cdn.discordapp.com/emojis/1007946425725886464.webp?size=48&name=SilvPray&quality=lossless

[sly knoll]

roisecord

[placid kraken]

ya

[sharp niche]

So even if TrollStore cert basically emulates Apple Root CA platform certificate triggering CoreTrust bug, the error known as (service cannot be started, it's not an platform binary) requires the binary with that cert to be somehow added into dynamic trustcache to be accepted as an platform binary and enable tweak injection ability?

Well, where is exactly dynamic trustcache located in iOS system

And where is static trustcache located in iOS system

[naive kraken]

yes

[naive kraken]

PPL protected memory

[naive kraken]

KTRR protected memory

(although static might be in PPL now in 16+ too due to cryptex, not sure, doesn't matter anyways)

[sharp niche]

So.... those memories are not anywhere in the system nor readed from iOS rootfs? - it's just that system binaries while booting are loaded into RAM as platform binaries?

[naive kraken]

dynamic trustcaches can be loaded by Xcode over USB but require to be signed by apple and the verification of that happens in a PPL routine

static trustcaches are compiled into the kernel

[sharp niche]

So, basically even if we can rw in iOS 14 / dir, somewhere in rootfs the file name was trustcaches im4p format so if that gets somehow decrypted, modified and again encrypted, the system will not apply changes from that file because it's using kernel to read trustcaches instead of an file inside iOS system?

So device could actually instead of booting to just bootloop?

[naive kraken]

no, the TrustCache simply is not on the rootFS to begin with

it's part of the kernel and the kernel gets verified by iBoot

[sharp niche]

well... in that case what is purpose of that trustcache im4p file... what it contains? Is that just auto generated by kernel every time device reboots?

[naive kraken]

what trustcache im4p file?

on iOS 16 again it might be that things have changed due to cryptex

[sharp niche]

Yeah - I found that file somewhere in rootfs of iOS 14.x and iOS 15.x too

[naive kraken]

if that exists it's either not used or signed by apple

[sharp niche]

Well im4p files are usually encrypted with Apple signature (private key)

But if someone have it, they can basically decrypt it, modify it and with the same key to encrypt it

[naive kraken]

if someone had that private key they could literally sign whatever firmware they wanted

that's not an attack surface

[sharp niche]

So... private keys stored in such secret im4p files that provides list of platform binaries, their location, hashes and certificates is actually the keys used to sign ipsw images?

👀

And also, do you know what methods hackers usually using to maybe even on an illegal secret way to access to those type of secrets like private keys to decrypt and encrypt (sign) firmwares (im4p and etc...)

Because Apple works differently than any other type of OS

Even Android devices (their manufactures) gets somehow easier to steal and crack the platform key for root purposes than iOS most secured and closed-source too

In that way, Android devices can avoid unlocking bootloaders and just flash system updates with patched+signed bootloaders that is giving root access to an target android device

Is there something similar (an ability) for iOS/iPadOS devices too even if it's closed-source and most secured OS in the world because of Apple limits and constantly patching vulns

[naive kraken]

a private key is not stored anywhere, the file is signed with it

[naive kraken]

no one does that

[sharp niche]

I mean... instead of stored actually encrypted (signed)

[sharp niche]

Well someone anyway needs to begin to revive jailbreak community

But risks are very high

If Apple finds out

[hasty ruin]

[naive kraken]

this won't happen bro

if you don't plan to physically break into apple HQ and commit like a gazillion crimes, your chances of retrieving this key are 0%

[hasty ruin]

thats why he said the risks are high

[sharp niche]

Not yet for sure - but it might happen - we just need an bilionaire who will rather pay as much is required to powerful hackers to do that type of research and stealing for jailbreak purposes 😅

[hasty ruin]

😭

[sharp niche]

But anyway it's risky to the fact that consequences are for an serious lifetime jail

Because that can hurt all Apple devices so basically, the whole company that builds that software is vulnerable so they need to revoke their platform certificate and change it and make new phones with an new private keys and platform certificates while leaving all other Apple devices vulnerable without any patching anymore - just moving their users to new devices (hardware) with completely resigned iOS with an different key

[steady nest]

check /usr/standalone/firmware/FUD

I don't think it's compiled into the Kernel?

[sharp niche]

But iBoot could and probably is actually checking it's hashes and certs every single boot

So modifying there without their private key (basically platform certificate) can actually force device to an bootloop state

No one yet tested it but probably if the location /usr/standalone/firmware/FUD are protected by iBoot checking their hashes and signatures, it can lead to an endless bootloop

If it's not protected (lucky for all of us by Apple), we can actually modify it 👍

Even on iOS 15 because there is an location where /usr/standalone/firmware is mounted there as RO but it's actually RW in /private/preboot if that gets remounted by root access temporary

So in iOS 15 there is an bug by Apple that is not mentioned that location /usr/standalone/firmware is actually auto-mounted by system from an RW location if that RW location gets remounted as RW

[steady nest]

what are you going on about

[sharp niche]

About system location /usr/standalone/firmware on both iOS 14.x and 15.x - and of course every directory and files there too

The source directory of that directory is mounted by system in another partition that can be mounted as RW /private/preboot/

So if there is static trustcache physically located and not protected by iBoot verification, it could basically be rewritten with an modified version of the same file to bypass code signatures

And enable jailbreak binaries and libraries to be accepted by system as platform binaries

• CoreTrust bug it could basically lead to an untethered full jailbreak, not an semi-jailbreak like FRM

But, only if Apple made there an mistake about for example forgetting to add those files and dirs from that location to an iBoot for checking it's hashes and signatures

[faint stag]

Let's talk about reality and not all these theoreticals smh

[sharp niche]

Well someone needs to test it if you want to be reality

Not just waiting and letting theories stay theories

There is no success without making mistakes and one of theories to be approved and working after making mistakes and finally figure out

[blazing warren]

https://tenor.com/view/dancing-elvis-presley-austin-butler-elvis-grooving-gif-26399604

[topaz yew]

you do it then

[steady nest]

most of what you're saying doesn't make sense

[sharp niche]

Just test and see, don't judge without testing it

And yeah, I don't have an writting/speaking skills in another languages that are not my native language so I'm not sure that people understand actually what I want to say

But I will test it anyway as soon I go home and take my iPhone

[sharp niche]

I'm not even home so there is no iPhone with me - currently I'm unable to experiment with those theories

[steady nest]

what are you even going to test

[sharp niche]

I will test is there any iBoot vulnerability to /usr/standalone/firmware/ files and directories there - will iBoot checking signatures and hashes of that dir every boot or not

On both iOS 14 and 15

If iBoot doesn't checking it even after modifications that I'm going to made there and successfully boot into iOS, I will have a chance for an permanent codesigning bypass so that all jailbreak apps and binaries can be executed as platform binaries

(Only if I got enough luck with all of this that in that directory there is an critical file im4p that contains static trustcaches that gets loaded every boot)

If the test is successful with enough luck, we can freely say that we find out a way for an untethered jailbreak on all iOS 14 and iOS 15 vulnerable versions

[steady nest]

you do know 15 has SSV right

[sharp niche]

Yes of course

But do you know that /usr/standalone/firmware is just auto-mounted by system from /private/preboot partition (volume) every boot as RO

So if you modify firmware dir (content there) that you can find in /private/preboot/ partition (volume), those modifications are automatically applied to /usr/standalone/firmware dir

Basically, bypassing SSV in that way

Because it's not SSV protected there

But if you try directly to modify or remount /usr/standalone/firmware, you will not be able to do it - Apple protected it in that way but the source is actually from another partition (volume) that is completely SSV-free (without SSV protection)

• So as soon I go home, I will begin with tests and if my tests are successful, I will let you all know that if you want

[native dune]

what are you going to modify tho

[sharp niche]

static trustcaches of course - if I modify static trustcaches and the im4p file that contains those caches are not checked by iBoot, the modification can be successful

So we can basically inject into static trustcache file required binaries and libraries to run jailbreak services and exploit as an platform binary with highest privileges, no entitlements limits and allow it to inject things into other processes too (tweak injection 👍)

If there is no trustcaches file even if it's not im4p but another type of file, there should be at least kernelcaches

In kernelcaches if gets decrypted successfully (if it's not encrypted because I'm not sure that I can find a key for kernelcaches), there should be static trustcaches added

[frail cedar]

This depends on iBoot not verifying the trustcache im4p which it does

At least from my understanding it does

You'd need some way to bypass that check

[manic willow]

Guys

Is there any news whatsoever on the new ct bug

[frail cedar]

kernelcaches used to be encrypted but aren't any more

only iBoot stages and sepfw are now

[torn oriole]

shut the fuck UP

[frail cedar]

i don't know the lore on the regulars I see

[torn oriole]

from: 468172257378828292 news

give it a look

[frail cedar]

oh

[native orbit]

any news??

[manic willow]

:/

[radiant idol]

any news??????????

[native dune]

any news??????????

[manic willow]

Fuck you guys

[hasty ruin]

you wanna do WHAT

[manic willow]

You heard me

[hasty ruin]

oh

[hexed knot]

ANY NEWS?

[vivid dew]

any nudes

[viscid cradle]

how do you get started jail breaking? let's say i have good understanding of programming and C++ but not so much memory management

like what's the best way to start/learn the basics before u start exploring?

[acoustic imp]

#development message

[pearl sail]

Doing a lot of meth

[acoustic imp]

@viscid cradle

#development message

[hasty ruin]

💪

[frail cedar]

we dont want another tihmstar

[pearl sail]

There already is another tihmstar their name is just @grave sparrow

[hasty ruin]

tihmstar has actually written a jailbreak

[native orbit]

yeah in objc++

[primal perch]

fr

[native orbit]

one made a jb, one made malware

[hasty ruin]

one made a jb, one got forkbombed by icraze

[main apex]

Technically 2? h3lix and doubleH3lix?

[hasty ruin]

more than that

[primal perch]

https://cdn.discordapp.com/attachments/710659805710254141/1169714148075110421/caption.gif?ex=65566831&is=6543f331&hm=27515155eca816cbd21afb04249565ad02f01a81072d5ac34e5df0952cfe82c4&

[cloud yacht]

Better than swift

[primal perch]

fr

[blazing warren]

fr

[granite frigate]

didnt he contribute to fugu15 rootful

[exotic spire]

[torn oriole]

@exotic spire stole your video

[primal perch]

lmao

@hasty ruin

@grave sparrow

[hasty ruin]

Needs a recovery screen at the end

[torn oriole]

Go ahead

[hasty ruin]

[torn oriole]

Make it happen

Here's the raw gif

[hasty ruin]

I don’t think I’ve used launchpad more than once

Where vid

mf really just autocorrected vid to gif

thanks Tim

[exotic spire]

bruh lmao

[exotic spire]

https://cdn.discordapp.com/attachments/688121419980341282/1170929462859268096/macOS_Sonoma_bugs.mov?ex=655ad40a&is=65485f0a&hm=3f2d08533022bd266a37851bc7d62a3246f5d1e81e48721975df3291ec5cacf6&

[cloud yacht]

Finally the ability to add folders to folders

someone give me a recovery screen I'll add it to the end

[sharp niche]

Well it should but if the tests shows that they forgot to protect it with iBoot verification checks (file hashes, certificate and etc...), Apple basically created an big security hole for those iOS versions but good for jailbreak community

In that case after I verify this case, I suggest that no one will expose how this works and etc... online just to avoid Apple to patch it. Better Apple to think that we don't know about that so that Apple will not take an action soon to that than to take an action based on the fact that we discovered one more mistake by Apple like this.

Just saying, just in case to keep good things to last much longer than usual 👍👌

[sharp niche]

News are: There are still no PoC yet so no critical progress yet but that doesn't mean that Opa334 will not make an progress in the future if an PoC gets created and exposed online - let's wait longer for the first PoC to get released and after that we can hope for an visible public progress to happen soon 👍

[frail cedar]

But they didn't.

[sharp niche]

Did you test it already to be sure?

[frail cedar]

Yes lmao

You think no one would have noticed if Apple wasn't verifying a core part of their chain of trust?

[sharp niche]

yeah because it seems to me that all jailbreak developers just gave up in searching for untethered abilities in newer iOS versions - they mostly stays with finding other types of vulns to make an other types of jailbreaks instead of an untethered

So, why would anyone test the core part of an iOS for an vulns after so many years and without Apple telling them that there is a vuln available there like that

[frail cedar]

because finding said exploit would make you a bunch of money... so why wouldn't you check it?

You can go ahead and try but you aren't finding anything

[sharp niche]

Well in that case maybe it's already found by someone (maybe an another vuln that is powerful enough to bypass those iBoot verification checks for some critical security files in system) and already sold it in secret for so much money rather than solding to someone to make untethered jailbreak

As I said, not everything will Apple provide in public to say "Hey, we have an serious dangerous private vuln in iOS x.x.x version (not for public because of the security reasons) that will make probably also other ios versions vulnerable and make users to be in a very high security risks"

[frail cedar]

CVEs

[sharp niche]

Yeah, CVEs

I'm talking about that

Some CVEs was never mentioned in public for extra security reasons

But as much as they are dangerous they can also provide serious exploit for an untethered jailbreak to be made

[frail cedar]

You have fun with that

[zenith hatch]

lol

[sharp niche]

• We will probably see another untethered jailbreak for newer iOS devices if some hacker who values jailbreaking more than money actually begins to do complete reverse engineering of iOS (basically stealing their source code for many newer iOS versions) and starts deep research for any vulns to make from most vulns an powerful untethered jailbreak for community instead of private solding to someone to patch those vulns for money

[frail cedar]

Ok

[viral osprey]

Source?

[narrow sequoia]

He’s a schizo don’t bother

[hasty ruin]

• We will probably see another untethered jailbreak for newer iOS devices if some hacker who values jailbreaking more than money actually begins to do complete reverse engineering of iOS (basically stealing their source code for many newer iOS versions) and starts deep research for any vulns to make from most vulns an powerful untethered jailbreak for community instead of private solding to someone to patch those vulns for money

[young meteor]

• We will probably see another untethered jailbreak for newer iOS devices if some hacker who values jailbreaking more than money actually begins to do complete reverse engineering of iOS (basically stealing their source code for many newer iOS versions) and starts deep research for any vulns to make from most vulns an powerful untethered jailbreak for community instead of private solding to someone to patch those vulns for money

[steady nest]

I saw the news that Linus Henze was hired by Apple, and I'm not all that unhappy with any of it except for the part that says:
Linus was also responsible for finding a new PPL bypass that could have led to the creation of an A12+ jailbreak for iOS 16.6.1 but due to their new employment, we will likely not see a PoC (proof of concept) for it.
I'm personally pissed off by this. I wonder, how many of you would like to ask Linus to release a CVE-2023-41981 PoC? React with if you would.

[frank fossil]

Imagine if Apple starts training their own AI vulnerability reporter model, iOS will be exploit-free and it’ll just be impossible.

[sharp niche]

Well if Apple just become so sick of people who even after all begins to release untethered jailbreaks for newer ios versions in public, they would probably implement an AI that will stop not only untethered jailbreaks but also every type of jailbreaking

And in that way, jailbreak is completely died forever

[misty cradle]

💀

you're actually 💔

[sharp niche]

yes I am since people begin here to spam one of my messages...

[misty cradle]

no sane person gon give up money for some jailbreak to get approval from some kids

[sharp niche]

I'm not an child, I'm an adult but probably with mental illness since how people reacts on my responses no matter about quality of my writting skills (language knowledge)

[misty cradle]

i was talking in general, not towards you specifically.

[sharp niche]

But I'm not sure that schizo is the right mental issue I actually have... I forgot what I actually have since my last visit to psychiatrist but I'm sure that schizo person mostly kill themselfs so I'm sure that this is not my issue actually.

[sharp niche]

Well, I'm not supprised if you towards those messages to me specifically since this is not my first time when people reacts like this to my messages

Some because of my language knowledge, some because of my questions that is too much for community to handle... but the end is always the same

[misty cradle]

[sharp niche]

But most of them just perm ban me so.... should I be worried that I will be perm banned here too just like others did when I try to talk freely like this?

Or I can just move on and stop with this topic

[misty cradle]

if you hear voices in your head, or any of these:

[sharp niche]

Only 3-4 of those but nothing more

But one of them is because of my polio anyway So I should say at least 3

[misty cradle]

i think you should move on, not many of devs are interested in creating jailbreaks when the community are pieces of shit. We might see one if a vuln gets exploited and published, but besides that don't get your hopes up.

[misty cradle]

it doesn't beg the question buddy, for that you'd need to be one of the best devs

for credits so u can be hired by other companies

[weary heath]

is there a way to make macos ida 7.0 fully dark theme

[frail cedar]

you could probably write a tweak for it

[main apex]

Theres a 7.7 ida pro windows crack thats portable so it works via wine on macos/linux

[weary heath]

do you know what performance is like with it?

i guess for analysing i could do it on a windows pc then send the i64 to mac

[main apex]

No idea probably the same since its just running under wine.

[weary heath]

i'll try it out, thanks

[faint timber]

amazing until you use it on m1

m1 has 16k page size and x86 has always been 4k hence why wine struggles to keep up

[olive peak]

Can i have multiple sexCodes at once?

Different versions

[manic willow]

Yes you can have multiple xcodes

[primal perch]

are you special

[torn oriole]

maybe when you release a product they can put your name to

[blazing warren]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[pearl sail]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[torn oriole]

you need a release of zefram

[primal perch]

fr

it’s the dudes life work yet nobody sees it but him

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[pearl sail]

At this point is a lower ranked dev than tihmstar

[young meteor]

https://media.discordapp.net/attachments/688124600269144162/1169651886123646986/caption.gif?ex=65562e34&is=6543b934&hm=341bcc06de8e6374eda8e37ce14f04f66d3da18fa7043595edf061199ad2427e&

[weary heath]

running it on m1 rn through crossover, it's runs better than i expected, havent analysed a file from scratch but its faster at generating psuedocode for example

the ui feels a bit sluggish but that's ok

[harsh junco]

zefROM: checkm8-based jb bootloop tool

[primal perch]

https://media.discordapp.net/attachments/688124600269144162/1170954116848169081/caption.gif?ex=655aeb00&is=65487600&hm=ab05f444d65c8e730301932be353d62a52f564c34ef64d43c56dd0fc58102290&

[tepid olive]

theyre becoming old gnome

they also used to have funky shit like that

[primal perch]

we don’t tbh

[blazing warren]

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[timid briar]

shut down capt
gif of squidward vaporizing patrick star

[hexed knot]

polio???

[exotic spire]

Unironically this wouldn’t be the worst idea but whatever

[hexed knot]

you should be able to add folders to folders even though its lowkey kinda shitty

you with your 5 thousand porn folders

[cloud yacht]

he just has one folder with 5 thousand porns

[hasty ruin]

[native orbit]

need a forcing 1000 swiftui users to use uikit

[neat hearth]

@minor cargo

[minor cargo]

hi

[neat hearth]

@minor cargo

@minor cargo

@minor cargo

[main apex]

I can share it in this channel for all of r/jb

What?

[hasty ruin]

i think he means

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

thats why we stick with

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[cloud yacht]

I mean what's worse, this is the zefram demo one?

[hasty ruin]

do it

[main apex]

@shut stag Can I post the ida pro crack in here pweas? For the researchers.

[hasty ruin]

aaron

Today at 01:24

yes

better than the recovery screen you see 5 seconds after launching zefram

[main apex]

Need a new response.

[hasty ruin]

https://media.discordapp.net/attachments/688122301975363591/1084316846863421520/zeframdemo.gif

[hasty ruin]

that's from june

[main apex]

Can somebody yell at aaron to respond newly pweas?

[cloud yacht]

Aaron please respond newly

[hasty ruin]

Aaron please respond newly

[cloud yacht]

hows this?

[hasty ruin]

https://cdn.discordapp.com/attachments/688124600269144162/1171260266097422346/image.png?ex=655c0820&is=65499320&hm=f4a4e58bb0f981ba8da69342f4eaf67bfa5acabc4e4f523b25f0c5f00829d740&

[primal perch]

real

easiest press ever

left

[hasty ruin]

fr

[bright island]

what is zeftaam

[hasty ruin]

Zefram is malicious software, commonly referred to as malware, that is specifically designed to hack Apple devices such as iPhones and Macs. This malware has the capability to compromise the security and privacy of Apple users by infiltrating their devices and extracting sensitive information. The purpose of Zefram is to gather sensitive information such as login credentials, financial information, and personal data, which can then be used for malicious purposes such as identity theft and financial fraud. Zefram uses various techniques to spread and infect Apple devices, such as phishing scams and software vulnerabilities. It is highly sophisticated and can evade traditional security measures, making it difficult for Apple users to protect themselves against this threat. To stay protected, Apple users should regularly update their devices and be cautious of suspicious links and emails. Additionally, it is recommended to use robust security software to detect and prevent attacks from Zefram and other similar threats.

👍

:correct:

release it and maybe you'll prove us wrong

[bright island]

I ain’t readin allat gpt blabber

[shut stag]

no piracy

[hasty ruin]

https://tenor.com/view/1984-gif-19260546

[hasty ruin]

https://cdn.discordapp.com/attachments/1169461256386785290/1170485972467720222/togif.gif?ex=65593702&is=6546c202&hm=ef3bab7fa6ddef6edb492f9e5f6409567f7c3b818a9f81373a344edbb4841003&

[shut stag]

no

[hasty ruin]

3 do

[shut stag]

oh

[zenith hatch]

https://cdn.discordapp.com/attachments/1169461256386785290/1170485972467720222/togif.gif?ex=65593702&is=6546c202&hm=ef3bab7fa6ddef6edb492f9e5f6409567f7c3b818a9f81373a344edbb4841003&

[hasty ruin]

get out of #dev, blue name

[zenith hatch]

@shut stag 32 amp breaker

wrong mf

[cloud yacht]

ok but aron can you please respond newly

[hasty ruin]

mods

[primal perch]

real

[primal perch]

i usually just post a random base64 encoded piece of data

that may or may not be decoded to a useful url

[steady nest]

works with clyde too

[gentle grove]

Where tf you using 7 kW on a circuit

If you're 220V

[bright island]

I have 3.7kd on mw2

[pearl sail]

Do me a favor and remove @grave sparrow developer's role until he releases a public stable Zefram

https://tenor.com/view/dew-it-galactic-republic-palpatine-gif-21847982

[primal perch]

damn

[primal perch]

remove mine while ur at it

[pearl sail]

RIP Capt's role getting removed

[cloud yacht]

give the role to me until he release zefram

[torn oriole]

Literally

[sharp niche]

Yes - but really strange thing in all of this is that I wasn't born with this thing, but it started suddenly from the age of 13

Doctors are unpleasantly surprised how this happened and after DNA research and many other tests, the cause is not clear to them at all

But anyway, for now there is no cure for this problem - I can only accept it and live with that as much as I can.

But anyway, this is not an vent channel to talk about our personal problems so let's change the topic

[wicked summit]

gm

[primal perch]

based

[sharp niche]

i'm sorry 😔

[sharp niche]

gm/ga/ge/gn 🥰

[harsh junco]

Use pgp keys and encrypt it

[harsh junco]

g*

[tepid olive]

Has anyone used binary ninja here I might buy it since I have a student discount

[harsh junco]

pirate it
/s

[tepid olive]

ok thankyou

[faint timber]

https://tenor.com/view/these-are-from-your-mom-silicon-valley-yes-sir-gif-12624781

[primal perch]

yeah tbh

other than pirating ida (0$)

way better than hopper and supports all OS to bat

[main apex]

I remember when ghidra was first announced and people had such high hopes then it got released and everybody was like what on earth is this garbage

[pearl sail]

Well they ain't gonna actually release what they use to hack people are they now

[main apex]

@primal perch Pweas accept my friend request :3

[acoustic imp]

can someone help me read a like panic/log file

i recomiled eneko bc i wana chnage somthing, but even if i dont chnage anything (other than the mkae file) it send me to safemode

@radiant idol ?

oh

all i want is so that when music is playing the walpaper is pased and hidden, its like an addition ofr like 8 lines

the code is like already there

sauce?

ok

ah

one sec

[radiant idol]

whats going on

[acoustic imp]

this is all i changed

        if (lockScreenPlayer && ![lockScreenPlayer isMuted] && pfMuteWhenMusicPlays) {
            [lockScreenPlayer setVolume:0];
            [lockScreenPlayerLayer setHidden:YES];
                [lockScreenPlayer pause];
        }

        if (homeScreenPlayer && ![homeScreenPlayer isMuted] && pfMuteWhenMusicPlays) {
            [homeScreenPlayer setVolume:0];
            [lockScreenPlayerLayer setHidden:YES];
                [lockScreenPlayer pause];
        }
    } else {
        if (lockScreenPlayer && ![lockScreenPlayer isMuted] && pfMuteWhenMusicPlays) {
            [lockScreenPlayer setVolume:pfLockScreenVolume];
            [lockScreenPlayer play];
                [lockScreenPlayerLayer setHidden:NO];
        }

        if (homeScreenPlayer && ![homeScreenPlayer isMuted] && pfMuteWhenMusicPlays) {
            [homeScreenPlayer setVolume:pfHomeScreenVolume];
            [lockScreenPlayer play];
                [lockScreenPlayerLayer setHidden:NO];
        }
    }

idk if it will work

any way to stop me from getting kicked from ssh sessions after inactivity?

[tepid olive]

don’t be inactive

[acoustic imp]

Works great thanks

Volume warning

Oke

[hexed knot]

https://superuser.com/questions/699676/how-to-prevent-ssh-from-disconnecting-if-its-been-idle-for-a-while