development

[frail cedar]

iOS 7.1.2 adds stability improvements for iBeacon

[indigo peak]

now it’s crashing without any tweak injected lmaoo

[ashen birch]

yea found out abt it from changelogs

[reef remnant]

Hey guys, did asked a few days ago and never get a response so I’m asking again.

Anyone have problems with Theos on Sonoma 14.1.2?
Tweaks compile without problems and worked fine before too. After they get installed the tweak don’t load (it is installed correctly and includes everything) but it don’t do anything and preferences aren’t showing up too…
Sileo shows that the tweaks are installed…

It’s like installing a tweak without code…

[severe stream]

manually installed or used theos's make install cmd?

[reef remnant]

Already tried both.

[urban moon]

Have you check the oslog whether or not the tweak successfully loaded, and if not, the reason?

[reef remnant]

Not yet. Will try that later.
Its kinda weird tho…

[timid furnace]

what jailbreak are you using

[reef remnant]

My test device uses checkra1n, iPhone 7, ios 14.8

[urban moon]

Usually I got this problem because a linked fw/libraries is not available, thus failed to load. But you'll know once you check the oslog

[reef remnant]

Tested on different devices too…

[timid furnace]

what are you injecting into

[reef remnant]

SpringBoard

[timid furnace]

hm

check your .deb files and make sure the files are in the right places

also make sure that you marked preferenceloader as a dependency so that you can ensure it is installed

same with mobilesubstrate

[reef remnant]

Yeah yesterday I’ve downgraded to Ventura. Working fine again… 😒

Checked .deb… that’s the point. Everything is fine

[timid furnace]

weird

[reef remnant]

Did updated my Mac and MacBook. My Mac have been downgraded to Ventura. Now it’s working on that…
On my MacBook which is on Sonoma 14.1.2… it doesn’t work

[timid furnace]

are the xcode versions the same

might be an xcode issue

[reef remnant]

Yep, latest

[timid furnace]

both are 15? hm

that's genuinely puzzling

does the file structure between the deb built from the Mac and the one built from the MacBook look the same?

[reef remnant]

Yes everything is the same

.deb structure looks normal

In Filza everything is in correct place

No errors or warning if tweaks gets compiled

[timid furnace]

hm

can you send the two debs? i want to compare the binaries

[reef remnant]

Yeah, I’m currently not at home. But as soon as I’m free. I‘ll send it. Thanks 🙂

[steep pulsar]

looking for dev with xcode, appium, and JB experience. need some help finishing an app automation. 1k+ budget

[harsh junco]

1k

[naive kraken]

that was the old bug

you can use a different app cert for the coretrust bug, but it will require a lot of rework in ChOma

this also won't work as both code dirs need the same team id in order for the bypass to work

[granite frigate]

will coretrust signing the .app app binary and the dylib with the app store cert make it work

[sonic totem]

Should do

[native dune]

iBeacons are still used

[sacred orbit]

can anyone help me with this? i re-signed the app i an injecting the dylib into with get-task-allow entitlement. now it says here “systen sandbox blocked mmap()”. is there an entitlement im missing somewhere

[native orbit]

dylib cant be in /var iirc

[sonic totem]

It might be the sandbox rule that prevents execution inside /var? You have to be in /var/containers/Bundle

[sacred orbit]

ohhhh

okay

[sacred orbit]

i think just /var/containers work

[restive ether]

yeah you can’t execute stuff in var

[sacred orbit]

ill try that right now

ty guys

yeah thanks that worked ill try something else now

[sonic totem]

You’re probably right, it’s just that I was looking at sandbox profiles this morning and saw only /var/containers/Bundle, but I probably missed /var/containers.

[reef remnant]

Here…

[reef remnant]

The .zip contains two debs (working and not working). It includes PreferenceBundles (DemoPrefs) which should appear in the settings…

[sonic totem]

Nice!

[granite frigate]

is it possible to add in get-task-allow to the ents of an app store app using the codesign bug?

[sacred orbit]

@sonic totem

[granite frigate]

what I was thinking was to just

1. ldid it
2. codesign it
3. profit???????

I tried doing this by running sign -i -a /path/to/.app/ and the app ended up not being able to run

i couldn't even reinstall it from the app store lmao

[naive kraken]

I mean yeah but it won't launch anymore then

[granite frigate]

yeah

bummer

[sonic totem]

You’d need to decrypt it

And then resign

And then install in TrollStore

[granite frigate]

ahhh but that kind of defeats the point of injecting into the app

alright

[sonic totem]

Yes

Not possible with an existing code signature as team IDs have to match

[indigo peak]

for anyone thats interested, heres how to get the team id of an app from its bundle id programmatically:

NSString *getTeamID(NSString *bundleID) {
    LSApplicationProxy *app = [LSApplicationProxy applicationProxyForIdentifier:bundleID];
    NSString *binaryPath = app.canonicalExecutablePath;

    SecStaticCodeRef staticCodeRef = getStaticCodeRef(binaryPath);
    CFDictionaryRef signingInformation = NULL;
    OSStatus result;

    result = SecCodeCopySigningInformation(staticCodeRef, kSecCSSigningInformation, &signingInformation);
    if (result != errSecSuccess) {
        NSLog(@"ERROR: SecCodeCopySigningInformation failed with error: %d", result);
        return NULL;
    }
    CFStringRef teamID = CFDictionaryGetValue(signingInformation, kSecCodeInfoTeamIdentifier);

    return (__bridge NSString *)teamID;
}

(idk if i'm meant to release any of these variables so go easy on me 😭)

[snow python]

"Hey Siri whats the team id of Google Maps"

[native orbit]

reading blob + teamOffset

[sonic totem]

Yeah that's what we do in ChOma lol

Much easier

[native orbit]

unless you got version 0x20000

[granite frigate]

oh my god im a dumbassssssssssssssssssssssssssssssssssssss

FUCK

complains why task for pid doesn't work
forgot to include task-for-pid-allow

[native orbit]

entitlements moment fr

[vale oxide]

based siri

[minor cargo]

how do i jelbreka my iFone 17pro max ultra HD with a 48mp camera

[cloud yacht]

its imposib

[native orbit]

finally got a hacked up daemon that injects dylibs into apps when they "launch" on TS2 working lol

[acoustic imp]

Kewl

Demo ?

[native orbit]

s0n

[indigo peak]

for any app? or just specific ones as of rn bc fastAppPathSign isn’t updated

[topaz yew]

mfw no springboard

[native orbit]

just ts app ofc

so not useful

[granite frigate]

how do you detect when an app is launched?

https://cdn.discordapp.com/emojis/998222439723061298.webp?size=48&name=monkaS~2&quality=lossless

[topaz yew]

its a secret

[granite frigate]

let him decide

[topaz yew]

i wasnt being serious

[indigo peak]

it’s for ts apps so just hook when you tap the cell lol

[granite frigate]

you can launch ts apps from SB

[native orbit]

i said it in quotes cuz in reality its just a cursed background thread, works good enough for what i need it for tho

[granite frigate]

ooo

https://cdn.discordapp.com/emojis/965945442561044490.webp?size=48&name=hmmge&quality=lossless

[native orbit]

wym

[granite frigate]

like you hook trollstore to launch opainject when you open the app from there

[native orbit]

you just open it like normal and it injects

there is no app either

[granite frigate]

wait how

does it just run ps aux in the background or something

[native orbit]

daemon

"daemon"

[granite frigate]

fr

[native orbit]

more like

bootstrap_* moment fr

[granite frigate]

ooo

[granite frigate]

bootstrap_look_up? do apps have a mach server from their bundleid?

oh cool but if it's not their bundle id how are they named

just their process?

i should go check myself

[topaz yew]

ios

[naive field]

sorry

i need a teacher

I want to learn some hack swift's app(optimized by Xcode) knowledge. Do you have any good suggestions

[primal perch]

@grave sparrow is very smart and loves teaching

[granite frigate]

omw to pester capt about everything

[native orbit]

vouch, capt loves swift

[naive field]

The problem I encountered is that the frida hook swift function cannot print variables of string type. I tried to read this value’s memory address of a variable and concatenate it to recover the string, but this method is too cumbersome. Is there any other method or tool to implement it

on iphone7 15+ rootless

Also, the apps that have been launched through the new version of XCode have all undergone strip optimization. What should I do to restore the method and improve the hack app

[turbid fjord]

I think he is just jealous Apple made something good

Apple = good
Anyone else = bad

[naive field]

[wicked summit]

gm

[naive field]

morning？

It just got dark where I am

[naive field]

waiting........ teachers

[primal perch]

f

[tepid olive]

f

[topaz yew]

are u writing ur frida code in js or with the c bindings

[blazing warren]

g

[tepid olive]

does ghirdra support ios 17 kernel caches

[young meteor]

@dense dock happy birthday big man

[primal perch]

@dense dock happy birthday big man

i r

info regs 💯

print $eax

[faint timber]

wtf im in lldb rn

[native orbit]

lldb the only correct choice

[primal perch]

gdb more widely supported + capt hates it = its better

mostly the latter

[hasty ruin]

i r

[primal perch]

im re

[primal perch]

POV capt

[native orbit]

lldb also by made llvm group, therefore its the best

[primal perch]

capt after using #import in his C project for school and being surprised when he is docked points

[radiant idol]

me when mshookivar crashes for one swift class but not another for some reason

[native orbit]

better then windows

[radiant idol]

i dont get it

why is it broken

ok but like

why is it working for one class's ivar

but not another

[native orbit]

swift moment, it does undefined shit sometimes

[radiant idol]

smh

I get the ivar name here though - that works

so goofy

[minor cargo]

there is a problem

it should not be that laggy

atleast arch shouldn’t

(i use arch)

(btw)

[hasty ruin]

🤓

[blazing warren]

🤓

[zenith compass]

🤓

[naive field]

gm

[naive field]

in js

[naive field]

do any teachers know how to use debugserver+lldb to debug on rootless devices

Or is there any way to dynamically debug the app on iOS 15+rootless devices（need codesign on ios 15++,can't use ldid testing.. , ok ）

[timid furnace]

@sonic totem if you put a bundle under plugins iOS will mark its main binary as exec

but installd verifies it

and validation of the main binary fails when i fastPathSign the plugin binary???

[visual meadow]

Huh that wasn’t the case for me afaik

Pretty sure mine failed

I was using .appex

[timid furnace]

actually no i think something just broke

[timid furnace]

i didn't say validation succeeded

[visual meadow]

I know

I meant pretty sure mine failed on plugins

[timid furnace]

are you saying the plugins are not marked as exec then

or what

ok

[visual meadow]

Idk about that part

It probably needs an info plist tho for it to be marked. Besides even if u do get it to install doesn’t pkd have signature validation too, and I don’t think you can sidestep it like springboard can

And if it’s marked as exec what u gonna exec it with lol (if pkd has code sig validation)

[topaz yew]

idk then

[naive field]

can you use frida to hook the swift function and print string type parameters

[topaz yew]

idk

probably

[steady nest]

what

appex are verified

[naive field]

[timid furnace]

they are validated by installd yea

i was hoping that maybe they ran some checks only for the main bundle binary instead of for plugins as well

but my signing script has completely imploded so uh

[hasty ruin]

you're good at doing that

[steady nest]

try watchOS

16's and 17's installd is really really hardened lol

[tepid olive]

does ghirdra support ios 17 kernel caches

[timid furnace]

pro tip: it would help if you didn't end up installing the original unsigned binary

but yea you still run in to the same installd checks issues that you get with the normal executable

[timid furnace]

a watchOS plugin?

[frail spade]

does anyone know why the app switcher doesnt change at all when I delete /var/mobile/Library/FrontBoard/applicationState.db and reboot

[frail cedar]

backups probably

[frail spade]

file size went from 1.5mb -> 782kb

[indigo peak]

@grave sparrow can i MSHookFunction in a trollstore app, or does that also break codesig

[timid furnace]

what are you hooking

[indigo peak]

swift function in getting by MSGindSymbol

[timid furnace]

yea but where is it

is it in the app itself, is it in a library the app uses, etc

[sonic totem]

Yeah if it passes validation and is inside a .appex bundle

If it’s not ‘indexed’ as a CFBundleExecutable in an Info.plist file it will be non-executable

[timid furnace]

i see

[naive field]

i use debugserver +lldb to set a breakpoint on appdelegate with ios15+,but it not break on . Is this an issue with iOS15+or is it a problem with my debugserver or this app being optimized by Xcode？

[sonic totem]

This is just from my experiences when testing whether I could sneak an executable in

But afaik every file is either set to non-executable or has its code signature checked and is then made executable

[stiff raft]

“LinkedIn” requires iOS 15, with that message disabling the user interface. Is there a tweak to bypass this. I got XS Max iOS 14.4.2?

[naive field]

find the popView and hook to directly return

[stiff raft]

With making tweak ?

Or using Flexing

[naive field]

If this view is deleted ，but other data is associated with the iOS version number, it will result in many functions not being used, so it's better to upgrade directly

find where show this view's methed ， use the flex can't do it,

Alternatively, you can try to locate the app version value and modify it to the latest version number of the app, testing if the popView disappears. I'm not sure if Flex can do this

[naive field]

[serene hawk]

you could try using 3DAppVersionSpoofer

[wind ravine]

why are userdefaults stored in the jailbreak directory when jailbroken?

[grave orchid]

how to i start to look for kernel vulnerabilities

[ashen birch]

jb ur phone and install kernelvulnfinder in sileo/zebra

[naive field]

is a good idea

[naive field]

u could try it to test

[grave orchid]

hmm, so all of the vulnerabilities will be listed?

[ashen birch]

yes

it reverses the kernel and does general analysis with AI to find vulns

[vivid dew]

true

[grave orchid]

pac bypass

[hasty ruin]

ok eluctrabruhus

[wind ravine]

i mean for trollstore apps

and that makes sense why it worked on palera1n

[minor cargo]

is there a guide so you can make tweaks?

i have a mac and xcode installed

[hasty ruin]

anything that isn’t a system plist will be redirected to /var/jb

[wind ravine]

thats annoying

[wind ravine]

how do i set the userdefault location in swift?

objective c expects it to be in a specific location

[minor cargo]

where can i find rootless bootstrap code?

[ashen birch]

bro do rootless jailbreaks even make a rootfs snapshot

shouldn’t be necessary if it’s never being touched right

[naive kraken]

of course not wtf

[ashen birch]

ok i thought so just checking lol

[primal perch]

@hasty ruin

[hasty ruin]

@primal perch

[minor cargo]

why would you need to???

just delete “/“

and boom

[pearl sail]

@grave sparrow

[naive field]

@grave sparrow

happy birthday big man

good night everyone

[pearl sail]

@grave sparrow

[tepid olive]

real footage caught on camera from former president Donald J trump

[primal perch]

TRUMP

[pearl sail]

@grave sparrow

[wind ravine]

how do u get the color of the status bar in objc?

and how can u detect when that is changed without directly hooking onto the function?

[primal perch]

most likely a notification is posted by springboard at some point with some name

[tepid olive]

@naive kraken i was recently banned in the hack different server sorry if my video offended you, but can i be unbanned?

[primal perch]

fr

[tepid olive]

[primal perch]

all of the ios geniuses are there but most of the ios tryhard idiots are too

and the ratio is like 1:10

[twilit jungle]

true

[tepid olive]

@wind ravine do you have a invite link for the cowabunga server ?

Discord.gg /cowabunga is invalid

[wind ravine]

heck i lost all my boosts

[tepid olive]

Can I dm you

[grave orchid]

is there a way to open ipa files in xcode

[faint timber]

command + shift + 2

[grave orchid]

to open the file?

[naive kraken]

do I know you?

[frank fossil]

It gets weird. daemon() uses fork() made libsystem_c page read only

[naive kraken]

that only happens when you do hooks in some library

(which you need to do for forkfix to work properly, I guess)

[acoustic imp]

@hasty ruin can u fix ?

(Mb for any pirate stuff)

[hasty ruin]

What is that app

[acoustic imp]

tweaksettins

[hasty ruin]

[[tweaksettings]]

[faint lion]

TweakSettings

Dedicated settings app for tweaks

Author

CreatureSurvive

Version

1.0.8

Price

Free

Repo

CreatureCoding

Bundle ID

com.creaturecoding.tweaksettings

Powered by Canister · Dec 9, 2023, 2:35 PM

[hasty ruin]

will take a look

[acoustic imp]

ok thanks

@radiant idol how does bolderreborn respiring in prefs work, bc it works in tweak settings app

just a respring

i think

bc some work and some dont

[radiant idol]

Idk look yourself

https://github.com/NightwindDev/BoldersReborn/blob/5a537096a4f5939ce39de16e259701b574b3315e/BoldersRebornPrefs/BoldersRebornListControllers.mm#L13

why’s that

[acoustic imp]

Oh I thought it was closed source

[radiant idol]

works fine and has been working fine for me

[radiant idol]

My free tweaks are OS

[acoustic imp]

If u lika added that, could I just put ‘respring()’ anywhere and it would work ? Like in js or do you have to do the thing for methods w brackets

[radiant idol]

Yes

Like respring();

It would work anywhere in the file

why

genuinely curious

mk

i use killall for Xina v1 since sbreload kinda broken there

fair fair but does it really matter in the end

lol ok

oh no yeah I get that

I’m just saying it kinda works fine even if your killall

Though I do not like killall backboardd

that just doesn’t sit right with me

[topaz yew]

malfunction ware

[radiant idol]

Swift sucks

It doesn’t even properly bridge to objc

Why do some ivar hooks work while others don’t

Is it even possible to hook those

The object inherits from NSObject though, that’s the amusing part… it should work

The hell???

WHY

if it had a proper backend I would not hate it

But it’s even more hacky than objc

yes

so true

i love it

Just wish block syntax was better

Yes

Ye

Fr

I agree

Objc rules

While you’re here by the way, how do you add a load_command to a MachO? I have been stuck at this for a couple of days now. This is what I used as a reference, but even after trying to convert this piece of code to C I can’t understand what exactly it’s doing. Can you explain

https://alexomara.com/blog/adding-a-segment-to-an-existing-macos-mach-o-binary/ -> appendsection.py

uh oh

Capt is on his rant

Swift hate

did you?

i don’t remember you explaining that

yes but how
the Python code just does this, I can’t seem to understand how to manually do it:

# Update header and insert the segment.
header.header.ncmds += 1
header.header.sizeofcmds += lc.cmdsize

header.commands.insert(linkedit_i, (lc, seg, [sect]))

# Write the new header.
header.write(fo)

[hasty ruin]

Last one bc funnier

[radiant idol]

Yeah fair

[lime pivot]

that was necessary on iOS 6 because of a bug where killing SpringBoard would reset your brightness to 0%

[radiant idol]

In short from what I understand you need to make a new instance of an lc struct and then memcpy it to the mmap

maybe I don’t get it at all but yeah

[radiant idol]

I see

[lime pivot]

even then, there were brightness fix tweaks that were definitely a better approach anyway

[radiant idol]

Yes yes I saw

[hasty ruin]

no self promo

[lime pivot]

exactly how apple likes it though, so they'll never change it, unfortunately

[lime pivot]

[radiant idol]

:(

Oh ok

Didn’t think it was that simple

Lol

[lime pivot]

I think they realised objc's best feature (dynamic dispatch) is also the most annoying for them, because it creates a massive ecosystem of tweaks on both iOS and macOS

like, it's too easy

[hasty ruin]

🙏

[radiant idol]

I love the objc runtime

[radiant idol]

Lol

[lime pivot]

that actually is a great explanation

[brazen timber]

average rust user

[acoustic imp]

wait i have this all the time on ios 15, sm times it just sets my brighness to 0% after a respring. is this bad?

well

i think its an autobirghnet bug

bc it only happends when its dark, but i have auto birghness disabled tho

[minor cargo]

i just programmed a cat

[radiant idol]

is its code efficient

[minor cargo]

yes it runs very fast

[radiant idol]

nice

[harsh junco]

cross-platform?

[grave orchid]

is it running on C(at)++?

[hasty ruin]

A14 experience

[acoustic imp]

this how i make a tweak need another to be installed for it to install right?

[hasty ruin]

yes

[acoustic imp]

oh

[harsh junco]

One day i will buy rune

[hasty ruin]

today

[harsh junco]

no

[timid briar]

Rune developer I curse u with a14 device

[harsh junco]

[acoustic imp]

when eta more rune panels

[hasty ruin]

A13 supremacy

[grave orchid]

make this more expensive please

[hasty ruin]

omw

[harsh junco]

5$

[radiant idol]

make sure it matches up completely

[acoustic imp]

all it does is chnaged the time/date

[radiant idol]

so true

[acoustic imp]

ik

[grave orchid]

i have to ammit, better than aim

[acoustic imp]

nexus >>>>>>>>>>>>>>>>>>>>>>>>>> aim

freak aim

[radiant idol]

lol

[acoustic imp]

💪

Now to make them actually do sm

[radiant idol]

hey you actually seem to be progressing in your dev journey

nice

[acoustic imp]

thx, im jus looking at ur tweak pref tutorial and the zane video

but still need to learn objc

[radiant idol]

for what its worth

I learnt as I went

[acoustic imp]

👍

are there any like simple ish tweaks i could like look at to learn things

or like apps?

open source ofc

[radiant idol]

uh

lemme see

[hasty ruin]

I have a few on my gh

maybe check out quicksearch

[radiant idol]

mine are also pretty simple

I guess

[acoustic imp]

k il take a look

any you know of with like making new views ig

and maybe like styling them?

[radiant idol]

Bolders Reborn and SearchDots both make new views

[hasty ruin]

quicksearch makes a new window

[acoustic imp]

@radiant idol is searchdots supose to suport ipad?

[radiant idol]

I guess?

it somewhat works

[acoustic imp]

@radiant idol how long did it tke you to make search dots

[radiant idol]

like a couple days I guess

[acoustic imp]

also question about like positioning, is it like position: absolute in CSS but like absolute from the items around it?

[acoustic imp]

what about prefs, or do you just like copy paste most

[radiant idol]

it is relative to its superview

[radiant idol]

most of it yes, from Bolders Reborn

[hasty ruin]

If you write prefs from scratch, you’re psychotic

[acoustic imp]

how do i not write them from scract? can i make like my own template, like the theos pin pl thing like i coudl make my own prefs thing?

[native dune]

copy and paste from another tweak then modify

[granite frigate]

is it worth learning tweak development now when jailbreak is like half dead

😭

i was interested in doing it when jailbreak was not so dead but now i don't even use one

[radiant idol]

I mean its always interesting to learn more about how iOS works

[hasty ruin]

good if you wanna learn iOS dev in general

[granite frigate]

i thought swift was the new thing now so idk

[acoustic imp]

ios is like a never ending cave of cool odd weird things

and knowing objc looks good on a resume

[granite frigate]

alr

[acoustic imp]

as well as having a few tweaks/apps on ur gothub

[primal perch]

https://tenor.com/view/android-apple-wipe-gif-8915661

[hasty ruin]

object oriented programming

[indigo peak]

I always start from scratch

[hasty ruin]

and you’ve finished two tweaks in like 3 years

[wicked summit]

Swift is pretty standard and well-adopted at this point

Your resume is better with swift and objective C and C and C++

[hasty ruin]

sadly the best thing for a resume is fucking JavaScript

[acoustic imp]

can somone tell me if this gona work https://github.com/TeslaMan3092/musicBGblur

it will not

[granite frigate]

yeah

i was initially interested in web dev

then i got into jailbreaking and was wondering if it was worth it

i mean it is fun so i'll do it regardless of worth

[acoustic imp]

litterally me

@radiant idol IT WOKRS !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

PREFS AND ALL!!!!!!!!!!!!!!!!!!

[radiant idol]

niceeee

[wicked summit]

💀

I will never learn frontend web development

[indigo peak]

yeah bc I’m not creative and don’t know what to make

[acoustic imp]

ITS AMAZING

(watch the one w the song pipe down first)

[wicked summit]

Make a dock transparency tweak 👍

[radiant idol]

v c a m

[acoustic imp]

one word r/twekbounty

[indigo peak]

%hook SBDOCKView
-(void)setAlpha:(float)arg1 { %orig(0.0); }
%end

smth like thag

[acoustic imp]

Which one looks better ?

(The blur)

[indigo peak]

they all look the same to me LOL

[indigo peak]

ugh fine

I’ll look later

smh

[acoustic imp]

@hasty ruin next nexus update can you make the like thing you hold down on to open nexus settings the time/date instead of the entire lock screen bc it break live wallpapers and its annoying when flex fails to open and nexus opens when u don't want it to

[hasty ruin]

Only issue with that is in case you manage to make the text go off screen

You won’t be able to open it

[minor cargo]

i love swift

[acoustic imp]

coudl you make it so that the size stay the same but it just stays on screen... like it gets the xy or the date/time and if it (make it go off the screen) just go/move it a much as it can till ti would be off the screen?

like establish the "view port"/screen size. then for the y-top just make it like a minimum of 0 same for x make the minimum 0. then for the maxes just make it like the viepot minus the size

[acoustic imp]

instead you could just make an option to have a like "activate area" that you could chnage the x/y to be in the viewable range

[topaz yew]

stack pointer

[timid furnace]

@hasty ruin send me zsign args when you have time because no matter what i do i can't sign anything

codesign always complains about invalid code sig

i've even tried some random unc0ver version and an app store app

[shrewd smelt]

cgnb

capt gets no bitches

you're a ret

[native orbit]

nah ur a FJCVTZS

need a joe instruction tbh

[minor cargo]

no

no new instructions

[radiant idol]

instructions are banned

[wicked summit]

cmpnlesd gotta be my favorite x86 instruction

[turbid fjord]

What about rjb

Sounds like a good instruction

An instruction that ban gir from entering #development so we can spam slurs

We should add Aaron to that list too so be can’t veto

[primal perch]

capt is gay

[viral osprey]

[lime pivot]

how did you do that

[lime pivot]

interesting, don’t know about that

[acoustic imp]

icraze its a A14 skillissue or sm

[indigo peak]

if i have an app from the appstore that i didnt develop thats crashing bc:

*** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '*** -[__NSPlaceholderDictionary initWithObjects:forKeys:count:]: attempt to insert nil object from objects[1]'
*** First throw call stack:

can i fix this w a tweak or smth

[primal perch]

yea

[indigo peak]

ok go on

[primal perch]

hook the function thats crashing and write it so it doesnt crash

[indigo peak]

how do i know exactly what function its crashing on

[primal perch]

the line after the picture you sent

backtrace

that tells you exactly what functions led up to that point

[indigo peak]

i got that from consoel log

[primal perch]

counsel

[indigo peak]

@primal perch

Last Exception Backtrace:
0   CoreFoundation                           0x180f07c80 __exceptionPreprocess + 216
1   libobjc.A.dylib                          0x19872dee4 objc_exception_throw + 56
2   CoreFoundation                           0x1810026b4 -[__NSCFString characterAtIndex:].cold.1 + 0
3   CoreFoundation                           0x18100c84c -[__NSPlaceholderDictionary initWithCapacity:].cold.1 + 0
4   CoreFoundation                           0x180ec72a8 -[__NSPlaceholderDictionary initWithObjects:forKeys:count:] + 252
5   CoreFoundation                           0x180ee4904 +[NSDictionary dictionaryWithObjects:forKeys:count:] + 56
6   SFMCSDK                                  0x103ff47e0 +[SFMCKeychainItemWrapper updateKeychainAccessibleAttribute] + 824
7   SFMCSDK                                  0x103ff4490 +[SFMCKeychainItemWrapper setAccessibleAttribute:] + 136
8   Boost                                    0x102c183e4 0x102bb0000 + 426980
9   Boost                                    0x102d8718c 0x102bb0000 + 1929612
10  Boost                                    0x102ced90c 0x102bb0000 + 1300748
11  libdispatch.dylib                        0x180bc7094 _dispatch_call_block_and_release + 24
12  libdispatch.dylib                        0x180bc8094 _dispatch_client_callout + 16
13  libdispatch.dylib                        0x180b74d44 _dispatch_main_queue_drain + 928
14  libdispatch.dylib                        0x180b74994 _dispatch_main_queue_callback_4CF$VARIANT$mp + 36
15  CoreFoundation                           0x180ec3034 __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__ + 12
16  CoreFoundation                           0x180e80538 __CFRunLoopRun + 2544
17  CoreFoundation                           0x180e93194 CFRunLoopRunSpecific + 572

[indigo peak]

%hook NSDictionary

+ (instancetype)dictionaryWithObjects:(id*)objects forKeys:(id*)keys count:(unsigned long long)cnt {
    id  _Nonnull __unsafe_unretained newObjects[cnt];
    id  _Nonnull __unsafe_unretained newkeys[cnt];

    for (int i = 0; i < cnt; i++) {
        if (keys[i] && objects[i]) {
            newObjects[i] = objects[i];
            newkeys[i] = keys[i];
        } else {
            NSLog(@"key or value is nil");
            return [self dictionaryWithObjects:newObjects forKeys:newkeys count:i];
        }
    }
    
    return %orig;
}

%end

all good

no more crash

[radiant idol]

the fact that you couldn't type out two more letters for the word "count" makes me quite annoyed

[indigo peak]

https://developer.apple.com/documentation/foundation/nsdictionary/1574184-dictionarywithobjects

[radiant idol]

apple

WHY

they literally spelt it out correctly after lmao

[wooden yarrow]

bx lr

[faint timber]

armv7 goated

[naive field]

👀

[lime pivot]

c⬛nt

[vivid dew]

vowels are bloat

[sonic totem]

Does iOS 15.x support iOS 14.x for devices which didn’t get iOS 16?

I feel like there was some SEP/BB compatibility chart somewhere?

[harsh junco]

se 1 and 6?

!t sepbb

[faint lion]

sepbb

Currently you can restore to the following versions with the latest SEP, baseband, and U1 (if on A13 or newer non-SE iPhone's) for your device: (someone correct this its still worded like the old tag is still here)

For restores on devices that support iOS 15 and Wi-Fi only iPads, you currently must use the latest beta version of FutureRestore, see /tag futurerestore for a link.

Added by Tanbeer#4750 | Used 1,725 times · Jul 17, 2021, 2:35 PM

[sonic totem]

iPhone 7

Ah that’s the one

Thanks!

[acoustic imp]

@wind ravine

Buggos

(Also crashes w tweak injection off)

Also it jus doesn’t work at all 15.1.1

Ope nvm it jus randomly appeared

[topaz yew]

are dyld closures still around

yes?

[sonic totem]

Yes

[wind ravine]

its a swiftui bug

[hasty ruin]

🔥🔥🔥🔥🔥

[acoustic imp]

could some one turn this into a tweak, mainly just the clipboard share functionality? https://invent.kde.org/network/kdeconnect-ios

maybe you could use kayko to like to do cliboard getting on ios

https://github.com/vyolit/Kayoko

@indigo peak ^ ?

u said u need like tweak ideas

[harsh junco]

https://github.com/1Conan/cumsync

[acoustic imp]

deos this work w ios 15+?

[harsh junco]

you could try

[acoustic imp]

doesnt work

[harsh junco]

change this https://github.com/1Conan/cumsync/blob/5f9f27416ab959ded5b9f11aa336dedff38f8e8d/layout/Library/LaunchDaemons/com.1conan.cumsync.plist#L9C13-L9C13

[acoustic imp]

i cant recompile it

wait im dumb

[harsh junco]

armv6

[acoustic imp]

eh im jus using alr comiled deb

?

[drifting heron]

huh

whats the difference between this and copylog?

there's also https://github.com/Greg0109/BoardyServer btw

[harsh junco]

proprietary

[harsh junco]

load launchdeamon?

[restive ether]

you didn’t sign it

i hope you like the name, i named it

[hexed knot]

What else have u named

Cumsync joe

[restive ether]

conan made it because this one is insecure or something, or he was charging money for it? i can’t remember

perhaps it was both

[restive ether]

BruhKeys!

[hexed knot]

Lawd

[radiant idol]

I'm back with more Mach-O questions :P

So my progress so far:

• I did copy string table into an NSMutableArray from the __TEXT.__cstring section
• I did put /var/jb in front of strings that need it
• I did add new segment/section pair (__PATCH_ROOTLESS.__cstring) at the end of the Mach-O

So far there have been decent resources on the things that I have done. However, now I need to get the xreferences of the strings in __TEXT.__cstring, then somehow "rebase" them to the new ones in __PATCH_ROOTLESS.__cstring. Note: I copied the entirety of the strings into __PATCH_ROOTLESS.__cstring, only modifying the ones that needed to be modified, and then put them in the new section. Is that the correct approach, or should I only copy the ones that need to be patched?

In addition, I have a couple other questions:

• Will __DATA_CONST.__cfstring need to be updated as well, since those point to the various strings in __TEXT.__cstring from what I understand.
• Global const variables go into the symbol table, if I remember correctly, no? If so, those should be patched appropriately as well. How can that be done?

For reference, here is __TEXT.__cstring:

And here is __PATCH_ROOTLESS.__cstring:

[median island]

So im new with developing for ios and I would like to create an app for trollstore aka an unsandboxed app. Is it possible to get the device to reboot/shutdown without manually pressing the buttons so only with code? Couldnt find a lot on the internet but someone said it may be possible to force a reboot by crashing ios, but maybe there is a better and safer way

[radiant idol]

To shutdown:

[[NSClassFromString(@"FBSystemService") sharedInstance] shutdownWithOptions:nil];

To reboot:

[[NSClassFromString(@"FBSystemService") sharedInstance] shutdownAndReboot:YES];

Not sure if it will work while not jailbroken, but worth a try

[median island]

alr, I will try thx

[drifting heron]

oh

didnt know that

[harsh junco]

shutdownWithOptions:nil
Options?

[radiant idol]

Not sure why there are options

[minor cargo]

i believe that’ll work if unsandboxed

[median island]

is there any way to debug directly on my testing phone or unsandbox the ios simulator?

[radiant idol]

Don't think there's a way to do it via the Simulator, but you could just add that in your app and then sideload via TrollStore I guess

[median island]

yeah I added it and sideloaded it via Trollstore but just nothing happens and im not sure why

thats why it would be great to have a way of debugging

[radiant idol]

Ah yeah fair

Not sure how else to shutdown/restart though

[median island]

hm

I know that killall(@"SpringBoard"); is working fine, so maybe some way to kill an important process so it reboots?

[native dune]

Launchd

Is that a great idea? Probably not

[median island]

I think ios is preventing killing that as it just crashes the app

[native dune]

Probably

I know you at least need to be root

[median island]

well thats gonna be hard to get with just trollstore and no jb

[native dune]

It shouldn’t be

You can spawn stuff as root

Trollstore does it

[median island]

hmm

but as u already said it wouldnt be a good idea to actually do this

[median island]

would it be possible then to execute sudo commands via filza console?

[native orbit]

iirc filza trollstore runs everything as root in its terminal lol

[median island]

oh xD

oh yeah seeing it now

[cloud yacht]

I'm not sure how reboots work, but I do know the settings app can trigger them

Iirc if you install a beta profile, it triggers a reboot

[median island]

yeah thats what I already said, system apps like settings should and are able to reboot

just no idea how

assistive touch is also able to reboot without any external button presses

[median island]

now best would be to find out how assistive touch is reboot I think

[paper meteor]

How can I compile a bash binary for use on a M2 iPad with 16.3.1

As in what compiler should I use

[sonic totem]

The Xcode compiler

For the iPhone SDK

[paper meteor]

How can I use the Xcode compiler outside of the Xcode ide

Is there a guide or anything

[sonic totem]

xcrun -sdk iphoneos clang -arch arm64 -o output_binary input_file.c

[faint stag]

i mean, you'd just use clang regardless

xcrun just finds and runs executables within the current developer directory (set with xcode-select) or an environment variable

the actual xcode compiler is xcodebuild (which requires an xcode project)

[minor cargo]

clang is crazy

[wind ravine]

how would i optimize 3 parallel arrays in obj c?

i need a few different datatypes tho

i can show my code

this is initializing them, it doesnt need to be mutable after initialization so this is one thing i already know how to optimize
https://github.com/leminlimez/Helium/blob/6a7b4b5be5307bc921a81a4f646d98fbbd28c59a/src/hud/HUDMainApplication.mm#L948

i need to store the blur object, uilabel, and one of the dictionaries inside of the properties

this segment is what needs the most optimization and is what im most worried about
https://github.com/leminlimez/Helium/blob/6a7b4b5be5307bc921a81a4f646d98fbbd28c59a/src/hud/HUDMainApplication.mm#L822

im learning objc so code may be bad

[timid furnace]

ok so one thing that jumps out to me right off the bat

// TODO: THIS NEEDS OPTIMIZATION (is updated frequently)
NSArray *widgetProps = [self widgetProperties];
for (int i = 0; i < [widgetProps count]; i++) {
    if (![_labelViews objectAtIndex:i] || ![widgetProps objectAtIndex:i])
        break;
    UILabel *labelView = [_labelViews objectAtIndex:i];
    NSDictionary *properties = [widgetProps objectAtIndex:i];
    NSArray *identifiers = [properties objectForKey: @"widgetIDs"] ? [properties objectForKey: @"widgetIDs"] : @[];
    [self updateLabel: labelView identifiers: identifiers];
}

so you have this code

if the object isn't in labelView or if the object isn't in widgetProps, you break out of the loop

[wind ravine]

yea ik

[timid furnace]

however, if it is in both, you're then grabbing the value of it again

[wind ravine]

but they are created in parallel

my fix was if both are null then continue

didnt push that tho

[timid furnace]

so what you can do is move UILabel *labelView and NSDictionary *properties above your break condition, and then change the break condition to the variables. that way you're not checking for it twice

besides that this looks fine though, how often is this updated?

and how big are the two arrays?

[wind ravine]

often

[wind ravine]

it depends on how much the user creates

my guess is for the average user its probably a size of 3

[timid furnace]

oh

yea there's nothing you can do that will have a tangible benefit

[wind ravine]

it updates every second by default tho

[timid furnace]

still. even assuming 50 items, it's going to be pretty fast

[wind ravine]

but battery impact?

alright

should it be changed to a regular nsarray or is keeping it mutable fine?

[timid furnace]

you'd have to be checking more items at a way higher rate of refresh in order for it to matter honestly

[timid furnace]

iirc they're the same internally

actually?

huh

i swear i've gotten a mutable array from NSArray before

but idk

[radiant idol]

[array mutableCopy]

[wind ravine]

i only need to edit it on init

so i dont need it to be mutable

i am modifying what the pointer is pointing to tho

[timid furnace]

no i mean initialized an NSArray and got a mutable one, but idk, probably misremembering

[radiant idol]

oh

weird

[timid furnace]

Is that the correct approach, or should I only copy the ones that need to be patched?
idk up to you

Will __DATA_CONST.__cfstring need to be updated as well, since those point to the various strings in __TEXT.__cstring from what I understand.
yes (have fun with pac)
(and objc abi)

[radiant idol]

oh no

pac

[timid furnace]

Global const variables go into the symbol table, if I remember correctly, no? If so, those should be patched appropriately as well. How can that be done?
wat? what are you referring to

[wind ravine]

and should i be doing all those ternaries?

[radiant idol]

const char *const kPreferencesPath = "…" would get saved as a symbol iirc in the symbol table

[wind ravine]

also my code just stops updating after a while idk why tho

it happens with my old code too, so its not the array problem

[timid furnace]

i mean i only saw two. if you really cared you could change it to

blah = blah
if (!blah) blah = default

but idk

[wind ravine]

idk i feel like im not doing something right with the arrays

especially with having them in parallel

[timid furnace]

symbol table > value in __DATA,__data (variable is not const) or __DATA_CONST,__const (variable is const) > string in __TEXT,__cstring

[radiant idol]

so many things to keep track of

lol

[radiant idol]

ok well thanks for all of this. do you happen to know any resources/open source projects that do string rebasing in general? I'd prefer something related to Mach-O but having any sort of base would be nice

[timid furnace]

nothing off the top of my head

[radiant idol]

rip

[paper meteor]

How can I hack it into the makefile for bash

So I can compile bash for iOS

I am using terminal and it needs a shell

[faint stag]

probably better to just compile bash from procursus

[paper meteor]

I have an iPad with trollstore2

So I can’t use the traditional jailbreak tools

[faint stag]

no i mean

procursus is the name of a bootstrap yes
but the tools have to be built

https://github.com/ProcursusTeam/Procursus

but since it's also m2 on 16.3.1 you'd have to workaround being unable to fork()
and there's still libiosexec i think

this isn't fun y'know

at some point you'd still need some kind of bootstrap with the proper prefix unless you static link

[granite frigate]

didn't @frank fossil make a forkfix for TS? im not sure if it works on m2

[frank fossil]

the fix is very hacky, but should work everywhere

[native orbit]

can also the do the dylib method

[paper meteor]

am I just wasting time?

I have ubuntu on utm hv and performance is good, but I thought it would be fun to try and get things working on ios

[primal perch]

@restive ether

cam joint

[gentle grove]

https://tenor.com/view/let-me-be-clear-uhhh-meme-gif-25693361

[granite frigate]

so apparently skip-library-validation is unbanned on 16 and 17(?)
does this mean that signing dylibs with it makes it such that team ID doesn't need to be the same?

[sonic totem]

The team ID still needs to be the same afaik

Just doesn’t need to actually have a signature

But this doesn’t change much

[granite frigate]

huh ok

thanks for the clarification

i just read what it does on macOS so i assumed it'd be the same on iOS

[sonic totem]

No afaik the team ID still applies

Idk why they removed the trustcache requirement but if they did it might be because a removable system app now has the entitlement?

And this check prevents you from just replacing a framework of an Apple system app with an arbitrary one

[granite frigate]

ooo i wonder which lol

[naive field]

[naive field]

after the release of the VR operating system, is there any big brother preparing to develop visionOsapp

[sonic totem]

@granite frigate apparently skip-library-validation literally does nothing

Like it still validates libraries anyway

[granite frigate]

[topaz yew]

what a shame

[indigo peak]

yeah basically

[faint stag]

seo on top

they do have a robots.txt but it only disallows the top level

[quartz tangle]

I'm trying to patch an app but whenever I sideload it, I seem to crash when it tries to call NSFileManager::containerURLForSecurityApplicationGroupIdentifier: with it's groupid. Any idea why that would be happening?

I suppose I should specify that it's likely not that call actually crashing, but instead it's likely using the result of null and assuming it's successful which is erroring elsewhere

[drifting heron]

you might be interested in this script if you dislike that Google Search Navbar design https://greasyfork.org/en/scripts/470048-google-search-classic-navbar

👍

[fiery sedge]

or just run whoogle

[indigo peak]

i think i am a ------

will do

[faint stag]

the image lmao

[indigo peak]

like what i sent?

ok well it doesnt lmao

bet

no its mine

[blazing warren]

https://x.com/R00tkitSMM/status/1734282463541645314?s=20

https://media.discordapp.net/attachments/688124600269144162/1169708354273296424/caption.gif?ex=655662cb&is=6543edcb&hm=e28afc8f6575027decf6ff93755af47d1ff2dec061fead69630c4cc6aef78003&

[indigo peak]

optool

https://github.com/alexzielenski/optool

[misty cradle]

shutup bozo.

[shrewd smelt]

word

[indigo peak]

how am i gonna remove the original load command from /Library/Framworks

[timid furnace]

Wtf is LC_LOAD_UPWARD_DYLIB lmao

[crisp frost]

why is it not giffing

[indigo peak]

@grave sparrow now it works

[radiant idol]

whatcha doin?

[indigo peak]

gamepigeon hacks on trollstore

[radiant idol]

lol nice

[indigo peak]

./script hacks.dylib com.gamerdelights.gamepigeon.ipa

[radiant idol]

ah yes our beloved sh scripts

[topaz yew]

Zefram Malware

[visual meadow]

is this latest game pigeon

also does this have settings in game pigeons too

[indigo peak]

yes

[indigo peak]

tweak settings, no

[paper meteor]

How can I compile or install procursus on a TrollStore device to use with a terminal

I was thinking of somehow compiling it and then dropping it into /var/procursus and then pointing my terminal app to a bash binary from procursus

[acoustic imp]

@indigo peak how do the hacks works? do u have a GP ipa that has teh dyld init then u install that? or ru u install GP form ap store and magically injecting it?

[native dune]

@acoustic imp should answer your question

[acoustic imp]

ah

[paper meteor]

https://gist.github.com/khanhduytran0/675bba3db59bb7fac3ceaa49f2ef24e1

[indigo peak]

I did find a way to magically inject it tho 🤭🤭

[restive ether]

@marble perch procursus ballin

[acoustic imp]

wait so can u inject into mesages app?

[paper meteor]

Can’t get bash to run, something about a library used not being in the dyld cache

[native orbit]

dylib cant be in that path

[sonic totem]

You cannot execute binaries inside /var unless they’re in /var/containers

/var/jb has to be a symlink to somewhere where you’re allowed to execute binaries

[frail cedar]

install it

[paper meteor]

Wdym

Its just a zip with a precompiled procursus

[frail cedar]

is libiosexec in there?

[paper meteor]

Yes /var/containers/jb/usr/lib/libiosexec.1.dylib

I’m not sure how to update the dyld cache to include it

[sonic totem]

Have you signed it with the CT bypass?

[paper meteor]

No, I am not sure how to

[sonic totem]

That’s the problem then

Uhhh someone should have the fastPathSign binary somewhere

@frank fossil

[paper meteor]

Ldid in TrollStore?

[pearl sail]

Hello fake dev

[frank fossil]

try fastPathSign command

[paper meteor]

Where would that be located

[frank fossil]

/var/jb/usr/local/bin

[paper meteor]

Isn’t /var/jb/bin that what I am trying to sign

Well it executes

[frank fossil]

fastPathSign /path/to/macho

[sonic totem]

They don’t have the fastPathSign binary I don’t think

Was wondering if you had a copy

[sonic totem]

Oh nevermind

What was the command you ran?

[paper meteor]

/var/containers/jb/usr/local/bin/fastPathSign /var/containers/jb/bin/bash

[sonic totem]

Add -r at the end

[timid furnace]

/var/containers/jb != /var/jb

[sonic totem]

It’s their symlink

[paper meteor]

Yep

I have it symlinked

[sonic totem]

Also you’ll need to run the bypass on libiosexec

[paper meteor]

Ok so just run it on the dylib

[sonic totem]

Yes

[paper meteor]

Doesn’t seem to fix it

It’s still complaining about it not being in dyld cache

[sonic totem]

What’s the @rpath for your binary

Whether or not it’s actually in dyld cache doesn’t matter

It’s impossible for it to actually be in it

[restive ether]

procursus ballin

[paper meteor]

Ok I symlinked /var/jb to /var/containers/jb

Getting a address boundary error

[paper meteor]

I think I am halfway there

Now I need to get an on device compiler

[acoustic imp]

THEOS!

i mean

https://github.com/kabiroberai/theos-jailed

its 7yr old but u could update it

[faint timber]

been doing it by hand for years

[acoustic imp]

alss an un sambed dev has a v of theos that works on xina/dopa so i would asume it would work on TS@(what ever this is) after you sign and do what ever to everything

user is the "(super user comand)"

[acoustic imp]

@radiant idol i have a tweak idea. its like a walpaper tweak, but i wana know if you think it would be more or less do able for me... so its a wallpaper for LS/HS tweak, where you pick an image. Then on your LS its the regular image then as you swipe up to unlock it zooms in and blurs. With like an amination... like you moving/swiping the homebar/NC up is a time line of the animation... Like ios 16

also i could make it be a video then the like scroll/swipe up of the NC/LS is like you scrubing the video

so u could make a ios16 like ls effect

[radiant idol]

It’s certainly possible

But I couldn’t tell you the difficulty

I personally would need to do some research before trying to make that

[acoustic imp]

oh ok

so deffff not a teslaman project

[radiant idol]

Striving for grand tweak ideas does eventually help you out in the end… if you have dedication

[acoustic imp]

@radiant idol the iOS wallpaper stuff is very crazy

Iv only changed like 3 views

Like why are the two HS images

[radiant idol]

Lmaooooo

[acoustic imp]

iOS is actually so interesting

Like how does it do this

So many like moving parts

Like how does this animation work, how does it still work after I broke sm

Can u like get the source code for it kinda

Like see anything ?

[radiant idol]

unless you reverse engineer it

[acoustic imp]

Like what can I get from the header files from cinder site

[radiant idol]

no

[acoustic imp]

Oh

[radiant idol]

only the methods that you could hook

[acoustic imp]

Can I see the like code in the methods ?

[radiant idol]

No

And you don’t ever be able to get access to the original source code. However if you learn reverse engineering, you’ll be able to approximate the original source code given a decompiled version of the SpringBoard binary

[acoustic imp]

List of things to learn… how to spell, objc, reverse engineering, iOS magic

[radiant idol]

First one is the most important

You seem to be getting better at it though

[granite frigate]

im sure there are plenty of oss wallpaper tweaks

probably can look at what they hook

I was also googling how iOS 16 does their wallpapers

found a useful reddit post https://www.reddit.com/r/iOSBeta/s/IGUS1pL9Ey

essentially it’s just a CAML file that tells different pngs where to go

CAMLs is also used in control center and face id padlock animation

[radiant idol]

Ah beloved CAML files

[granite frigate]

i was researching into them when i was trying to theme my cc without Snowboard and just file replacement

it’s a real pita

[radiant idol]

yep

[radiant idol]

I do know a dev that has a fully working control center theme tweak, he just hasn’t had the time to completely polish it out and release yet

[granite frigate]

ooo

is it the one with lottie animations

[radiant idol]

RuntimeOverflow, if you’ve heard of him

[radiant idol]

Yes

[granite frigate]

yeah

i have a deb of it

[radiant idol]

Ah ok

[granite frigate]

the last resource i found on camls was from a medium post in 2017

or something

maybe you can ask runtimeoverflow @acoustic imp idk

[radiant idol]

he’s kinda busy atm I think (RO I mean)

[granite frigate]

oh alright

[radiant idol]

and by “atm” I mean in the long term

[acoustic imp]

@radiant idol that new like sep bypass downgrade thing. I have an A10 iPad 7th gen on 16.6.1 and I have blobs for iOS 15. Could I update to iOS 17 and like mess around w flex to see how wlaps are done on iOS 17 then downgrade back to 16.6.1 or iOS 15 ?

[radiant idol]

Not sure

Never used

[granite frigate]

oh the owner's not in the server

you can just dm him on twitter though

[paper meteor]

Is anyone else here interested in working on getting a toolchain for TrollStore devices

Because you can’t use the usual jailbreak stuff

https://procursus.social/@khanhduy032/111527040741069818

Did see this but I can’t get the included sileo to work

Nvm I got sileo to open by opening it from TrollStore rather than Home Screen

[cloud yacht]

intresting

[paper meteor]

I can’t add procursus repo

[frail cedar]

It's probably trying to figure out what kind of bootstrap you're using and failing

[paper meteor]

yeah it's a custom build of procursus dropped in /var/containers/jb and symlinked to /var/jb

https://apt.procurs.us/dists/iphoneos-arm64-rootless/1800/

I think I need this

[frail cedar]

Inspect the Sileo source and see how it determines what to do

Figure out what breaks

That's my advice

My guess is that it's trying to figure out what jb you're using

so it can change some behavior accordingly

[granite frigate]

works on my machine

i just grabbed 1900

signed everything recursively with some bash script

profit

it recognises my device as palera1n rootless tho

[frail cedar]

that makes sense

[paper meteor]

1900 does not existr

[granite frigate]

huh

[cloud yacht]

what do those numbers mean?

[velvet path]

it’s the corefoundation version

[cloud yacht]

I mean https://apt.procurs.us/dists/1900/ exisits

[native dune]

1900 is rootless only

[velvet path]

1500 = 12.x
1600 = 13.x
1700 = 14.x
1800 = 15.x
1900 = 16.x
2000 = 17.x (note: 17.x does the wonderful thing of bumping cfver by 100 every major update)

[paper meteor]

how can I point sileo to 1900

[paper meteor]

this

Apt is getting stuck, left it for 5 mins

[lime pivot]

might be failing to fork

[paper meteor]

That sounds quite likely

[unkempt magnet]

Congratz to release meowbrek..!

https://x.com/dora2ios/status/1734569111324418214?s=46

[granite frigate]

Cool!

[young meteor]

ooh

gonna try it

it works

[elder scaffold]

Just curious, which ipad is that?

[young meteor]

iPad 6

[elder scaffold]

thanks.

[inner yoke]

work iphone 8, 15.7, 15.6.1

[granite frigate]

works iphone x 15.6

[median island]

So I know it is possible to change battery percentage and battery text for mdc (for example with cowabonga), would it also be possible to change the color of the battery?

[slender glade]

next time you do work for someone make sure there's a deposit or agreed date for pay... 🙃

[left lantern]

Mmm

[restive ether]

brother

[pearl sail]

Did Serena get scammed into doing free work?

[brazen timber]

ggs

[turbid fjord]

@compact swift Gm, do you know if the shorts endpoint in invidious is the same JSON object as the video endpoint

https://docs.invidious.io/api/#get-apiv1videosid

I saw your issue on GitHub by chance and I’m struggling to get this working. Works fine everywhere except Watchtube and I’m like

It’s a decoding issue I should add*

One from May 13th

Hang on

https://github.com/iv-org/invidious/issues/3801

I’m just baffled as to why it’s not decoding properly. The JSON looks fine when I print it but I’m wonder if there is a small thing I’ve missed out

That will be why then

[cloud yacht]

huh didn't know shorts didn't show publish data on the channel page

looks like piped sets the date to -1

[turbid fjord]

Well damn guess I’m staying up longer tonight fr

This is what is currently used

It works for everything except for shorts

[cloud yacht]

I mean if you need the date, you can fetch the date from the video directly

[turbid fjord]

It says it in the docs? Where?

I couldn’t find it

Oh that

Yeah I’m realising that now

Alright I’ll do that then

Thank you

[turbid fjord]

@compact swift good news it doesn’t break anymore so thank you

Bad news is that it is showing the same video for channels/id endpoint when accessing the latestVideos array and channels/id/shorts

I suppose I’ll have to figure that one out myself but the original issue is solved so ty

Yeah, I was hoping it would grab just shorts

I want just shorts though

[cloud yacht]

Is the latest video a short?

[turbid fjord]

Not here